Edit tour

Windows Analysis Report
http://ww38.heynannyly.online/partner/schuler-group/account

Overview

General Information

Sample URL:	http://ww38.heynannyly.online/partner/schuler-group/account
Analysis ID:	1545551
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

AI detected suspicious URL

HTML page contains hidden javascript code

Queries the volume information (name, serial number etc) of a device

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1932,i,15426486743168307693,15003162677301905896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ww38.heynannyly.online/partner/schuler-group/account" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

HxOutlook.exe (PID: 6496 cmdline: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca MD5: 6F8EAC2C377C8F16D91CB5AC8B8DBF5F)

HxAccounts.exe (PID: 6896 cmdline: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca MD5: 6FEB00C9A2C3FF66230658B3012BAB6A)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: http://ww38.heynannyly.online/partner/schuler-group/account

HTTP Parser: Base64 decoded: <svg fill='#D7D7D7' style="float: right" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Source: http://ww38.heynannyly.online/partner/schuler-group/account	HTTP Parser: No favicon
Source: http://ww38.heynannyly.online/partner/schuler-group/account	HTTP Parser: No favicon
Source: http://ww38.heynannyly.online/partner/schuler-group/account	HTTP Parser: No favicon
Source: http://ww38.heynannyly.online/partner/schuler-group/account	HTTP Parser: No favicon
Source: http://ww38.heynannyly.online/partner/schuler-group/account	HTTP Parser: No favicon
Source: http://ww38.heynannyly.online/privacy.html	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49856 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww38.heynannyly.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.heynannyly.online%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MjI1YWU1N2VmZjB8fHwxNzMwMzA0NzQxLjU1MTV8ZDIxNDAwM2I2YmE2YzgyZDY4M2ExMzU3ZTQ0ODY0NjRiZDI5NzkyM3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGQ4NjNjY2QzYjFiZGEyZmVhN2RjYjMxODJhYjBjMzhhYTRkYmMyNmZ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107%2C49280906%2C72771953&format=r3%7Cs&nocache=9531730304744137&num=0&output=afd_ads&domain_name=ww38.heynannyly.online&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1730304744138&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=691096265&rurl=http%3A%2F%2Fww38.heynannyly.online%2Fpartner%2Fschuler-group%2Faccount HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ww38.heynannyly.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=2pr8pnsbhk5i&aqid=6loiZ7L3FaTjjuwPoIa0yAI&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=691096265&csala=8%7C0%7C1979%7C1640%7C257&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww38.heynannyly.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ak1dxsfd5oey&aqid=6loiZ7L3FaTjjuwPoIa0yAI&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=691096265&csala=8%7C0%7C1979%7C1640%7C257&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww38.heynannyly.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /partner/schuler-group/account HTTP/1.1Host: ww38.heynannyly.onlineConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=heynannyly.online&toggle=browserjs&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D HTTP/1.1Host: ww38.heynannyly.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.heynannyly.online/partner/schuler-group/accountAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=67225ae5&token=d863ccd3b1bda2fea7dcb3182ab0c38aa4dbc26f HTTP/1.1Host: ww38.heynannyly.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.heynannyly.online/partner/schuler-group/accountAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.heynannyly.online/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=heynannyly.online&toggle=browserjs&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D HTTP/1.1Host: ww38.heynannyly.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=heynannyly.online&caf=1&toggle=answercheck&answer=yes&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D HTTP/1.1Host: ww38.heynannyly.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.heynannyly.online/partner/schuler-group/accountAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww38.heynannyly.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.heynannyly.online/partner/schuler-group/accountAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=heynannyly.online&caf=1&toggle=answercheck&answer=yes&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D HTTP/1.1Host: ww38.heynannyly.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww38.heynannyly.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg
Source: global traffic	HTTP traffic detected: GET /privacy.html HTTP/1.1Host: ww38.heynannyly.onlineConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://ww38.heynannyly.online/partner/schuler-group/accountAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg

Source: global traffic	DNS traffic detected: DNS query: ww38.heynannyly.online
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com

Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: HxAccounts.exe, 0000000C.00000002.2509636338.0000026C0AA51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/
Source: HxAccounts.exe, 0000000C.00000002.2509636338.0000026C0AA51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/gecacheFileFullNotificationPercentagecacheMemoryFullNotificationPe
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.aadrm.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.aadrm.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.cortana.ai
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.microsoftstream.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.office.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.onedrive.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://api.scheduler.
Source: HxAccounts.exe, 0000000C.00000002.2509591890.0000026C0AA2B000.00000004.00000020.00020000.00000000.sdmp, 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://app.powerbi.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://augloop.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://augloop.office.com/v2
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: HxAccounts.exe, 0000000C.00000002.2509445416.0000026C0AA00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/
Source: HxAccounts.exe, 0000000C.00000002.2509445416.0000026C0AA00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/f
Source: HxAccounts.exe, 0000000C.00000002.2509445416.0000026C0AA00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az815563.vo.msecnd.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://canary.designerapp.
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-assets
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-dynamic-strings
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-home-screen
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-toolbar
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cdn.entity.
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://clients.config.office.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://clients.config.office.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: HxAccounts.exe, 0000000C.00000002.2509636338.0000026C0AA51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: HxAccounts.exe, 0000000C.00000002.2509636338.0000026C0AA51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.net/config/v1/
Source: HxAccounts.exe, 0000000C.00000002.2509636338.0000026C0AA51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.net/config/v1/cacheFileFullNotificationPercentageehttp://test-exp-s2s.msed
Source: HxAccounts.exe, 0000000C.00000002.2509636338.0000026C0AA51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.net/config/v1/https://config.edge.skype.net/config/v1/cacheFileFullNotific
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cortana.ai
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cortana.ai/api
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://cr.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://d.docs.live.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://designerappservice.officeapps.live.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://dev.cortana.ai
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://devnull.onenote.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://directory.services.
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ecs.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://edge.skype.com/rps
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: chromecache_59.2.dr, chromecache_69.2.dr, chromecache_70.2.dr, chromecache_63.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://graph.windows.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://graph.windows.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&premium=1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&premium=1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&premium=1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ic3.teams.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://invites.office.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://lifecycle.office.com
Source: HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/login.windows.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://login.microsoftonline.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp, 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://login.windows.local
Source: HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.local/
Source: HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net
Source: HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://make.powerautomate.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://management.azure.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://management.azure.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://messaging.action.office.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://messaging.office.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://mss.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ncus.contentsync.
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: HxAccounts.exe, 0000000C.00000002.2509495892.0000026C0AA13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexus.officeapps.live.com
Source: HxAccounts.exe, 0000000C.00000002.2509495892.0000026C0AA13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexusrules.officeapps.live.com?
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://notification.m365.svc.cloud.microsoft/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://notification.m365.svc.cloud.microsoft/PushNotifications.Register
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://officeapps.live.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://officepyservice.office.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://onedrive.live.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://outlook.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://outlook.office.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://outlook.office365.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://outlook.office365.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: chromecache_59.2.dr, chromecache_69.2.dr, chromecache_70.2.dr, chromecache_63.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: chromecache_59.2.dr, chromecache_69.2.dr, chromecache_70.2.dr, chromecache_63.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://powerlift.acompli.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://res.cdn.office.net
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://service.powerapps.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://settings.outlook.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://staging.cortana.ai
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-dark-1
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-dark-2
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-100
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-150
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-200
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-light-
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://substrate.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: chromecache_59.2.dr, chromecache_69.2.dr, chromecache_70.2.dr, chromecache_63.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://tasks.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://webshell.suite.office.com
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://wus2.contentsync.
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: chromecache_59.2.dr, chromecache_69.2.dr, chromecache_70.2.dr, chromecache_63.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_59.2.dr, chromecache_69.2.dr, chromecache_70.2.dr, chromecache_63.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: 997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	String found in binary or memory: https://www.yammer.com
Source: HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com
Source: HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com/xI
Source: HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com5

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49856 version: TLS 1.2

Source: classification engine

Classification label: sus21.win@20/36@26/16

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

File created: C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1932,i,15426486743168307693,15003162677301905896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ww38.heynannyly.online/partner/schuler-group/account"
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1932,i,15426486743168307693,15003162677301905896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: microsoft.applications.telemetry.windows.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msoimm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso40uiimm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso30imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.core.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.word.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso50imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.model.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxcomm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.energy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.view.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxshared.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.viewmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: clipc.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.resources.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hx.mail.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxcalendar.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.remotedesktop.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.systemid.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.retailinfo.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msxml6.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winrttracing.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: photometadatahandler.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ploptin.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: webservices.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataaccountapis.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataplatformhelperutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.accountscontrol.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: accountsrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: aphostclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.model.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: microsoft.applications.telemetry.windows.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso30imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: office.ui.xaml.hxaccounts.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxcomm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.energy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.accountscontrol.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.security.authentication.web.core.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: winrttracing.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.resources.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msftedit.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: globinputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wuceffects.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uiautomationcore.dll	Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628}\InProcServer32

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe

File opened: C:\Windows\SYSTEM32\msftedit.dll

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: \REGISTRY\A\{606a3a93-ad36-9b15-3780-a533c0cbc848}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office Test\Special\PerfImm

Jump to behavior

Persistence and Installation Behavior

AI detected suspicious URL

Source: Email

JoeBoxAI: AI detected Typosquatting in URL: URL: http://ww38.heynannyly.online

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: settings.dat.7.dr

Binary or memory string: VMware, Inc. VMware20,1NE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 DLL Side-Loading	1 Process Injection	LSASS Memory	12 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://shell.suite.office.com:1443	0%	URL Reputation	safe
https://designerapp.azurewebsites.net	0%	URL Reputation	safe
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://autodiscover-s.outlook.com/	0%	URL Reputation	safe
https://useraudit.o365auditrealtimeingestion.manage.office.com	0%	URL Reputation	safe
https://outlook.office365.com/connectors	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	0%	URL Reputation	safe
https://cdn.entity.	0%	URL Reputation	safe
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://lookup.onenote.com/lookup/geolocation/v1	0%	URL Reputation	safe
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	0%	URL Reputation	safe
https://api.aadrm.com/	0%	URL Reputation	safe
https://canary.designerapp.	0%	URL Reputation	safe
https://www.yammer.com	0%	URL Reputation	safe
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	0%	URL Reputation	safe
https://cr.office.com	0%	URL Reputation	safe
https://messagebroker.mobile.m365.svc.cloud.microsoft	0%	URL Reputation	safe
https://edge.skype.com/registrar/prod	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://tasks.office.com	0%	URL Reputation	safe
https://officeci.azurewebsites.net/api/	0%	URL Reputation	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://edge.skype.com/rps	0%	URL Reputation	safe
https://messaging.engagement.office.com/	0%	URL Reputation	safe
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://api.powerbi.com/v1.0/myorg/groups	0%	URL Reputation	safe
https://web.microsoftstream.com/video/	0%	URL Reputation	safe
https://api.addins.store.officeppe.com/addinstemplate	0%	URL Reputation	safe
https://graph.windows.net	0%	URL Reputation	safe
https://consent.config.office.com/consentcheckin/v1.0/consents	0%	URL Reputation	safe
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	0%	URL Reputation	safe
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	0%	URL Reputation	safe
https://safelinks.protection.outlook.com/api/GetPolicy	0%	URL Reputation	safe
https://ncus.contentsync.	0%	URL Reputation	safe
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	0%	URL Reputation	safe
http://weather.service.msn.com/data.aspx	0%	URL Reputation	safe
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	0%	URL Reputation	safe
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	0%	URL Reputation	safe
https://mss.office.com	0%	URL Reputation	safe
https://pushchannel.1drv.ms	0%	URL Reputation	safe
https://wus2.contentsync.	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/ios	0%	URL Reputation	safe
https://api.addins.omex.office.net/api/addins/search	0%	URL Reputation	safe
https://outlook.office365.com/api/v1.0/me/Activities	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/android/policies	0%	URL Reputation	safe
https://entitlement.diagnostics.office.com	0%	URL Reputation	safe
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	0%	URL Reputation	safe
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://substrate.office.com/search/api/v1/SearchHistory	0%	URL Reputation	safe
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation	0%	URL Reputation	safe
https://service.powerapps.com	0%	URL Reputation	safe
https://graph.windows.net/	0%	URL Reputation	safe
https://devnull.onenote.com	0%	URL Reputation	safe
https://messaging.office.com/	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	0%	URL Reputation	safe
https://skyapi.live.net/Activity/	0%	URL Reputation	safe
https://messaging.action.office.com/setcampaignaction	0%	URL Reputation	safe
https://visio.uservoice.com/forums/368202-visio-on-devices	0%	URL Reputation	safe
https://staging.cortana.ai	0%	URL Reputation	safe
https://augloop.office.com	0%	URL Reputation	safe
https://api.diagnosticssdf.office.com/v2/file	0%	URL Reputation	safe
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory	0%	URL Reputation	safe
https://officepyservice.office.net/	0%	URL Reputation	safe
https://api.diagnostics.office.com	0%	URL Reputation	safe
https://store.office.de/addinstemplate	0%	URL Reputation	safe
https://wus2.pagecontentsync.	0%	URL Reputation	safe
https://api.powerbi.com/v1.0/myorg/datasets	0%	URL Reputation	safe
https://cortana.ai/api	0%	URL Reputation	safe
https://api.diagnosticssdf.office.com	0%	URL Reputation	safe
https://login.microsoftonline.com/	0%	URL Reputation	safe
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	0%	URL Reputation	safe
https://api.addins.omex.office.net/appinfo/query	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/tenantassociationkey	0%	URL Reputation	safe
https://powerlift.acompli.net	0%	URL Reputation	safe
https://cortana.ai	0%	URL Reputation	safe
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
212218.parkingcrew.net	13.248.148.254	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
syndicatedsearch.goog	142.250.185.238	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
googlehosted.l.googleusercontent.com	216.58.212.129	true	false	unknown
d38psrni17bvxu.cloudfront.net	18.66.121.190	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
ww38.heynannyly.online	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false		unknown
http://ww38.heynannyly.online/track.php?domain=heynannyly.online&toggle=browserjs&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D	false		unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2	false		unknown
http://ww38.heynannyly.online/favicon.ico	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false	URL Reputation: safe	unknown
http://ww38.heynannyly.online/partner/schuler-group/account	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://shell.suite.office.com:1443	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://designerapp.azurewebsites.net	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://syndicatedsearch.goog	chromecache_59.2.dr, chromecache_69.2.dr, chromecache_70.2.dr, chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://useraudit.o365auditrealtimeingestion.manage.office.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://outlook.office365.com/connectors	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://cdn.entity.	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://rpsticket.partnerservices.getmicrosoftkey.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://api.aadrm.com/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://canary.designerapp.	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://www.yammer.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://api.microsoftstream.com/api/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false		unknown
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://cr.office.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://otelrules.svc.static.microsoft	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false		unknown
https://edge.skype.com/registrar/prod	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://res.getmicrosoftkey.com/api/redemptionevents	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://tasks.office.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_59.2.dr, chromecache_69.2.dr, chromecache_70.2.dr, chromecache_63.2.dr	false		unknown
https://officeci.azurewebsites.net/api/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://xsts.auth.xboxlive.com5	HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://my.microsoftpersonalcontent.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false		unknown
https://store.office.cn/addinstemplate	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://edge.skype.com/rps	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://messaging.engagement.office.com/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://xsts.auth.xboxlive.com/xI	HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://www.odwebp.svc.ms	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://api.powerbi.com/v1.0/myorg/groups	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://web.microsoftstream.com/video/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://api.addins.store.officeppe.com/addinstemplate	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://graph.windows.net	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://consent.config.office.com/consentcheckin/v1.0/consents	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://notification.m365.svc.cloud.microsoft/PushNotifications.Register	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false		unknown
https://d.docs.live.net	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false		unknown
https://safelinks.protection.outlook.com/api/GetPolicy	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://ncus.contentsync.	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
http://weather.service.msn.com/data.aspx	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://mss.office.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://pushchannel.1drv.ms	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://wus2.contentsync.	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/ios	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://api.addins.omex.office.net/api/addins/search	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://xsts.auth.xboxlive.com	HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://outlook.office365.com/api/v1.0/me/Activities	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/android/policies	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://entitlement.diagnostics.office.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://outlook.office.com/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false		unknown
https://storage.live.com/clientlogs/uploadlocation	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false		unknown
https://login.microsoftonline.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://substrate.office.com/search/api/v1/SearchHistory	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://service.powerapps.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://graph.windows.net/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://devnull.onenote.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://messaging.office.com/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://skyapi.live.net/Activity/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://api.cortana.ai	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false		unknown
https://messaging.action.office.com/setcampaignaction	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://visio.uservoice.com/forums/368202-visio-on-devices	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://staging.cortana.ai	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://onedrive.live.com/embed?	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false		unknown
https://augloop.office.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://api.diagnosticssdf.office.com/v2/file	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://login.windows.local/	HxAccounts.exe, 0000000C.00000002.2512405255.0000026C11E82000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://officepyservice.office.net/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://api.diagnostics.office.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://store.office.de/addinstemplate	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://wus2.pagecontentsync.	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://api.powerbi.com/v1.0/myorg/datasets	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://cortana.ai/api	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://config.edge.skype.net/config/v1/https://config.edge.skype.net/config/v1/cacheFileFullNotific	HxAccounts.exe, 0000000C.00000002.2509636338.0000026C0AA51000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://api.diagnosticssdf.office.com	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com/	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://api.addins.omex.office.net/appinfo/query	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/tenantassociationkey	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://powerlift.acompli.net	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://cortana.ai	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	997766A9-B413-4FC1-862C-BFE2A7B54F69.7.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.129	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
18.66.121.190	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
76.223.26.96	unknown	United States	16509	AMAZON-02US	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
13.248.148.254	212218.parkingcrew.net	United States	16509	AMAZON-02US	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
142.250.185.238	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
172.217.18.1	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.18.100	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.16
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545551
Start date and time:	2024-10-30 17:11:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://ww38.heynannyly.online/partner/schuler-group/account
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus21.win@20/36@26/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, HxTsr.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.186.142, 66.102.1.84, 34.104.35.123, 142.250.186.66, 142.250.186.98, 52.149.20.212, 199.232.210.172, 192.229.221.95, 20.242.39.171, 52.109.89.18, 13.107.5.88, 13.107.42.16, 51.11.168.232, 172.217.16.195, 51.104.136.2
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, partner.googleadservices.com, outlookmobile-office365-tas-msedge-net.e-0009.e-msedge.net, settings-prod-neu-2.northeurope.cloudapp.azure.com, clientservices.googleapis.com, e-0009.e-msedge.net, weu-azsc-config.officeapps.live.com, clients2.google.com, ocsp.digicert.com, atm-settingsfe-prod-geo2.trafficmanager.net, config-edge-skype.l-0007.l-msedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, officeclient.microsoft.com, settings-prod-uks-1.uksouth.cloudapp.azure.com, l-0007.l-msedge.net, wu-b-net.trafficmanager.net, config.edge.skype.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, prod.configsvc1.live.com.akadns.net, ctldl.windowsupdate.com, fe3cr.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://ww38.heynannyly.online/partner/schuler-group/account

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\997766A9-B413-4FC1-862C-BFE2A7B54F69

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	177048
Entropy (8bit):	5.293853480931102
Encrypted:	false
SSDEEP:	1536:zi2XPRAqFbz41gLErLe7HW8QM/hMOcAZl1p5ihs7gXX9EIJAOoYgYdGVF8S7CC:Nie7HW8QM/CXiw0x
MD5:	71406C772336DCDC26CC103C3A527321
SHA1:	F9FA8451748CADD4D93D4A33991D27A99564C854
SHA-256:	569FF2532585877CEC49697150EF0419099715C8A0A605612F1E610EA511D959
SHA-512:	AF447D9D2995973B77695A833CE164C7E9D095EB63626948A947F69CA54282385763EB1646E39628A02AE5E8C307A5E17D1738C67436CECF7C861621A947FA3B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-10-30T16:13:14">.. Build: 16.0.18222.40125-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxAccountsAlwaysOnLog.etl

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.1254394540868285
Encrypted:	false
SSDEEP:	12:hXPqF69Fq5TMK8CkRKQ1UMCl2M+aqc2EfK8CE:l1tKfk9SMClCaoEfKfE
MD5:	D604DBDCDF83328EE07A0B6781487876
SHA1:	C72115C3C17A28714E0A59BE4CFE374749036010
SHA-256:	49D269FC6681C92FAEA2C2FEF8DC4AF9C01FD884EDE1B3FF3F7DD5FB46A15B8A
SHA-512:	583C4821A98CCF5703F832493B56238DD6414B75772CF34C1326D6E6D526119F25135BE2C66A7BD6748DD303B237C949122339F97E79AD17931762F4DA631351
Malicious:	false
Reputation:	low
Preview:	............................................................................d............;.:....................eJ..............Zb..............................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1...........................................................`.T..................*..........H.x.A.c.c.o.u.n.t.s.A.l.w.a.y.s.O.n.L.o.g.g.e.r...C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.P.a.c.k.a.g.e.s.\.m.i.c.r.o.s.o.f.t...w.i.n.d.o.w.s.c.o.m.m.u.n.i.c.a.t.i.o.n.s.a.p.p.s._.8.w.e.k.y.b.3.d.8.b.b.w.e.\.L.o.c.a.l.S.t.a.t.e.\.H.x.A.c.c.o.u.n.t.s.A.l.w.a.y.s.O.n.L.o.g...e.t.l...........P.P...........:....................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxmAlwaysOnLog.etl

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.12068040190143067
Encrypted:	false
SSDEEP:	12:maXPqF69Fq5Tn8C8RKQ1UMCl2M+aqc2EOCQv:mo1mf89SMClCaoEFw
MD5:	50E86F1762265CAAAFE89FA050EA77A9
SHA1:	48EDFE8F76A6B69B35C8678F97422B91F275E0EF
SHA-256:	BACC45B3513E93B6433569B2D614E2DD641DBD71DADB597322716C12E1CCEE5C
SHA-512:	37503929FA3D3DDFCA403E94D8D80B560ADEBC8B535CD4026DA66EADC1E5120708C1D15AB1F750CC9B2B9786914931F76C1E91B18BBAB637A11583AE8EB54321
Malicious:	false
Reputation:	low
Preview:	............................................................................B.......`....p.7....................eJ..............Zb..............................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1...........................................................`.T..............;/..*..........H.x.M.A.l.w.a.y.s.O.n.L.o.g...C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.P.a.c.k.a.g.e.s.\.m.i.c.r.o.s.o.f.t...w.i.n.d.o.w.s.c.o.m.m.u.n.i.c.a.t.i.o.n.s.a.p.p.s._.8.w.e.k.y.b.3.d.8.b.b.w.e.\.L.o.c.a.l.S.t.a.t.e.\.H.x.m.A.l.w.a.y.s.O.n.L.o.g...e.t.l.............P.P.....`......7....................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat

Download File

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	524288
Entropy (8bit):	0.11359904374210399
Encrypted:	false
SSDEEP:	96:+JC/3IKaIh8N/y+e5/dhHlAvykbseBGIYawg8Ul49Ys3GxjRbt0Gsj:uC/3IKaIxVlErN349Ys3G7t0
MD5:	0F9DD58CC42AE5A6D9FAC39DBC06F8AF
SHA1:	7333F6C920FFE04C85A1DA06E12DF96EE4153D54
SHA-256:	E9561A0EF46D32AC450529A1B4EEC0C60338E1FCBA5377F710DE967027622632
SHA-512:	F51CDDD1EEF449AD51C01D51FDE9C84F3367DBD9B88367C1789D7211CFED651DA31E2AAD4C077AE97E16FD9869AF3C9CC0CFC6FF59212D2C32AD04637B13D31F
Malicious:	false
Reputation:	low
Preview:	regf........b.Q.7.................. .... ......y.b.3.d.8.b.b.w.e.\.S.e.t.t.i.n.g.s.\.s.e.t.t.i.n.g.s...d.a.t...y..j.....J.....y..j.....J.........z..j.....J.....rmtm:.....................................................................................................................................................................................................................................................................................................................................................p0........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 15987
Category:	downloaded
Size (bytes):	6074
Entropy (8bit):	7.967193713007924
Encrypted:	false
SSDEEP:	96:Y5lJusHJBrM8b8txGbywgoYEcvQUZfIk5WIzvdM9eTxqdxlhdVhQ9HZN1BE2MGM0:M8UJFM86xGrbYbYpui9ms3PG95N/E2MQ
MD5:	46E8C543AD93C3ED87F78D7A0CF25604
SHA1:	5C67E2D37DDCD5BAE961DB18682C5C24FDCA9495
SHA-256:	49EFC9B0815E2A4B18AC5BD0141994CFE65CD43D856F2EC0A62C0BA1CA10666E
SHA-512:	649A28BF7A32A2D733568B7318955974A007FB965E409496A5719F076F9622F008C3EEE8286131866E12041B799A58DBD470430D5C3DDFA71557644DB62E0F7A
Malicious:	false
Reputation:	low
URL:	http://ww38.heynannyly.online/partner/schuler-group/account
Preview:	...........[yw.......9/....l.C.c..7.@N&GH...DK.,....w.JB../y.{...'6R-.n...>..]...W....[.w?.bh.......[Tb...v...t.'.Y.>=>...ng..m.....i...xc..Z..]..^....m.j\|.4...Q.K.<.G..3..e.y.k..G...ES...t....t.V.:._...IuvZ.^W?.....buz<.......y....x........`r.?.\|.....].i......6.....Z...dv}.N....m.:.2.Tb.\|l.^%6..I9...f.Y>..L...03'z..K.....cD!...w..\|.3_...I..65.*......Z...).x..\|6.3..H....1.2.{.R,....J..d......3.....=.:K.b.ojV..5.U.I....=J.N.g....a..o.....5.^X..c[..>dD.../,...aj......5.y....k........Q.u..QV....g2F.4.\...t...n9S..b.i........p0^..I..^\|O....&L....c.....YY..'s......x..W..&..(c.}.......n...d..D..OB...G.3}....f...O......"..,..7..^O..4!...d.4cK..yb.vM..'Fk.....;.Vq.2..f..}.z.[V...2.:..i.UEU GJN..{;w,........1PU.G....[m..-G...P....".+p..DV.F..m....$Q.J./..'.%&Y .hS.ASj.#.Ou..(.\.0.^Y.....r{.....yP..fm....A.; .Q..J<.:.B..l.mV....#>...O...iAG=..R.sM.r~j...+.u.v>.3...u.Xp..+......n..Q.D........0...H.i..X........'VJ._....I+..xD...otl_.TEw...&.;b..'.L...

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 13914
Category:	downloaded
Size (bytes):	5390
Entropy (8bit):	7.964839351197916
Encrypted:	false
SSDEEP:	96:qFfHK5O8aNe7IwBihfpzjM0mJLua/BM6Yzlu6spbQMOMx+eL:qZHgO8aNiIthpjM9iWBRwAPOUb
MD5:	CDB1844616F8EB20DFE0E022BC34C6AF
SHA1:	254D9594044F9E7A20B58A01EF319A50C4DE8E60
SHA-256:	8EE6F23805DDE8DFA23850A3BF892FB916D38A592AF0DDC49556E6374A52304C
SHA-512:	7687D10797C5888FCE67AA68904749B8915E5F45BEDC0F3FE2AE6F18E0D9781048EF150B2168D64EB02C37B2582A7CE02266EBC9FA4EAB8D3077E9C32424486A
Malicious:	false
Reputation:	low
URL:	http://ww38.heynannyly.online/privacy.html
Preview:	...........[.n.I.}..E.......K."Y..-.6..$P..~Z$..d..U.UE.A..b?i.a...E.....t..2....'..:....r..v...2V..~..]..A......L..??L>^....:).2J...z...,.2;....uw}.M.yo2.}.ZG..~<(.3.a.v.....qR.......Q.N.o;2...S...........m.2MJ....Mf:..{.)...}.`...oW...uG..J........l.m.G..g?}v^......u....z_E.....yh.3u.F..l...~...y.....'s...L.a...0n..y...$<..e.o.:..LW....]g_..H....L........G37...n...o8W....O'''o~{.].:.L.%.l...(,.g.O_r..J.pb.U.b.g....J.#,.6.5....p....<./.....P....B.8..Ylf%%l.......B...&..41......!..."...l...}K%?...M...d{y...q.=......G4Q....AM7,....X...Y}[P....[.XIb..54...-8S.....'..U.....4.SU.........$..........).....8.....F0...R.E=.0.....,._..Ks.".I.<.....%e.....OO...8N...nv.}QC...P.......E...Rx..rqT....g..n...~../k..0.'S...Bx..9y...F..u..s..f..\|..o;.f..\|q\|q;.}._~U.7.e.........x..k.c......p%\|.]L.:.W.t.=..!"s's..T.r...L........<}........C..A .q.\.e....jp1.l...Q.*....&mfUQ.9..H.......-......(((vjo.....-..J...@.Yt....&7...`Z...P'.N.....(u...Y.T.c.f...

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (388), with no line terminators
Category:	dropped
Size (bytes):	388
Entropy (8bit):	5.435354216190219
Encrypted:	false
SSDEEP:	12:xW7NWcuWncE8YG7H8TN8WcuWnlxUvyYG7n:zMnN89z8T3MnlxUq97n
MD5:	5D7A9DFC06CA09AB5D0B7E22C449C9D5
SHA1:	97DD4DFC918C9A0F3B8344BD571DA45587897B44
SHA-256:	7CE77F465AF21AA4A7DF9EC9CAB41D87F4CED7DEA166795B2D69E747F816D622
SHA-512:	63C47F491E02F6DE5B3A7DBAA283F15295B13C94C5669AABC7E92256CFE06236C8D4A978126F5AF6DEF25C3172789B2F2627ABCDC2249AB1584CCB7442F91042
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=c1c9f17e79665af7:T=1730304747:RT=1730304747:S=ALNI_MYOa8IFyGGRRYe4brXv3iI2rmzK8g","_expires_":1764000747,"_path_":"/","_domain_":"heynannyly.online","_version_":1},{"_value_":"UID=00000f1dd986ad3a:T=1730304747:RT=1730304747:S=ALNI_MZgV1OKwuA_wwhpQqx5QsuFRAYbow","_expires_":1764000747,"_path_":"/","_domain_":"heynannyly.online","_version_":2}]});

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14120)
Category:	downloaded
Size (bytes):	14938
Entropy (8bit):	5.4898520806022235
Encrypted:	false
SSDEEP:	96:2E/yk2iIlb5lphMzwronb86Lgh3hvLNYrWielMVD7w96Dve6l2l/MVDSw96Dyevj:2E12iMpgbLLgh3VLWrBegeflUeAkdGwN
MD5:	3BBBC3D3BB9D97F48B79254CEB303993
SHA1:	7CF8B5E9F8D40D526F259E26D0AF8E66C4707980
SHA-256:	459BC6CD22055B8AF29953E0ED0E1A06567749958F1444B24BF6E015483D81FB
SHA-512:	0718C974D7B58B321A74BC9FD2DD0C339FC1EA2FBD7EC68473BAFB5556063AB13253D6F43DE98EA5839DF039DF31C1EE02382CDC0C844816DB4146F9868B73DA
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.heynannyly.online%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MjI1YWU1N2VmZjB8fHwxNzMwMzA0NzQxLjU1MTV8ZDIxNDAwM2I2YmE2YzgyZDY4M2ExMzU3ZTQ0ODY0NjRiZDI5NzkyM3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGQ4NjNjY2QzYjFiZGEyZmVhN2RjYjMxODJhYjBjMzhhYTRkYmMyNmZ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107%2C49280906%2C72771953&format=r3%7Cs&nocache=9531730304744137&num=0&output=afd_ads&domain_name=ww38.heynannyly.online&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1730304744138&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=691096265&rurl=http%3A%2F%2Fww38.heynannyly.online%2Fpartner%2Fschuler-group%2Faccount
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ww38.heynannyly.online/track.php?domain=heynannyly.online&toggle=browserjs&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D
Preview:	....................

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	downloaded
Size (bytes):	153679
Entropy (8bit):	5.540329933673366
Encrypted:	false
SSDEEP:	1536:X916arcaGxRkkVPyXpKHhiaCnAJy05IjP6P4zeHHWGEfpH00fwBqg+GCSvlPbu15:tx6yhuHHWpfpU0YBWG10s8vJxx8sVj
MD5:	0809CD6525A70D185C2BFB9A22B7857F
SHA1:	31D39CE6DB45A93757518391245EDAB77ADAFEF8
SHA-256:	BA2CC8E329AC7E9EFEE6CCF5F91E382DD473EF1A9D74C74D2CCAAC17612A59DA
SHA-512:	FBEEB5D9FC8E38D43341EFBD4244E2E44732F358DE84C25F7ABCBCFF55DEE0985042E933AE7432E85A1D01BA71F3108CE82A543FC6B81F6F821715E828500B58
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0,"heterodyne_test":372}}};var n;function

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	downloaded
Size (bytes):	152276
Entropy (8bit):	5.542061066853741
Encrypted:	false
SSDEEP:	1536:iyJCQIy6LX5WronAH9iVQnAyRpLUjUns4HwRn21r7A/wpAgLCMytX+C2l1iMr3T6:AWRBW4HwhOHA4phCm6c3T/Lg//KS
MD5:	94CF361DDA91396E4D48007B22C5F921
SHA1:	628885BF7B742BB47C53381954E7444525FB01E7
SHA-256:	760C3AA75DF72B4E98E793ACBCC900FDD00BF4770E3EF5A65E32CBC7FB86E386
SHA-512:	A6A0BFBE4AAB7D19200D7FD331AFFA142C2A061EBFD1F61075AEA1BA3BF3DCECFAFE24FBCC9F186A67308984A8B3D84FD38197A12C18E261F1B6966E5FB36A8B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"1406353262123477771",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0,"heterodyne_test":372}}};var n;function

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://ww38.heynannyly.online/ls.php?t=67225ae5&token=d863ccd3b1bda2fea7dcb3182ab0c38aa4dbc26f
Preview:	{"success":true}

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ww38.heynannyly.online/track.php?domain=heynannyly.online&caf=1&toggle=answercheck&answer=yes&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D
Preview:	....................

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (388), with no line terminators
Category:	downloaded
Size (bytes):	388
Entropy (8bit):	5.415603453223861
Encrypted:	false
SSDEEP:	12:xWjV+juWuWyaDKC+DG7H8tWuWyKcNcyDG7n:6YjvvyaDsiz8ovyHvi7n
MD5:	7F9A8575028235D4A66371F9494FCB3A
SHA1:	87CB2C2E96762CD291AD0148728B6EF1B5596394
SHA-256:	6D4D0192F7385FD0A452F628B1AB61CF8423346B8AB2E339A489BCB35A2BC870
SHA-512:	BE745A9B9286CC8B1D5AF56CAEB25052BF41E922B093364F8660A76C506D07ABF060D84910DB648936CBD9C1CD68FB60AC9A1B6CA4EFE8452E22542B3604B69B
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=ww38.heynannyly.online&client=dp-teaminternet09_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg","_expires_":1764000746,"_path_":"/","_domain_":"heynannyly.online","_version_":1},{"_value_":"UID=00000f1dd9ac6f4f:T=1730304746:RT=1730304746:S=ALNI_MZHYFKNPHlzyhJYkHluhO2lk4AASw","_expires_":1764000746,"_path_":"/","_domain_":"heynannyly.online","_version_":2}]});

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	dropped
Size (bytes):	153650
Entropy (8bit):	5.540399680670788
Encrypted:	false
SSDEEP:	1536:r916arcaGxRkkVPyXpKHhiaCnAJy05IjP6P4zeHHWGEfpH00fwBqg+GCSvlPbu15:Zx6yhuHHWpfpU0YBWG10s8vJxx8sVj
MD5:	8A0129D000CA584D54C1C80AA013947A
SHA1:	A67A4066A73C5881CD3EEA6E55A220D4E8077EA4
SHA-256:	0EA9EA9FC59F245C2C361B322E0B70CFBC3CFA4DD243DC0E28F7FF7C558EB2B3
SHA-512:	B480A188BCBABCEBFC999B4EB7D1BDBC68A040C53445C5927754E0BDE3F6F2E0C9CDE2DF5CC7D6A3C048E4B83ABFC1DE38250E596F8892B571AEB567FC141CCA
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return function

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	dropped
Size (bytes):	152261
Entropy (8bit):	5.541959041583693
Encrypted:	false
SSDEEP:	1536:ByJCQIy6LX5WronAH9iVQnAyRpLUjUns4HwRn21r7A/wpAgLCMytX+C2l1iMr3T6:dWRBW4HwhOHA4phCm6c3T/Lg//KS
MD5:	BE94AF7EA80A8A799A5FB3654258F84C
SHA1:	887D3603D647B21AA556BC4B8C7555DAEDB444EF
SHA-256:	208D72970C1E310911B23C9B1226FEE1FFA615E3E905CB692869E30015F9EA89
SHA-512:	B601892312AA4EC7956D03642EF8641DA7D1C35CD7C8B2978EBA360569D42EDD7095E3CBF4B32CB3D9B9A2F79AE13CAC36B20D336EF36B78ABFC479BDDB23CD5
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"1406353262123477771",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0}}};var n;function aa(a){var b=0;

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 17:12:16.174264908 CET	49675	443	192.168.2.4	173.222.162.32
Oct 30, 2024 17:12:20.906409025 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:20.907131910 CET	49737	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:20.911871910 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:20.911936045 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:20.912098885 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:20.912658930 CET	80	49737	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:20.912714958 CET	49737	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:20.917498112 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:21.681483030 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:21.681507111 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:21.681519985 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:21.681530952 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:21.681545019 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:21.681600094 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:21.681636095 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:21.681674957 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:22.084697962 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:22.090353966 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:22.338941097 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:22.391617060 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:22.821223021 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:22.826847076 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:22.839845896 CET	49740	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:22.845272064 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:22.845372915 CET	49740	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:22.846303940 CET	49740	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:22.851680040 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:22.941880941 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:22.941935062 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:22.941992998 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:22.942876101 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:22.942886114 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:23.093751907 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:23.139098883 CET	49742	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:12:23.139137983 CET	443	49742	216.58.206.36	192.168.2.4
Oct 30, 2024 17:12:23.139297009 CET	49742	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:12:23.139791012 CET	49742	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:12:23.139807940 CET	443	49742	216.58.206.36	192.168.2.4
Oct 30, 2024 17:12:23.143832922 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:23.630992889 CET	49743	80	192.168.2.4	76.223.26.96
Oct 30, 2024 17:12:23.636493921 CET	80	49743	76.223.26.96	192.168.2.4
Oct 30, 2024 17:12:23.636568069 CET	49743	80	192.168.2.4	76.223.26.96
Oct 30, 2024 17:12:23.636786938 CET	49743	80	192.168.2.4	76.223.26.96
Oct 30, 2024 17:12:23.642139912 CET	80	49743	76.223.26.96	192.168.2.4
Oct 30, 2024 17:12:23.676954031 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.677064896 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.677077055 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.677099943 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.677114010 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.677122116 CET	49740	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:23.677125931 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.677140951 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.677150011 CET	49740	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:23.677170038 CET	49740	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:23.677263021 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.677274942 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.677288055 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.677339077 CET	49740	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:23.677339077 CET	49740	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:23.682502985 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.682595968 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:23.682636023 CET	49740	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:23.683131933 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:23.683175087 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:23.683240891 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:23.685039997 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:23.685062885 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:23.790409088 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:23.790671110 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:23.790685892 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:23.792114019 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:23.792172909 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.000184059 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.000374079 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.000405073 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.047579050 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.047604084 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.090682983 CET	49745	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:24.094558001 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.096038103 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.096127987 CET	49745	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:24.096683025 CET	49745	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:24.101943016 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.267712116 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.267777920 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.267807961 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.267831087 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.267836094 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.267852068 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.267882109 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.267893076 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.267930984 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.267935991 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.276315928 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.276382923 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.276390076 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.283900976 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:24.283945084 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:24.284178972 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:24.284641981 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:24.284655094 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:24.330096006 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.330115080 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.372689009 CET	80	49743	76.223.26.96	192.168.2.4
Oct 30, 2024 17:12:24.375500917 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.382932901 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.383039951 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.383157015 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.383172989 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.387502909 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.387566090 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.387582064 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.389447927 CET	443	49742	216.58.206.36	192.168.2.4
Oct 30, 2024 17:12:24.389830112 CET	49742	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:12:24.389846087 CET	443	49742	216.58.206.36	192.168.2.4
Oct 30, 2024 17:12:24.390938044 CET	443	49742	216.58.206.36	192.168.2.4
Oct 30, 2024 17:12:24.391012907 CET	49742	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:12:24.392205000 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.392255068 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.392258883 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.392277956 CET	49742	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:12:24.392386913 CET	443	49742	216.58.206.36	192.168.2.4
Oct 30, 2024 17:12:24.400872946 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.400952101 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.400957108 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.409521103 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.409569979 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.409574032 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.418251991 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.418299913 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.418309927 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.426973104 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.427134991 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.427154064 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.430331945 CET	49743	80	192.168.2.4	76.223.26.96
Oct 30, 2024 17:12:24.435924053 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.435982943 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.435998917 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.444333076 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.444380045 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.444390059 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.486798048 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.486814022 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.498323917 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.498367071 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.498405933 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.498414040 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.498430014 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.498450041 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.498477936 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.498512030 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.498513937 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.498528004 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.498574018 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.502912045 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.507879019 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.507917881 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.507929087 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.511097908 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.511145115 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.511181116 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.511188030 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.511218071 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.517817020 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.523829937 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.523881912 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.523890018 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.523904085 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.523941040 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.529810905 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.532779932 CET	49742	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:12:24.532794952 CET	443	49742	216.58.206.36	192.168.2.4
Oct 30, 2024 17:12:24.535965919 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.536010027 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.536020994 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.536037922 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.536257029 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.542032003 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.548310995 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.548356056 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.548367023 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.548389912 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.548433065 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.554300070 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.560517073 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.560570002 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.560573101 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.560586929 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.560730934 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.566432953 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.569354057 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:24.569410086 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:24.572309017 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.572355986 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.572370052 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.578433990 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.578484058 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.578495979 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.581954956 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:24.581974983 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:24.582285881 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:24.584434032 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.584487915 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.584527016 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.584533930 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.584569931 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.590667963 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.597214937 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.597274065 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.597287893 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.613531113 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.613590002 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.613600969 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.613718033 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.613760948 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.613766909 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.613871098 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.613909960 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.613914967 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.614286900 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.614545107 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.614550114 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.619859934 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.619992971 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.619999886 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.625288963 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.625360012 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.625380039 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.630667925 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.630789995 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.630810022 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.636068106 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.636122942 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.636137962 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.641427994 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.641479015 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.641489983 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.644675016 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.644762039 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.644772053 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.647877932 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.647928953 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.647944927 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.651108027 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.651155949 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.651166916 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.654195070 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.654242992 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.654256105 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.657504082 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.657553911 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.657567024 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.660624981 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.660701990 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.660716057 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.663855076 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.663907051 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.663919926 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.666964054 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.667042017 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.667054892 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.670068979 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.670120001 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.670130014 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.673655033 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.673732996 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.673747063 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.676099062 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.676155090 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.676167011 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.679091930 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.679158926 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.679169893 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.681720972 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.681811094 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.681823015 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.692532063 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.692635059 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 17:12:24.692898035 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 17:12:24.726851940 CET	49742	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:12:24.726896048 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:24.927660942 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.928215981 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.928265095 CET	49745	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:24.928277969 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.928292990 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.928388119 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.928400993 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.928411961 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.928422928 CET	49745	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:24.928423882 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.928471088 CET	49745	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:24.928484917 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.928498030 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.928575993 CET	49745	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:24.933578014 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:12:24.987940073 CET	49745	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:12:25.137316942 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:25.191466093 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:25.321857929 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:25.321882010 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:25.322802067 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:25.322839975 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:25.323005915 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:25.323158026 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:25.323174000 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:25.323215008 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:25.324306965 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:25.324326038 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:25.332616091 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:25.332694054 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:25.378319025 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:25.378326893 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:25.402641058 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:25.424757957 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:25.443335056 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:25.465938091 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:25.466058016 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:25.466146946 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:25.466506958 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:25.466550112 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:25.652350903 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:25.652412891 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:25.652475119 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:25.652677059 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:25.652695894 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:25.652708054 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:25.652713060 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:25.694574118 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:25.694618940 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:25.694700956 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:25.695100069 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:25.695111990 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:26.195275068 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.195511103 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.195530891 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.196974039 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.197032928 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.197343111 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.197419882 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.197465897 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.197499037 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.335556030 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.335572958 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.355460882 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.355706930 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.355732918 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.356722116 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.356775045 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.357105017 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.357171059 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.357244015 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.357249975 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.505280018 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.505299091 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.543222904 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:26.543296099 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:26.544923067 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:26.544934988 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:26.545171022 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:26.546418905 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:26.546556950 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.546684027 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.546730042 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.546746969 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.546854019 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.546900034 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.546906948 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.547019958 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.547064066 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.547070026 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.555643082 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.555691004 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.555697918 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.587341070 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:26.608892918 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.608908892 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.627629995 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.627676010 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.627706051 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.627713919 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.627734900 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.627768993 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.627774000 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.627800941 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.627829075 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.627832890 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.636816978 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.636862040 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.636873960 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.663362980 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.663415909 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.663431883 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.695015907 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.695075035 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.695278883 CET	49747	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.695298910 CET	443	49747	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.698506117 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.698544025 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.698681116 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.699110031 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:26.699125051 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:26.709563971 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.709578037 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.744596958 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.744642973 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.744647980 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.744663000 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.744693995 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.757983923 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.762645960 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.762702942 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.762703896 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.762715101 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.762756109 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.772412062 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.781641006 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.781692028 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.781692028 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.781706095 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.781733036 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.791277885 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.794359922 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:26.795746088 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:26.795834064 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:26.795875072 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:26.795895100 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:26.795906067 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 17:12:26.795912027 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 17:12:26.800831079 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.800873995 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.800880909 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.800893068 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.800930023 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.810162067 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.819340944 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.819384098 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.819406986 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.819426060 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.819478989 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.848644018 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.861670971 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.861711025 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.861745119 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.861772060 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.861789942 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.861800909 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.861982107 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.862018108 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.862023115 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.875025988 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.875058889 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.875072002 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.875085115 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.875134945 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.888581991 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.892194033 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.892224073 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.892235041 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.892251015 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.892406940 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.899583101 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.906009912 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.906042099 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.906050920 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.906066895 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.906208992 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.912590981 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.919198036 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.919231892 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.919248104 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.919262886 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.919404030 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.925793886 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.932368994 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.932413101 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.932419062 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.932431936 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.932475090 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.939148903 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.945691109 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.945746899 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.945748091 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.945764065 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.945802927 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.952102900 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.952178955 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.952493906 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.952510118 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.958718061 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.958765030 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.958779097 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.965795040 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.965845108 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.965862036 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.971842051 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.971982956 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.971998930 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.978868008 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.978914022 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.978926897 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.985073090 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.985146046 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.985158920 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.992535114 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.992582083 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.992594004 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.997908115 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:26.998029947 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:26.998042107 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.004415989 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.004463911 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.004476070 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.010432005 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.010500908 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.010514975 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.016324997 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.016365051 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.016376972 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.022061110 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.022146940 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.022160053 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.027868986 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.027920008 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.027934074 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.033771038 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.033827066 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.033842087 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.037461996 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.037512064 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.037525892 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.040960073 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.041037083 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.041049004 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.044528961 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.044581890 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.044599056 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.047764063 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.047822952 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.047833920 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.051393032 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.051512957 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.051527977 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.054788113 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.054856062 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.054871082 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.058152914 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.058224916 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.058238029 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.061476946 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.061548948 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.061561108 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.064851046 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.064980984 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.064996958 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.068058014 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.068118095 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.068135977 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.071569920 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.071702003 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.071723938 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.074621916 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.074672937 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.074681044 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.077747107 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.077891111 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.077917099 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.141397953 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.141427040 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.142421007 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.142607927 CET	443	49750	172.217.18.100	192.168.2.4
Oct 30, 2024 17:12:27.142786026 CET	49750	443	192.168.2.4	172.217.18.100
Oct 30, 2024 17:12:27.595957994 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.596667051 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.596698046 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.597445011 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.597822905 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.597949982 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.597965002 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.643332958 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.649348974 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.860817909 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.860877991 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.860904932 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.860955000 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.860987902 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.861030102 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.861735106 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.861828089 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.863353968 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.863380909 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.880162001 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.880208969 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.880213976 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.880238056 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.880336046 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.985347986 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.985450983 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.985500097 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.985524893 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.985558987 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.985594034 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.985621929 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.985631943 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.985641956 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.985665083 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.993256092 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:27.993319988 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:27.993349075 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.001981974 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.002036095 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.002063036 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.010703087 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.010768890 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.010796070 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.019711971 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.019773006 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.019800901 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.028423071 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.028481007 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.028507948 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.036525011 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.036668062 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.036690950 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.092538118 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.092571020 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.109621048 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.109683990 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.109715939 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.109837055 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.110033989 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.110045910 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.110136032 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.110213995 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.110255003 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.110266924 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.110307932 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.110316038 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.110872030 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.110935926 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.110945940 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.111042023 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.111118078 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.111125946 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.111718893 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.111788988 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.111797094 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.117537022 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.117595911 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.117607117 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.122457981 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.122526884 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.122539997 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.128077030 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.128134966 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.128144026 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.134485960 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.134540081 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.134568930 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.140394926 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.140506029 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.140554905 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.140583038 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.140625000 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.146608114 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.152292967 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.152331114 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.152344942 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.152373075 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.152427912 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.158284903 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.158391953 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.158492088 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.158520937 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.164432049 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.164478064 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.164505959 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.170698881 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.170747042 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.170778036 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.176758051 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.176806927 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.176831007 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.210756063 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.210796118 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.210823059 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.210856915 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.210899115 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.233551979 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.233741999 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.233818054 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.233870983 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.233901978 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.233947992 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.233956099 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.234231949 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.234289885 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.234297991 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.234394073 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.234441042 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.234448910 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.234947920 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.235044003 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.235088110 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.235097885 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.235141993 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.235148907 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.235285997 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.235440969 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.235449076 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.236032963 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.236143112 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.236154079 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.236515045 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.236557007 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.236565113 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.239618063 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.239664078 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.239674091 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.242887974 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.242938995 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.242948055 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.246045113 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.246097088 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.246123075 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.249216080 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.249272108 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.249290943 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.252398014 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.252473116 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.252480984 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.255537033 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.255583048 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.255594015 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.258725882 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.258774042 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.258800983 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.261585951 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.261646032 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.261672974 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.264662981 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.264708996 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.264730930 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.267904997 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.267957926 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.267971992 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.270647049 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.270689964 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.270701885 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.273653984 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.273699045 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.273710966 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.329149008 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.329174042 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.329583883 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.329682112 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 17:12:28.329754114 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 17:12:28.343189955 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:28.343267918 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:28.343365908 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:28.343708038 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:28.343743086 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:28.348207951 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:28.353894949 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:28.605158091 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:28.617325068 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:28.622792006 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:28.631072044 CET	49743	80	192.168.2.4	76.223.26.96
Oct 30, 2024 17:12:28.634597063 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:28.634649992 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:28.634773970 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:28.634790897 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:28.634845972 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:28.634929895 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:28.635047913 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:28.635067940 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:28.635210991 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:28.635227919 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:28.636506081 CET	80	49743	76.223.26.96	192.168.2.4
Oct 30, 2024 17:12:28.861794949 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:28.881686926 CET	80	49743	76.223.26.96	192.168.2.4
Oct 30, 2024 17:12:28.916722059 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:28.920509100 CET	49743	80	192.168.2.4	76.223.26.96
Oct 30, 2024 17:12:28.926378012 CET	80	49743	76.223.26.96	192.168.2.4
Oct 30, 2024 17:12:29.187036037 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.222923994 CET	80	49743	76.223.26.96	192.168.2.4
Oct 30, 2024 17:12:29.226782084 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.226861000 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.227988005 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.228051901 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.230806112 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.230866909 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.234762907 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.234786034 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.272351980 CET	49743	80	192.168.2.4	76.223.26.96
Oct 30, 2024 17:12:29.287942886 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.570970058 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.571013927 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.571041107 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.571063995 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.571079969 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.571116924 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.571134090 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.571712971 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.571755886 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.571778059 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.571795940 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.571804047 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.571810961 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.571842909 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.578710079 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.581228971 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.610177040 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.610209942 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.610379934 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.610409021 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.611007929 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.611032963 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.611048937 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.611069918 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.611114025 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.611124039 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.611159086 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.611171961 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.611177921 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.611206055 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.611815929 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.612087011 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.613656044 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.613734961 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.614002943 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.614063025 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.617928982 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.620959997 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.620979071 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.621908903 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.621973038 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.621987104 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.630798101 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.632591963 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.632606983 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.639940977 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.640363932 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.640378952 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.648482084 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.650352001 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.650367975 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.657423973 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.658345938 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.658363104 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.665594101 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.665596008 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.665896893 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.665973902 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.666021109 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.674849033 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.678374052 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.678419113 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.729680061 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.729722023 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.729754925 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.729779959 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.729800940 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.729815006 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.729842901 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.729888916 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.729940891 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.729940891 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.729969978 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.730015039 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.733773947 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.737751007 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.737884045 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.737967968 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.737987041 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.738043070 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.741394997 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.747881889 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.747920990 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.748024940 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.748079062 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.748146057 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.753933907 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.760274887 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.760320902 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.760432959 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.760479927 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.760536909 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.766015053 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.772322893 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.772356987 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.772402048 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.772433996 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.772488117 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.779232025 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.784785986 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.784828901 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.784914970 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.784950972 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.785001993 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.790303946 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.794537067 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.794729948 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.796742916 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.796781063 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.796812057 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.796838045 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.796857119 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.796884060 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.798384905 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.798664093 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.802628040 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.802640915 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.803051949 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.804552078 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.804606915 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.806375980 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.806401014 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:29.808748007 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.808851004 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.808871984 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.814662933 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.816375971 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.816406012 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.821403980 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.824649096 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.824677944 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.849701881 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.849749088 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.849780083 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.849781036 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.849817038 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.849828005 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.849836111 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.849869013 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.849980116 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.850044012 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.850084066 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.850111961 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.850867033 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.850920916 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.850934982 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.851330996 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.851435900 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:29.855232000 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.855300903 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.855329990 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.860594988 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.860661983 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.860676050 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.865982056 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.866055012 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.866070032 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.871249914 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.871342897 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.871366024 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.874669075 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.874751091 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.874766111 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.878038883 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.878115892 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.878133059 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.881947041 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.882010937 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.882024050 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.884643078 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.884704113 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.884717941 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.887509108 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.887556076 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.887568951 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.890804052 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.890872955 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.890889883 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.893824100 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.893878937 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.893893957 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.897039890 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.897094011 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.897109032 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.899991989 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.900064945 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.900079966 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.902957916 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.903037071 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.903052092 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.906002045 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.906047106 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.906064034 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.908966064 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.909025908 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.909039974 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.911927938 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.911988020 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.912004948 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.947566986 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.952286959 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:29.952404976 CET	443	49754	142.250.186.78	192.168.2.4
Oct 30, 2024 17:12:29.952466011 CET	49754	443	192.168.2.4	142.250.186.78
Oct 30, 2024 17:12:30.119138002 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:30.159341097 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:30.272805929 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:30.272816896 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:30.274199009 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:30.274235964 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:30.274275064 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:30.274280071 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:30.278477907 CET	49755	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:30.278496027 CET	443	49755	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:30.299581051 CET	49756	443	192.168.2.4	216.58.212.129
Oct 30, 2024 17:12:30.299602985 CET	443	49756	216.58.212.129	192.168.2.4
Oct 30, 2024 17:12:30.545867920 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:30.546708107 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:30.546772957 CET	443	49746	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:30.546827078 CET	49746	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:31.492002010 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:31.492055893 CET	443	49760	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:31.492263079 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:31.493510962 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:31.493537903 CET	443	49760	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:31.643193007 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:31.643198967 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:31.643253088 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:31.643273115 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:31.643362045 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:31.643369913 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:31.644201040 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:31.644208908 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:31.644222975 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:31.644239902 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.362263918 CET	443	49760	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:32.407053947 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:32.462380886 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:32.462413073 CET	443	49760	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:32.463687897 CET	443	49760	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:32.463748932 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:32.496432066 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.501055002 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:32.501188040 CET	443	49760	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:32.502455950 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.502491951 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.502794027 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:32.502825975 CET	443	49760	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:32.502922058 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.502935886 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.502944946 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.502990007 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.502998114 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.503037930 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.503655910 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.508171082 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.508265972 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.508579016 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.508641005 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.508723021 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.508732080 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.509191036 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.509208918 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.509258986 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.509283066 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.509311914 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.509331942 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.509933949 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.547573090 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.547781944 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.548284054 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.548305035 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.556910992 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:32.556972027 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.587738037 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.755882025 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.776257992 CET	443	49760	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:32.781244040 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:32.781307936 CET	443	49760	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:32.781493902 CET	443	49760	142.250.185.238	192.168.2.4
Oct 30, 2024 17:12:32.781537056 CET	49760	443	192.168.2.4	142.250.185.238
Oct 30, 2024 17:12:32.794651985 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.801763058 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.801786900 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.803567886 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.803715944 CET	443	49762	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.803769112 CET	49762	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.847796917 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.847834110 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.849318981 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:32.849415064 CET	443	49763	172.217.18.1	192.168.2.4
Oct 30, 2024 17:12:32.849469900 CET	49763	443	192.168.2.4	172.217.18.1
Oct 30, 2024 17:12:34.392231941 CET	443	49742	216.58.206.36	192.168.2.4
Oct 30, 2024 17:12:34.392306089 CET	443	49742	216.58.206.36	192.168.2.4
Oct 30, 2024 17:12:34.392452002 CET	49742	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:12:34.456653118 CET	49742	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:12:34.456690073 CET	443	49742	216.58.206.36	192.168.2.4
Oct 30, 2024 17:12:34.755131006 CET	49723	80	192.168.2.4	93.184.221.240
Oct 30, 2024 17:12:34.761125088 CET	80	49723	93.184.221.240	192.168.2.4
Oct 30, 2024 17:12:34.761264086 CET	49723	80	192.168.2.4	93.184.221.240
Oct 30, 2024 17:12:50.551532984 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:50.557149887 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:50.796725988 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:50.796927929 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:50.796940088 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:50.796957970 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:50.796969891 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:50.796982050 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:12:50.796988010 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:12:50.797116995 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:13:05.920931101 CET	49737	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:13:05.926678896 CET	80	49737	13.248.148.254	192.168.2.4
Oct 30, 2024 17:13:08.697105885 CET	49740	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:13:08.702613115 CET	80	49740	18.66.121.190	192.168.2.4
Oct 30, 2024 17:13:09.938956976 CET	49745	80	192.168.2.4	18.66.121.190
Oct 30, 2024 17:13:10.070137024 CET	80	49745	18.66.121.190	192.168.2.4
Oct 30, 2024 17:13:11.215873003 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:11.215914965 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:11.216064930 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:11.216489077 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:11.216500998 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.003592014 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.003694057 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.014233112 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.014247894 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.014545918 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.023947954 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.067337036 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.277303934 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.277334929 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.277354956 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.277411938 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.277450085 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.277471066 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.277493000 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.281666040 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.281689882 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.281765938 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.281790972 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.281805038 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.281944990 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.397103071 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.397167921 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.397191048 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.397218943 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.397238970 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.397255898 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.401154041 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.401207924 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.401232958 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.401273012 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.401293039 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.401314020 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.402394056 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.402442932 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.402471066 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.402497053 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.402529001 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.402549982 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.437752008 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.437798977 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.437868118 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.437899113 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.437932014 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.437943935 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.517235994 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.517309904 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.517352104 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.517378092 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.517400026 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.517427921 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.518165112 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.518214941 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.518233061 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.518254042 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.518326998 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.518347025 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.519622087 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.519670010 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.519695044 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.519714117 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.519733906 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.519759893 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.521085024 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.521128893 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.521174908 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.521195889 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.521213055 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.521228075 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.522156000 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.522207975 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.522249937 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.522286892 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.522303104 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.526212931 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.557149887 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.557174921 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.557233095 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.557264090 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.557284117 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.557555914 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.558674097 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.635207891 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.635272980 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.635296106 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.635332108 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.635348082 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.635361910 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.635521889 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.635586977 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.635596037 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.635631084 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.635714054 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.635756969 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.699908018 CET	49767	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.699938059 CET	443	49767	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.783910036 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.783962965 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.784060955 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.786401033 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.786448002 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.786623955 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.786889076 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.786901951 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.791775942 CET	49770	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.791775942 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.791790962 CET	443	49770	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.791795015 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.791855097 CET	49770	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.792468071 CET	49770	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.792478085 CET	443	49770	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.793628931 CET	49771	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.793658018 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.793905020 CET	49771	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.794924974 CET	49772	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.794969082 CET	443	49772	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.795034885 CET	49772	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.795358896 CET	49772	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.795377970 CET	443	49772	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:12.796072006 CET	49771	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:12.796086073 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.541397095 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.548528910 CET	443	49770	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.551914930 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.552552938 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.589122057 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.605067968 CET	49771	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.606859922 CET	443	49772	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.610028028 CET	49770	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.612279892 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.653748035 CET	49772	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.945482016 CET	49772	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.945575953 CET	443	49772	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.947429895 CET	49772	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.947448969 CET	443	49772	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.948178053 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.948201895 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.948893070 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.948901892 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.949465990 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.949495077 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.950103045 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.950110912 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.950922966 CET	49770	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.950934887 CET	443	49770	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.956047058 CET	49770	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.956054926 CET	443	49770	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.956513882 CET	49771	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.956532001 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:13.957417965 CET	49771	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:13.957423925 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.086253881 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.086318016 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.086376905 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.086396933 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.086436987 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.086473942 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.086519003 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.087254047 CET	443	49772	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.087438107 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.087461948 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.087524891 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.087541103 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.087600946 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.087692022 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.087752104 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.087775946 CET	443	49772	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.087822914 CET	49772	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.087826014 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.090810061 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.090831041 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.090874910 CET	49771	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.090883017 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.091001987 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.091103077 CET	49771	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.112322092 CET	443	49770	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.112420082 CET	443	49770	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.112473011 CET	49770	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.229882956 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.229882956 CET	49768	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.229906082 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.229918003 CET	443	49768	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.231851101 CET	49771	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.231851101 CET	49771	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.231875896 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.231894016 CET	443	49771	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.231925964 CET	49770	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.231925964 CET	49770	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.231935024 CET	443	49770	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.231942892 CET	443	49770	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.232474089 CET	49743	80	192.168.2.4	76.223.26.96
Oct 30, 2024 17:13:14.238046885 CET	80	49743	76.223.26.96	192.168.2.4
Oct 30, 2024 17:13:14.242630005 CET	49772	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.242630005 CET	49772	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.242652893 CET	443	49772	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.242665052 CET	443	49772	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.243005037 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.243025064 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.243041039 CET	49769	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.243046999 CET	443	49769	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.428718090 CET	49775	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.428762913 CET	443	49775	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.428822041 CET	49775	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.428880930 CET	49774	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.428905964 CET	443	49774	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.428952932 CET	49774	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.431921959 CET	49776	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.431951046 CET	443	49776	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.432023048 CET	49776	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.435257912 CET	49777	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.435277939 CET	443	49777	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.435336113 CET	49777	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.489576101 CET	49777	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.489609003 CET	443	49777	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.489844084 CET	49775	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.489871025 CET	443	49775	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.490053892 CET	49774	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.490137100 CET	443	49774	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.490353107 CET	49776	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.490375042 CET	443	49776	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.492418051 CET	49778	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.492449999 CET	443	49778	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:14.492547035 CET	49778	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.492633104 CET	49778	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:14.492640018 CET	443	49778	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.254481077 CET	443	49777	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.255002975 CET	443	49776	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.258116007 CET	443	49775	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.258548021 CET	49777	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.258562088 CET	443	49777	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.259059906 CET	49777	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.259064913 CET	443	49777	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.260617018 CET	443	49778	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.266697884 CET	49776	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.266719103 CET	443	49776	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.267395020 CET	49776	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.267400026 CET	443	49776	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.271048069 CET	49778	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.271058083 CET	443	49778	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.271693945 CET	49778	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.271709919 CET	443	49778	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.275309086 CET	49775	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.275341034 CET	443	49775	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.275886059 CET	49775	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.275892019 CET	443	49775	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.277723074 CET	443	49774	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.278582096 CET	49774	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.278610945 CET	443	49774	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.279181004 CET	49774	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.279186964 CET	443	49774	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.391844034 CET	443	49777	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.392846107 CET	443	49777	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.392915964 CET	49777	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.400156975 CET	443	49776	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.400500059 CET	443	49776	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.401046038 CET	49776	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.402267933 CET	49777	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.402286053 CET	443	49777	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.402297020 CET	49777	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.402302980 CET	443	49777	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.408293009 CET	443	49778	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.408351898 CET	49776	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.408365965 CET	443	49776	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.408400059 CET	443	49778	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.408545017 CET	49778	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.411719084 CET	443	49775	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.411793947 CET	443	49775	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.411984921 CET	49775	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.416412115 CET	443	49774	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.417016983 CET	443	49774	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.417073011 CET	49774	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.419481993 CET	49775	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.419481993 CET	49775	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.419496059 CET	443	49775	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.419506073 CET	443	49775	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.420775890 CET	49774	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.420790911 CET	443	49774	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.423636913 CET	49778	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.423636913 CET	49778	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.423657894 CET	443	49778	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.423666954 CET	443	49778	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.438757896 CET	49781	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.438783884 CET	443	49781	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.439374924 CET	49781	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.441462994 CET	49782	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.441500902 CET	443	49782	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.441749096 CET	49782	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.450201035 CET	49783	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.450212002 CET	443	49783	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.450364113 CET	49783	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.457412004 CET	49784	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.457448959 CET	443	49784	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.458106041 CET	49784	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.458813906 CET	49781	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.458827972 CET	443	49781	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.458935976 CET	49784	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.458946943 CET	443	49784	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.459929943 CET	49782	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.459943056 CET	443	49782	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.474272013 CET	49783	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.474282980 CET	443	49783	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.486027002 CET	49785	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.486057997 CET	443	49785	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:15.486164093 CET	49785	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.486665010 CET	49785	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:15.486680984 CET	443	49785	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.360344887 CET	443	49782	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.362366915 CET	443	49784	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.362710953 CET	443	49783	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.366871119 CET	443	49781	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.413625956 CET	49783	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.418544054 CET	443	49785	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.430607080 CET	49782	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.430624962 CET	49781	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.430630922 CET	49784	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.605703115 CET	49785	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.750771046 CET	49785	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.750808001 CET	443	49785	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.751492977 CET	49785	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.751523018 CET	443	49785	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.751739025 CET	49781	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.751758099 CET	443	49781	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.751773119 CET	49784	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.751804113 CET	443	49784	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.752351046 CET	49781	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.752357006 CET	443	49781	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.752542019 CET	49784	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.752552032 CET	443	49784	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.752628088 CET	49782	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.752650023 CET	443	49782	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.752965927 CET	49783	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.752979994 CET	443	49783	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.753058910 CET	49782	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.753063917 CET	443	49782	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.753408909 CET	49783	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.753416061 CET	443	49783	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.914073944 CET	443	49785	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.914192915 CET	443	49785	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.914280891 CET	49785	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.915601969 CET	49785	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.915622950 CET	443	49785	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.916163921 CET	49785	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.916172028 CET	443	49785	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.918039083 CET	443	49782	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.918240070 CET	443	49782	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.918287992 CET	49782	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.922405005 CET	443	49781	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.922476053 CET	443	49781	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.922528028 CET	49781	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.925009012 CET	443	49784	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.925076962 CET	443	49784	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.925132036 CET	49784	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.926188946 CET	49786	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.926224947 CET	443	49786	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.926289082 CET	49786	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.927659988 CET	49782	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.927680016 CET	443	49782	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.927686930 CET	49782	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.927694082 CET	443	49782	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.929635048 CET	443	49783	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.930633068 CET	443	49783	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.930696011 CET	49783	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.932707071 CET	49781	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.932729959 CET	443	49781	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.932756901 CET	49781	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.932763100 CET	443	49781	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.934536934 CET	49783	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.934542894 CET	443	49783	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.941876888 CET	49784	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.941905975 CET	443	49784	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.941921949 CET	49784	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.941927910 CET	443	49784	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.943339109 CET	49786	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.943363905 CET	443	49786	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.944191933 CET	49787	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.944233894 CET	443	49787	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.944353104 CET	49787	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.948661089 CET	49787	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.948673964 CET	443	49787	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.963526011 CET	49788	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.963608027 CET	443	49788	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.963705063 CET	49788	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.963886976 CET	49788	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.963901997 CET	443	49788	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.965220928 CET	49789	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.965250015 CET	443	49789	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.965326071 CET	49789	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.975521088 CET	49790	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.975543022 CET	443	49790	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.975600004 CET	49790	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.977659941 CET	49789	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.977675915 CET	443	49789	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:16.979702950 CET	49790	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:16.979718924 CET	443	49790	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.814419031 CET	443	49787	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.814877033 CET	443	49786	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.815706015 CET	49787	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.815736055 CET	443	49787	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.816543102 CET	49787	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.816551924 CET	443	49787	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.821747065 CET	49786	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.821767092 CET	443	49786	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.822400093 CET	49786	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.822406054 CET	443	49786	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.838604927 CET	443	49790	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.839739084 CET	49790	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.839767933 CET	443	49790	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.840650082 CET	49790	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.840656042 CET	443	49790	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.845998049 CET	443	49788	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.847143888 CET	49788	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.847158909 CET	443	49788	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.847764969 CET	49788	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.847769976 CET	443	49788	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.865662098 CET	443	49789	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.871959925 CET	49789	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.871994019 CET	443	49789	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.872607946 CET	49789	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.872621059 CET	443	49789	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.975404024 CET	443	49786	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.975472927 CET	443	49786	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.975548029 CET	49786	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.977368116 CET	443	49787	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.977444887 CET	443	49787	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.977509022 CET	49787	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.979337931 CET	49786	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.979357004 CET	443	49786	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.985560894 CET	49787	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.985579967 CET	443	49787	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.988971949 CET	49791	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.989008904 CET	443	49791	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.989140034 CET	49791	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.989417076 CET	49791	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.989432096 CET	443	49791	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.991780043 CET	49792	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.991807938 CET	443	49792	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:17.991871119 CET	49792	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.992063046 CET	49792	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:17.992077112 CET	443	49792	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.001211882 CET	443	49790	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.002413988 CET	443	49790	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.002490044 CET	49790	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.002810001 CET	49790	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.002845049 CET	443	49790	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.002859116 CET	49790	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.002865076 CET	443	49790	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.005044937 CET	443	49788	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.005104065 CET	443	49788	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.005279064 CET	49788	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.008548021 CET	49793	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.008577108 CET	443	49793	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.008791924 CET	49793	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.012317896 CET	49788	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.012329102 CET	443	49788	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.026834965 CET	443	49789	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.026912928 CET	443	49789	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.027019024 CET	49789	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.087126017 CET	49793	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.087155104 CET	443	49793	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.088777065 CET	49789	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.088812113 CET	443	49789	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.088829041 CET	49789	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.088836908 CET	443	49789	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.101780891 CET	49794	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.101875067 CET	443	49794	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.101973057 CET	49794	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.105232954 CET	49795	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.105263948 CET	443	49795	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.105344057 CET	49795	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.105813026 CET	49794	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.105850935 CET	443	49794	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.106544018 CET	49795	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.106554031 CET	443	49795	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.814383984 CET	443	49792	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.818294048 CET	49792	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.818321943 CET	443	49792	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.818862915 CET	49792	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.818867922 CET	443	49792	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.831383944 CET	443	49791	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.831866026 CET	49791	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.831897020 CET	443	49791	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.832369089 CET	49791	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.832376003 CET	443	49791	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.879751921 CET	443	49793	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.896296024 CET	443	49794	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.898649931 CET	443	49795	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.910060883 CET	49793	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.910087109 CET	443	49793	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.910537004 CET	49793	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.910543919 CET	443	49793	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.911262035 CET	49794	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.911303043 CET	443	49794	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.911705971 CET	49794	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.911719084 CET	443	49794	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.912028074 CET	49795	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.912044048 CET	443	49795	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.912412882 CET	49795	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.912417889 CET	443	49795	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.953033924 CET	443	49792	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.953191996 CET	443	49792	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.953254938 CET	49792	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:18.996959925 CET	443	49791	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.997117043 CET	443	49791	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:18.997184038 CET	49791	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.046600103 CET	443	49794	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.046787977 CET	443	49794	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.046849012 CET	49794	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.047683954 CET	443	49793	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.048099995 CET	443	49793	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.048151016 CET	49793	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.048280954 CET	443	49795	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.048358917 CET	443	49795	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.048404932 CET	49795	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.213027000 CET	49792	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.213064909 CET	443	49792	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.213119030 CET	49792	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.213135004 CET	443	49792	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.215013981 CET	49795	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.215044975 CET	443	49795	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.215055943 CET	49795	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.215065002 CET	443	49795	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.217674971 CET	49791	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.217700958 CET	443	49791	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.217715025 CET	49791	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.217720985 CET	443	49791	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.222601891 CET	49794	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.222601891 CET	49794	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.222609043 CET	443	49794	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.222616911 CET	443	49794	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.224061966 CET	49793	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.224067926 CET	443	49793	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.593976974 CET	49798	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.594028950 CET	443	49798	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.594098091 CET	49798	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.596482038 CET	49799	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.596517086 CET	443	49799	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.596575022 CET	49799	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.598674059 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.598717928 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.598787069 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.600255966 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.600291014 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.600342989 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.601604939 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.601618052 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.601680040 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.627886057 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.627907991 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.629266024 CET	49798	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.629292965 CET	443	49798	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.634946108 CET	49799	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.634968042 CET	443	49799	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.635673046 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.635696888 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:19.635812044 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:19.635824919 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.383217096 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.383946896 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.383974075 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.385257959 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.385265112 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.395690918 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.396497965 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.396513939 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.396528006 CET	443	49798	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.397064924 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.397069931 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.397655964 CET	443	49799	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.397896051 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.398278952 CET	49798	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.398305893 CET	443	49798	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.399367094 CET	49798	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.399365902 CET	49799	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.399374962 CET	443	49798	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.399386883 CET	443	49799	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.399763107 CET	49799	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.399769068 CET	443	49799	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.403070927 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.403103113 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.404865980 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.404872894 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.525835991 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.525947094 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.526025057 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.533346891 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.533418894 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.533598900 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.535620928 CET	443	49799	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.535695076 CET	443	49799	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.535748005 CET	49799	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.535891056 CET	443	49798	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.535968065 CET	443	49798	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.536017895 CET	49798	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.539868116 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.539926052 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.539997101 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.575213909 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.575238943 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.587332010 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.587357044 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.587368965 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.587376118 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.589271069 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.589308023 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.589339972 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.589349985 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.590837955 CET	49799	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.590864897 CET	443	49799	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.590877056 CET	49799	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.590883970 CET	443	49799	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.599570990 CET	49798	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.599595070 CET	443	49798	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.599608898 CET	49798	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.599616051 CET	443	49798	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.620742083 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.620774984 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.620840073 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.628870010 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.628930092 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.629132986 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.632462978 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.632513046 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.632575989 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.634540081 CET	49806	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.634555101 CET	443	49806	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.634661913 CET	49806	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.635258913 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.635273933 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.636591911 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.636604071 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.639101028 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.639116049 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.639168978 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.639533043 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.639545918 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.639610052 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.639624119 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:20.639712095 CET	49806	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:20.639722109 CET	443	49806	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.387039900 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.387675047 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.387758017 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.388358116 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.388372898 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.395168066 CET	443	49806	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.395602942 CET	49806	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.395623922 CET	443	49806	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.396126032 CET	49806	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.396132946 CET	443	49806	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.397172928 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.397494078 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.397506952 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.397957087 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.397962093 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.409692049 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.410110950 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.410135031 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.410551071 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.410557032 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.431663990 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.432236910 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.432287931 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.432733059 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.432749987 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.522890091 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.523175001 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.523341894 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.523422003 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.523468971 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.523500919 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.523518085 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.528031111 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.528053999 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.528347015 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.528583050 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.528595924 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.532247066 CET	443	49806	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.532316923 CET	443	49806	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.532406092 CET	49806	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.532522917 CET	49806	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.532522917 CET	49806	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.532540083 CET	443	49806	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.532548904 CET	443	49806	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.535780907 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.535818100 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.536051989 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.536427975 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.536448002 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.536688089 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.536894083 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.537060976 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.537190914 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.537198067 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.537214994 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.537220001 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.551671028 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.551738024 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.551846027 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.574652910 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.574747086 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.574939013 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.594593048 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.594605923 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.595505953 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.595557928 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.599273920 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.599292994 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.599376917 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.599867105 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.599877119 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.601648092 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.601700068 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.601833105 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.602277994 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.602298021 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.603748083 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.603857040 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:21.603959084 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.604167938 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:21.604212999 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.131350994 CET	49737	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:13:22.137379885 CET	80	49737	13.248.148.254	192.168.2.4
Oct 30, 2024 17:13:22.137475967 CET	49737	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:13:22.285489082 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.286170006 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.286183119 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.286701918 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.286706924 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.303466082 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.304084063 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.304092884 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.304596901 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.304600954 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.375864029 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.376626968 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.376642942 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.377186060 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.377191067 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.378752947 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.379036903 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.379106045 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.379132986 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.379478931 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.379483938 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.379637003 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.379657984 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.380112886 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.380119085 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.423662901 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.423800945 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.423911095 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.424011946 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.424032927 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.424043894 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.424050093 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.427591085 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.427630901 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.427726984 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.427892923 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.427917004 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.443573952 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.443645000 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.443707943 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.443942070 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.443942070 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.443969011 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.443979025 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.446851969 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.446902037 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.447057009 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.447205067 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.447218895 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.514364958 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.514441013 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.514765024 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.514847994 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.514864922 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.514890909 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.514899015 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.517384052 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.517458916 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.517527103 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.517709970 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.517923117 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.517945051 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.517956972 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.517962933 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.518445015 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.518508911 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.518686056 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.518723011 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.518966913 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.519130945 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.519148111 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.519159079 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.519164085 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.520252943 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.520267963 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.520545006 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.520585060 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.521287918 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.521471977 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.521500111 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.521514893 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.521564007 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.521651030 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.521773100 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:22.521806002 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:22.728401899 CET	49724	80	192.168.2.4	93.184.221.240
Oct 30, 2024 17:13:22.734576941 CET	80	49724	93.184.221.240	192.168.2.4
Oct 30, 2024 17:13:22.734637976 CET	49724	80	192.168.2.4	93.184.221.240
Oct 30, 2024 17:13:23.135957956 CET	49818	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:13:23.136015892 CET	443	49818	216.58.206.36	192.168.2.4
Oct 30, 2024 17:13:23.136101007 CET	49818	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:13:23.136396885 CET	49818	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:13:23.136414051 CET	443	49818	216.58.206.36	192.168.2.4
Oct 30, 2024 17:13:23.180479050 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.181072950 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.181087971 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.181607008 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.181612015 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.195013046 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.195605993 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.195615053 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.196177006 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.196182013 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.261501074 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.262358904 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.262403011 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.263340950 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.263351917 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.278114080 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.278606892 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.278625965 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.279092073 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.279097080 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.290549994 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.291004896 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.291048050 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.291501045 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.291507006 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.317887068 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.317959070 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.318028927 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.318310976 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.318315983 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.318325996 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.318331003 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.322050095 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.322099924 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.322309017 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.322370052 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.322386026 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.331669092 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.332241058 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.332300901 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.332351923 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.332370043 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.332381010 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.332386971 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.335144997 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.335187912 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.335254908 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.335417032 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.335429907 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.396576881 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.397111893 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.397171021 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.397272110 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.397291899 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.397306919 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.397314072 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.400372028 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.400414944 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.400499105 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.400722027 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.400732994 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.416627884 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.416940928 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.417006016 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.417037964 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.417052031 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.417062044 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.417067051 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.419858932 CET	49822	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.419889927 CET	443	49822	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.420038939 CET	49822	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.420192003 CET	49822	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.420202017 CET	443	49822	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.430002928 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.430067062 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.430125952 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.430347919 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.430368900 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.430418015 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.430423975 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.433140993 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.433167934 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.433316946 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.433478117 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:23.433489084 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:23.994431019 CET	443	49818	216.58.206.36	192.168.2.4
Oct 30, 2024 17:13:23.994949102 CET	49818	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:13:23.994963884 CET	443	49818	216.58.206.36	192.168.2.4
Oct 30, 2024 17:13:23.995304108 CET	443	49818	216.58.206.36	192.168.2.4
Oct 30, 2024 17:13:23.998147011 CET	49818	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:13:23.998207092 CET	443	49818	216.58.206.36	192.168.2.4
Oct 30, 2024 17:13:24.040816069 CET	49818	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:13:24.078126907 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.079333067 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.079333067 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.079374075 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.079389095 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.102829933 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.103894949 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.103894949 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.103925943 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.103936911 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.164685011 CET	443	49822	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.165616989 CET	49822	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.165636063 CET	443	49822	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.166552067 CET	49822	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.166558027 CET	443	49822	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.197417974 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.198139906 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.198173046 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.198551893 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.198559999 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.198733091 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.199434996 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.199455023 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.199712992 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.199721098 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.218487978 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.218555927 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.218760967 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.218854904 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.218856096 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.218875885 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.218887091 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.222068071 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.222094059 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.222444057 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.222445011 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.222469091 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.242914915 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.243125916 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.243264914 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.243264914 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.243294001 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.243307114 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.250171900 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.250216961 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.250372887 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.250610113 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.250624895 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.303116083 CET	443	49822	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.303540945 CET	443	49822	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.303688049 CET	49822	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.303688049 CET	49822	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.303834915 CET	49822	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.303843021 CET	443	49822	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.307209015 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.307249069 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.307418108 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.307560921 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.307573080 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.338881016 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.339683056 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.339937925 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.339937925 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.340121984 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.340138912 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.343092918 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.343152046 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.343297005 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.343333960 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.343393087 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.343470097 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.343486071 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.343516111 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.343559027 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.343564987 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.343588114 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.343592882 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.345797062 CET	49828	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.345837116 CET	443	49828	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:24.346312046 CET	49828	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.346312046 CET	49828	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:24.346345901 CET	443	49828	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.009136915 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.010845900 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.010864019 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.011370897 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.011375904 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.016768932 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.017201900 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.017220974 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.017553091 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.017561913 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.054466963 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.055099010 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.055119038 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.055574894 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.055578947 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.102442026 CET	443	49828	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.102925062 CET	49828	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.102941036 CET	443	49828	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.103607893 CET	49828	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.103612900 CET	443	49828	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.151226044 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.151695967 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.152190924 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.152234077 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.152234077 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.152254105 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.152266026 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.155693054 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.155719995 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.155941963 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.156035900 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.156289101 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.156299114 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.156367064 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.156517029 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.156517982 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.156594992 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.156608105 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.161396027 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.161427975 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.161566019 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.161679029 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.161690950 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.189373016 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.189980030 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.190048933 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.190118074 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.190124989 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.190144062 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.190149069 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.192624092 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.192646980 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.192797899 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.192977905 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.192985058 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.238426924 CET	443	49828	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.238784075 CET	443	49828	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.238842964 CET	49828	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.238899946 CET	49828	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.238919020 CET	443	49828	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.238928080 CET	49828	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.238935947 CET	443	49828	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.242707014 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.242748022 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.243005037 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.243005037 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.243036985 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.898439884 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.899404049 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.899415970 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.900356054 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.900360107 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.905257940 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.905838013 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.905867100 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.906450987 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.906459093 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.942214012 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.942790985 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.942802906 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:25.943310022 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:25.943320990 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.001950979 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.006397009 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.006424904 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.006997108 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.007004023 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.034305096 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.034924030 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.034996986 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.035131931 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.035156965 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.035171986 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.035177946 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.038585901 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.038650990 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.038866997 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.039060116 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.039091110 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.040616035 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.041342974 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.041428089 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.041589022 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.041605949 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.041616917 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.041621923 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.044934034 CET	49834	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.044964075 CET	443	49834	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.045104027 CET	49834	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.045150995 CET	49834	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.045161009 CET	443	49834	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.079212904 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.079324007 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.079410076 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.079695940 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.079715967 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.084487915 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.084552050 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.084714890 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.084924936 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.084943056 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.138997078 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.139096975 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.139163017 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.139421940 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.139441967 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.139491081 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.139497995 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.144164085 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.144201994 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.144283056 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.144675970 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:26.144694090 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.969619989 CET	443	49834	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.969842911 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.970654011 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:26.978677034 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.025130987 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.025130987 CET	49834	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.025132895 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.026134014 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.132384062 CET	49834	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.132394075 CET	443	49834	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.133202076 CET	49834	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.133208036 CET	443	49834	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.133769035 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.133784056 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.134355068 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.134361982 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.134819031 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.134835005 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.135571957 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.135580063 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.136017084 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.136023998 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.136698961 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.136703014 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.335787058 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.335840940 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.336085081 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.336136103 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.336199999 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.336236954 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.336241007 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.336622000 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.336647034 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.336664915 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.336673975 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.337099075 CET	443	49834	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.337172031 CET	443	49834	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.337205887 CET	49834	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.338264942 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.338435888 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.338474035 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.339025021 CET	49834	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.339037895 CET	443	49834	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.339061022 CET	49834	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.339066982 CET	443	49834	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.340734959 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.340743065 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.340756893 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.340761900 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.342082977 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.342098951 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.342113972 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.342120886 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.343823910 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.343842983 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.344275951 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.344280958 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.347059011 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.347100019 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.347167015 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.347445965 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.347455025 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.349117994 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.349147081 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.349208117 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.351701975 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.351726055 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.351783991 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.352291107 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.352324009 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.352375031 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.352693081 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.352703094 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.352796078 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.352804899 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.352883101 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.352899075 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.474554062 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.474627972 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.474678993 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.474937916 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.474960089 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.474975109 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.474982023 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.479285002 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.479341030 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:27.479406118 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.479629993 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:27.479645014 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.095297098 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.095896959 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.095912933 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.096308947 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.096473932 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.096481085 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.096847057 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.096873999 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.097204924 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.097209930 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.113286018 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.113818884 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.113830090 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.114301920 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.114308119 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.130404949 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.130892992 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.130906105 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.131373882 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.131377935 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.233578920 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.233634949 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.233762026 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.233932972 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.233948946 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.233963013 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.233968973 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.235424042 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.235477924 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.235573053 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.235784054 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.235794067 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.235806942 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.235811949 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.237569094 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.237603903 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.238154888 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.238176107 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.238207102 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.238316059 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.238360882 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.238374949 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.238440037 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.238449097 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.254812002 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.254872084 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.255042076 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.255084991 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.255084991 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.255103111 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.255116940 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.257509947 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.257787943 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.257833958 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.257909060 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.258043051 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.258060932 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.258291960 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.258302927 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.258486986 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.258492947 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.270948887 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.271013021 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.271075010 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.271297932 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.271307945 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.271328926 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.271334887 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.274240971 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.274255037 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.274396896 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.274584055 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.274599075 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.396471024 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.396574020 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.396663904 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.396848917 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.396862030 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.396898031 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.396903992 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.400051117 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.400105953 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:28.400201082 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.400391102 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:28.400412083 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.008061886 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.008217096 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.009005070 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.009031057 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.011344910 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.011363983 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.011526108 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.011534929 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.011925936 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.011929989 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.012228012 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.012706995 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.012717962 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.013079882 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.013082981 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.035595894 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.036123037 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.036133051 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.036603928 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.036608934 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.145693064 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.145803928 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.146009922 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.146136999 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.146136999 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.146157980 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.146171093 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.148315907 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.148376942 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.148468971 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.148653984 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.148674011 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.149698973 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.149733067 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.150110960 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.150124073 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.150384903 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.150439978 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.150454998 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.150480986 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.150746107 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.150758028 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.150775909 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.150782108 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.152261019 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.152299881 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.152405977 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.152585030 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.152600050 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.152729988 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.152765036 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.152858019 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.152970076 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.152990103 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.155788898 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.156274080 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.156295061 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.156845093 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.156850100 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.172411919 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.172463894 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.172554970 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.172825098 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.172836065 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.172847033 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.172852039 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.176156044 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.176189899 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.176273108 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.176476955 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.176487923 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.303373098 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.304748058 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.304810047 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.304874897 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.304884911 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.304923058 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.304928064 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.308454037 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.308494091 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.308636904 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.308818102 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.308832884 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.947603941 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.948621035 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.948637962 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.949214935 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.949220896 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.951764107 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.952203035 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.952213049 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.952683926 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.952689886 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.969676971 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.970242023 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.970254898 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:29.970719099 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:29.970724106 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.026730061 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.027437925 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.027450085 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.027945042 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.027950048 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.118380070 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.118407011 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.118469000 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.118479967 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.118535995 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.119091034 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.119110107 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.119122982 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.119128942 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.121490955 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.126225948 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.126266003 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.126329899 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.126840115 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.126852989 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.137051105 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.137128115 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.137305975 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.137322903 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.142479897 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.142508030 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.142657995 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.142992020 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.143062115 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.143172026 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.143520117 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.143532038 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.143632889 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.143632889 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.143652916 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.143671989 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.148852110 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.148891926 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.149101019 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.157982111 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.157999992 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.197225094 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.198044062 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.198072910 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.198771000 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.198776960 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.217564106 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.218177080 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.218314886 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.218374968 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.218390942 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.218400955 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.218405962 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.221731901 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.221748114 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.221837997 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.222042084 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.222054005 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.381879091 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.381931067 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.382014036 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.385684013 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.385700941 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.385710955 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.385715961 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.390230894 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.390270948 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:30.390353918 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.390628099 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:30.390644073 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.019094944 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.022229910 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.025424957 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.025441885 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.026086092 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.026093006 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.026422024 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.026437044 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.027200937 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.027204990 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.049453020 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.050574064 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.050590038 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.051182032 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.051193953 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.092375040 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.096678019 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.096685886 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.097541094 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.097544909 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.193844080 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.193856955 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.193917990 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.194022894 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.194022894 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.194444895 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.194458008 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.194524050 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.194530010 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.197912931 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.197932959 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.197988987 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.198673964 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.198682070 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.213377953 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.213399887 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.213454962 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.213454962 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.213493109 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.213876009 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.213886976 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.213896990 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.213907003 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.216586113 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.216602087 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.216794968 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.216986895 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.216995955 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.231237888 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.231251001 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.231298923 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.231336117 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.231426954 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.231781006 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.231781006 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.231794119 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.231806040 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.236829042 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.236845016 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.236907005 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.237212896 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.237221003 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.271301985 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.271809101 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.271822929 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.272497892 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.272558928 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.272666931 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.272725105 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.272728920 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.273124933 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.273138046 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.273149967 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.273154974 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.276679039 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.276690960 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.276750088 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.277137995 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.277147055 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.454370022 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.454441071 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.454602957 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.609256983 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.609263897 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.609293938 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.609297991 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.635168076 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.635204077 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:31.635332108 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.636560917 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:31.636580944 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.019113064 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.020035982 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.020045042 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.020800114 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.020802975 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.033662081 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.034435987 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.034451962 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.035249949 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.035254955 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.063786030 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.064896107 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.064914942 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.065947056 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.065952063 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.099807978 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.100609064 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.100637913 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.101547003 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.101552963 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.158168077 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.158236980 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.158282995 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.158842087 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.158853054 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.158874035 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.158879995 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.169761896 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.169811964 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.169903040 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.170252085 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.170265913 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.171212912 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.171288013 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.171349049 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.171506882 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.171523094 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.171531916 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.171536922 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.176229000 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.176259041 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.176351070 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.176646948 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.176656008 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.203175068 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.203768969 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.203867912 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.239646912 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.240708113 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.240804911 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.299668074 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.299690008 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.299701929 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.299707890 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.307379961 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.307415962 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.307434082 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.307440996 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.313575983 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.313620090 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.313680887 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.313831091 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.313882113 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.313883066 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.313894033 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.313936949 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.314018011 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.314027071 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.413362026 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.414100885 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.414124966 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.415147066 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.415155888 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.552459002 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.552680969 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.552788019 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.565304995 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.565304995 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.565327883 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.565337896 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.572467089 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.572503090 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.572566032 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.573287964 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.573302031 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.929227114 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.929914951 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.929928064 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.930496931 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.930505037 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.937804937 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.938441038 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.938468933 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:32.939070940 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:32.939078093 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.058204889 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.058841944 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.058861017 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.059406042 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.059418917 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.067333937 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.067909002 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.067924023 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.068535089 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.068540096 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.069793940 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.069884062 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.070094109 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.070185900 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.070185900 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.070216894 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.070230961 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.073703051 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.073741913 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.073873997 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.074029922 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.074043989 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.078922987 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.079099894 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.079188108 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.079241037 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.079258919 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.079272985 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.079279900 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.082375050 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.082413912 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.082532883 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.082684994 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.082698107 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.197479010 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.197551012 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.197782993 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.197932959 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.197947979 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.197958946 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.197963953 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.201687098 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.201750994 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.201899052 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.202111006 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.202126026 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.205543995 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.205682039 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.205734968 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.205739021 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.205790043 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.205836058 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.205853939 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.205869913 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.205877066 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.209067106 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.209088087 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.209167957 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.209317923 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.209331036 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.344784975 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.345397949 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.345410109 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.345926046 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.345937967 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.486774921 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.486841917 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.487186909 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.487281084 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.487288952 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.487301111 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.487307072 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.491163015 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.491211891 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.491354942 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.491595030 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.491610050 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.828841925 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.829514027 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.829546928 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.830086946 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.830097914 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.874062061 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.874677896 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.874701023 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.875343084 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.875349045 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.955872059 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.956620932 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.956645012 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.957150936 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.957158089 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.969852924 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.969881058 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.969938040 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.969942093 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.969995975 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.970380068 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.970397949 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.970415115 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.970422029 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.974148989 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.974185944 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.974293947 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.974488020 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:33.974499941 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:33.994003057 CET	443	49818	216.58.206.36	192.168.2.4
Oct 30, 2024 17:13:33.994072914 CET	443	49818	216.58.206.36	192.168.2.4
Oct 30, 2024 17:13:33.994163990 CET	49818	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:13:34.019011021 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.019642115 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.019653082 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.019718885 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.020226955 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.020231009 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.020359993 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.020418882 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.020473957 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.020484924 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.020493984 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.020498991 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.023780107 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.023816109 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.023941994 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.024087906 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.024100065 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.094913960 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.095012903 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.095088005 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.095377922 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.095400095 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.095411062 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.095417023 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.099020004 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.099066973 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.099138975 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.099348068 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.099359035 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.165497065 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.166275024 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.166347027 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.166425943 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.166439056 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.166455030 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.166460991 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.169668913 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.169707060 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.169943094 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.170120955 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.170131922 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.253047943 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.253679991 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.253693104 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.254216909 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.254221916 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.391638041 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.391731024 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.391772032 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.391868114 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.392056942 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.392066002 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.392101049 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.392107010 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.395556927 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.395576000 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.395648956 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.395855904 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.395867109 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.744534016 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.745049953 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.745074987 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.745537996 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.745551109 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.779912949 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.780550003 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.780575991 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.781246901 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.781261921 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.869348049 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.870120049 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.870141029 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.870788097 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.870795012 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.886940956 CET	49818	443	192.168.2.4	216.58.206.36
Oct 30, 2024 17:13:34.886969090 CET	443	49818	216.58.206.36	192.168.2.4
Oct 30, 2024 17:13:34.887120008 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.887213945 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.887264967 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.887573004 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.887593031 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.887607098 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.887613058 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.893673897 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.893697977 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.893975019 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.894002914 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.894006968 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.933634996 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.934258938 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.934274912 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.934633017 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.934726954 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.934829950 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.934837103 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.934861898 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.935034037 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.935050964 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.935061932 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.935066938 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.938797951 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.938839912 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:34.938925982 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.939173937 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:34.939187050 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.009566069 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.010175943 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.012022972 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.012514114 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.012532949 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.012546062 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.012552023 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.016259909 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.016294956 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.016369104 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.016552925 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.016566992 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.076725960 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.076750040 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.076802015 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.076818943 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.076858044 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.077150106 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.077173948 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.077189922 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.077195883 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.080792904 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.080831051 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.080893040 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.081211090 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.081222057 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.276979923 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.277904034 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.277941942 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.278599024 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.278604984 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.429820061 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.430118084 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.430269003 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.430382967 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.430399895 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.430413961 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.430419922 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.434581995 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.434602022 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.434704065 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.434952974 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.434963942 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.649835110 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.651382923 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.651403904 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.654126883 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.654138088 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.690519094 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.691509008 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.691530943 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.692087889 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.692091942 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.769570112 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.770313025 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.770330906 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.774121046 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.774128914 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.789124966 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.789514065 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.789560080 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.789632082 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.789904118 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.789910078 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.789969921 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.789974928 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.794053078 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.794102907 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.794248104 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.794495106 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.794507027 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.807224035 CET	49736	80	192.168.2.4	13.248.148.254
Oct 30, 2024 17:13:35.813004971 CET	80	49736	13.248.148.254	192.168.2.4
Oct 30, 2024 17:13:35.828150034 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.828746080 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.828808069 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.828859091 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.828876019 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.828886986 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.828891993 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.832258940 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.832299948 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.832495928 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.832709074 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.832719088 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.867837906 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.868694067 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.868709087 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.869060993 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.869071007 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.909878969 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.909944057 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.910037994 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.910448074 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.910448074 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.910460949 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.910470009 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.914128065 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.914172888 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:35.914319992 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.914428949 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:35.914439917 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.006840944 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.006902933 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.007164955 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.007332087 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.007332087 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.007349014 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.007358074 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.011864901 CET	49885	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.011903048 CET	443	49885	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.012105942 CET	49885	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.012279987 CET	49885	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.012291908 CET	443	49885	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.183660030 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.184298992 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.184307098 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.184890985 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.184895039 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.320800066 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.321016073 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.321072102 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.321084976 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.321106911 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.321154118 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.321238041 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.321245909 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.325504065 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.325526953 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.325579882 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.325860977 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.325869083 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.558775902 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.559535980 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.559545994 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.560183048 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.560188055 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.600538969 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.601180077 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.601192951 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.601844072 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.601849079 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.674885988 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.675688028 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.675697088 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.676363945 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.676371098 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.699791908 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.700639009 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.700747013 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.700951099 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.700964928 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.700978994 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.700984955 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.705475092 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.705507994 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.705643892 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.705826998 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.705846071 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.738495111 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.738574028 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.738621950 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.738931894 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.738943100 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.738965988 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.738971949 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.743542910 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.743599892 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.743740082 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.744015932 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.744026899 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.774769068 CET	443	49885	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.775331974 CET	49885	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.775357008 CET	443	49885	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.775871038 CET	49885	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.775876999 CET	443	49885	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.817867041 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.817936897 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.818069935 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.818664074 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.818664074 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.818681002 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.818691015 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.823021889 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.823061943 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.823163033 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.823412895 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.823426962 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.914366007 CET	443	49885	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.914499044 CET	443	49885	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.914535999 CET	443	49885	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.914562941 CET	49885	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.914608002 CET	49885	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.914755106 CET	49885	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.914772034 CET	443	49885	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.914792061 CET	49885	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.914798021 CET	443	49885	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.919622898 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.919668913 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:36.919750929 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.919981003 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:36.919994116 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.086927891 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.087815046 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.087838888 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.089200020 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.089210987 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.225888968 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.225939989 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.226536036 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.226536989 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.226953983 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.226986885 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.234116077 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.234150887 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.238213062 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.238538980 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.238552094 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.453691959 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.454417944 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.454442024 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.455003977 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.455008984 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.516967058 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.517534971 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.517546892 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.518230915 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.518234968 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.579293966 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.580447912 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.580447912 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.580461979 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.580476999 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.589330912 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.590056896 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.590183973 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.590184927 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.590295076 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.590311050 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.594124079 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.594156027 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.594254017 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.594412088 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.594424963 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.653764963 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.653990030 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.654197931 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.655992031 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.655992031 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.656012058 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.656023026 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.659737110 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.659779072 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.659928083 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.660186052 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.660197973 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.674465895 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.675672054 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.675672054 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.675693989 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.675729990 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.721270084 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.721301079 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.721352100 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.721431971 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.721432924 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.721715927 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.721716881 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.721733093 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.721735954 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.725059032 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.725096941 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.725409985 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.734330893 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.734340906 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.812861919 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.815578938 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.818296909 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.822242022 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.822263002 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.822277069 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.822283983 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.826967955 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.827012062 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:37.827622890 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.836036921 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:37.836064100 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.008347988 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.014719963 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.014746904 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.015320063 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.015325069 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.150332928 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.150383949 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.150448084 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.150702000 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.150718927 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.150732040 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.150738001 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.154395103 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.154429913 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.154697895 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.154887915 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.154897928 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.342087030 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.342751980 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.342777014 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.343372107 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.343386889 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.431379080 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.432084084 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.432094097 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.432616949 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.432621956 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.477477074 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.477619886 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.477757931 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.477962017 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.477977037 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.477988005 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.477993965 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.481682062 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.481770992 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.481847048 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.482034922 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.482075930 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.484807968 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.485265017 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.485274076 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.485788107 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.485794067 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.571052074 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.571515083 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.571559906 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.571572065 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.571592093 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.571645021 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.571675062 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.571687937 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.571708918 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.571713924 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.575798035 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.575836897 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.575921059 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.576060057 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.576082945 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.615524054 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.616250992 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.616271973 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.616939068 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.616944075 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.621062040 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.621328115 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.621377945 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.621507883 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.621517897 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.625543118 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.625570059 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.625634909 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.625864983 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.625874043 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.759058952 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.759283066 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.759334087 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.759370089 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.759433985 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.760102987 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.760113001 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.760127068 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.760132074 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.763791084 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.763839006 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.763919115 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.764172077 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.764187098 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.928710938 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.929491997 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.929508924 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:38.930212975 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:38.930217028 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.069706917 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.069761992 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.069833040 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.070297956 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.070297956 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.070329905 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.070342064 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.074611902 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.074636936 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.074707031 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.075041056 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.075050116 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.256782055 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.257559061 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.257608891 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.258266926 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.258282900 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.368220091 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.369259119 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.369275093 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.369769096 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.369776011 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.380822897 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.381510973 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.381536961 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.382014036 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.382020950 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.396723032 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.396754980 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.396804094 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.396831989 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.396855116 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.397089958 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.397109032 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.397121906 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.397135973 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.400748968 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.400789976 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.400871038 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.401215076 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.401228905 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.509604931 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.510266066 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.510292053 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.511082888 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.511091948 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.511449099 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.511514902 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.511698008 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.511732101 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.511749029 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.511763096 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.511769056 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.514923096 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.514951944 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.515029907 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.515234947 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.515245914 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.520447969 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.520484924 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.520548105 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.520595074 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.520755053 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.520771027 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.520776987 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.520783901 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.524102926 CET	49904	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.524125099 CET	443	49904	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.524202108 CET	49904	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.524374962 CET	49904	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.524388075 CET	443	49904	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.648354053 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.648518085 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.648751974 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.648751974 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.648751974 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.652748108 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.652797937 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.652870893 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.653152943 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.653167009 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.830492973 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.831053972 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.831062078 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 17:13:39.831583977 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 17:13:39.831588984 CET	443	49901	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 17:12:18.571006060 CET	53	63998	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:18.574033976 CET	53	62484	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:19.885000944 CET	53	54257	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:20.561511040 CET	59992	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:20.561656952 CET	64847	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:20.903599024 CET	53	64847	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:20.905749083 CET	53	59992	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:22.815963030 CET	63951	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:22.815963984 CET	53529	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:22.821222067 CET	55481	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:22.821732998 CET	59700	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:22.826739073 CET	53	53529	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:22.828994989 CET	53	59700	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:22.829062939 CET	53	63951	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:22.829291105 CET	53	55481	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:22.926239967 CET	60649	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:22.926501989 CET	53047	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:22.934468031 CET	53	53047	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:22.935064077 CET	53	60649	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:23.129667044 CET	51648	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:23.130247116 CET	55713	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:23.137090921 CET	53	51648	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:23.138206959 CET	53	55713	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:23.170548916 CET	65265	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:23.170903921 CET	62569	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:23.475951910 CET	53	62569	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:23.630487919 CET	53	65265	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:24.079544067 CET	50934	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:24.079853058 CET	52069	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:24.089180946 CET	53	52069	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:24.089920044 CET	53	50934	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:24.272983074 CET	61114	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:24.273679972 CET	62438	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:24.280208111 CET	53	61114	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:24.281793118 CET	53	62438	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:24.812684059 CET	52300	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:24.813220024 CET	61622	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:24.819962978 CET	53	52300	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:24.821127892 CET	53	61622	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:25.457556009 CET	56043	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:25.457767963 CET	61148	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:25.465142012 CET	53	56043	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:25.465158939 CET	53	61148	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:28.333951950 CET	51819	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:28.334342003 CET	55393	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:28.342551947 CET	53	51819	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:28.342570066 CET	53	55393	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:28.622503042 CET	51919	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:28.622981071 CET	56243	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:28.630846977 CET	53	51919	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:28.633594036 CET	53	56243	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:31.616192102 CET	57199	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:31.620531082 CET	50401	53	192.168.2.4	1.1.1.1
Oct 30, 2024 17:12:31.624387026 CET	53	57199	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:31.630750895 CET	53	50401	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:34.503810883 CET	138	138	192.168.2.4	192.168.2.255
Oct 30, 2024 17:12:37.423795938 CET	53	56748	1.1.1.1	192.168.2.4
Oct 30, 2024 17:12:56.415004015 CET	53	58688	1.1.1.1	192.168.2.4
Oct 30, 2024 17:13:19.498214960 CET	53	56251	1.1.1.1	192.168.2.4
Oct 30, 2024 17:13:19.513098001 CET	53	60102	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 17:12:20.561511040 CET	192.168.2.4	1.1.1.1	0x35a0	Standard query (0)	ww38.heynannyly.online	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:20.561656952 CET	192.168.2.4	1.1.1.1	0xf487	Standard query (0)	ww38.heynannyly.online	65	IN (0x0001)	false
Oct 30, 2024 17:12:22.815963030 CET	192.168.2.4	1.1.1.1	0xd25f	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:22.815963984 CET	192.168.2.4	1.1.1.1	0xea58	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Oct 30, 2024 17:12:22.821222067 CET	192.168.2.4	1.1.1.1	0x61e8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:22.821732998 CET	192.168.2.4	1.1.1.1	0xf28e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 17:12:22.926239967 CET	192.168.2.4	1.1.1.1	0xccbc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:22.926501989 CET	192.168.2.4	1.1.1.1	0xd4e4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 17:12:23.129667044 CET	192.168.2.4	1.1.1.1	0x3328	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:23.130247116 CET	192.168.2.4	1.1.1.1	0xa21d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 17:12:23.170548916 CET	192.168.2.4	1.1.1.1	0xba9d	Standard query (0)	ww38.heynannyly.online	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:23.170903921 CET	192.168.2.4	1.1.1.1	0x86ab	Standard query (0)	ww38.heynannyly.online	65	IN (0x0001)	false
Oct 30, 2024 17:12:24.079544067 CET	192.168.2.4	1.1.1.1	0xa501	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:24.079853058 CET	192.168.2.4	1.1.1.1	0xb116	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Oct 30, 2024 17:12:24.272983074 CET	192.168.2.4	1.1.1.1	0x25e3	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:24.273679972 CET	192.168.2.4	1.1.1.1	0xc82d	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 30, 2024 17:12:24.812684059 CET	192.168.2.4	1.1.1.1	0x853f	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:24.813220024 CET	192.168.2.4	1.1.1.1	0xf5b9	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 30, 2024 17:12:25.457556009 CET	192.168.2.4	1.1.1.1	0x3cd8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:25.457767963 CET	192.168.2.4	1.1.1.1	0x5c8a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 17:12:28.333951950 CET	192.168.2.4	1.1.1.1	0x731c	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:28.334342003 CET	192.168.2.4	1.1.1.1	0x9c02	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 30, 2024 17:12:28.622503042 CET	192.168.2.4	1.1.1.1	0x7730	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:28.622981071 CET	192.168.2.4	1.1.1.1	0x6fa5	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Oct 30, 2024 17:12:31.616192102 CET	192.168.2.4	1.1.1.1	0xec27	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:31.620531082 CET	192.168.2.4	1.1.1.1	0x8920	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 17:12:20.903599024 CET	1.1.1.1	192.168.2.4	0xf487	No error (0)	ww38.heynannyly.online	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:12:20.905749083 CET	1.1.1.1	192.168.2.4	0x35a0	No error (0)	ww38.heynannyly.online	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:12:20.905749083 CET	1.1.1.1	192.168.2.4	0x35a0	No error (0)	212218.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:20.905749083 CET	1.1.1.1	192.168.2.4	0x35a0	No error (0)	212218.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:22.828994989 CET	1.1.1.1	192.168.2.4	0xf28e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 17:12:22.829062939 CET	1.1.1.1	192.168.2.4	0xd25f	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:22.829062939 CET	1.1.1.1	192.168.2.4	0xd25f	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:22.829062939 CET	1.1.1.1	192.168.2.4	0xd25f	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:22.829062939 CET	1.1.1.1	192.168.2.4	0xd25f	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:22.829291105 CET	1.1.1.1	192.168.2.4	0x61e8	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:22.934468031 CET	1.1.1.1	192.168.2.4	0xd4e4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 17:12:22.935064077 CET	1.1.1.1	192.168.2.4	0xccbc	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:23.137090921 CET	1.1.1.1	192.168.2.4	0x3328	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:23.138206959 CET	1.1.1.1	192.168.2.4	0xa21d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 17:12:23.475951910 CET	1.1.1.1	192.168.2.4	0x86ab	No error (0)	ww38.heynannyly.online	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:12:23.630487919 CET	1.1.1.1	192.168.2.4	0xba9d	No error (0)	ww38.heynannyly.online	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:12:23.630487919 CET	1.1.1.1	192.168.2.4	0xba9d	No error (0)	212218.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:23.630487919 CET	1.1.1.1	192.168.2.4	0xba9d	No error (0)	212218.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:24.089920044 CET	1.1.1.1	192.168.2.4	0xa501	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:24.089920044 CET	1.1.1.1	192.168.2.4	0xa501	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:24.089920044 CET	1.1.1.1	192.168.2.4	0xa501	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:24.089920044 CET	1.1.1.1	192.168.2.4	0xa501	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:24.280208111 CET	1.1.1.1	192.168.2.4	0x25e3	No error (0)	syndicatedsearch.goog		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:24.819962978 CET	1.1.1.1	192.168.2.4	0x853f	No error (0)	syndicatedsearch.goog		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:25.465142012 CET	1.1.1.1	192.168.2.4	0x3cd8	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:25.465158939 CET	1.1.1.1	192.168.2.4	0x5c8a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 17:12:28.342551947 CET	1.1.1.1	192.168.2.4	0x731c	No error (0)	syndicatedsearch.goog		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:28.630846977 CET	1.1.1.1	192.168.2.4	0x7730	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:12:28.630846977 CET	1.1.1.1	192.168.2.4	0x7730	No error (0)	googlehosted.l.googleusercontent.com		216.58.212.129	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:28.633594036 CET	1.1.1.1	192.168.2.4	0x6fa5	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:12:30.527200937 CET	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:30.527200937 CET	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:31.174457073 CET	1.1.1.1	192.168.2.4	0xfaf2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:12:31.174457073 CET	1.1.1.1	192.168.2.4	0xfaf2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:31.624387026 CET	1.1.1.1	192.168.2.4	0xec27	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:12:31.624387026 CET	1.1.1.1	192.168.2.4	0xec27	No error (0)	googlehosted.l.googleusercontent.com		172.217.18.1	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:12:31.630750895 CET	1.1.1.1	192.168.2.4	0x8920	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:12:45.114756107 CET	1.1.1.1	192.168.2.4	0xd384	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:12:45.114756107 CET	1.1.1.1	192.168.2.4	0xd384	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:13:11.214931965 CET	1.1.1.1	192.168.2.4	0x93ac	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:13:11.214931965 CET	1.1.1.1	192.168.2.4	0x93ac	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:13:11.214931965 CET	1.1.1.1	192.168.2.4	0x93ac	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ww38.heynannyly.online

www.google.com

syndicatedsearch.goog

d38psrni17bvxu.cloudfront.net

fs.microsoft.com

https:

afs.googleusercontent.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	13.248.148.254	80	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 17:12:20.912098885 CET	466	OUT	GET /partner/schuler-group/account HTTP/1.1 Host: ww38.heynannyly.online Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 30, 2024 17:12:21.681483030 CET	1236	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Wed, 30 Oct 2024 16:12:21 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_U+CUtY5AuBwfhB5n6cZW37nam6D3udpUEkhpE3FZKurz3VUbvpryP5Mmaxj8PXWT1FkHpwQR0pQIfUEuS5l7Kw== X-Domain: heynannyly.online X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: OMGitsfast X-Subdomain: ww38 Transfer-Encoding: chunked Data Raw: 37 37 64 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 79 77 da c8 96 ff db fe 14 0a 39 2f e0 09 8b d8 6c 8c 43 f2 b0 b1 63 9c 80 37 bc 40 4e 26 47 48 05 08 84 44 4b c2 2c fd fc dd e7 77 ab 4a 42 18 dc 2f 79 a7 7b fa cc 19 27 36 52 2d b7 6e dd fd de 2a 3e bc a9 5d 9e b4 da 57 a7 ca c0 1f 5b 1f 77 3f d0 87 62 68 be 96 d2 8c ae e5 e8 a3 11 5b 54 62 8d b3 d9 ac 76 dd be f8 e2 74 ea 83 27 bd 59 bd 3e 3d 3e be ae d6 6e 67 d5 d9 6d f5 e2 b8 fa f5 b7 69 ed ec b4 f5 78 63 ab e7 ae 5a ec dd 5d 1d 9c 5e b4 0e 0e e6 6d fb 6a 7c d3 9d 34 16 85 a7 51 e9 4b db 3c b7 47 cd 09 33 ec e1 65 b5 79 a1 6b 8f b5 47 fd cb f5 45 53 b5 1f bf 74 2e be 1e b4 74 f3 a2 56 aa 3a e7 8f 5f b2 c5 d2 49 75 76 5a ad 5e 57 2a 3f ee de 9f dc f9 ed 62 75 7a 3c eb 0d 8e 8b f6 be de 79 c8 1f d8 da 78 bf 96 9f 1a 93 bb d3 d1 60 72 9a 3f eb 7c 99 ba cb fc fd 5d f7 69 e2 2e ae 8a 8d b1 36 1f 96 ae 1e 1f 5a d9 b3 d1 f9 64 76 7d a3 4e ae eb bd bb d3 e9 6d d1 3a f8 32 ab 54 62 ca 7c 6c d9 5e 25 36 f0 fd 49 39 93 99 cd 66 e9 59 3e ed b8 fd 4c f6 f0 [TRUNCATED] Data Ascii: 77d[yw9/lCc7@N&GHDK,wJB/y{'6R-n>]W[w?bh[Tbvt'Y>=>ngmixcZ]^mj\|4QK<G3eykGESt.tV:_IuvZ^W?buz<yx`r?\|]i.6Zdv}Nm:2Tb\|l^%6I9fY>L03'zKcD!w\|3_I65*Z
Oct 30, 2024 17:12:21.681507111 CET	1236	IN	Data Raw: 8b 09 8b 29 ba 78 ab c4 7c 36 f7 33 04 e9 48 d1 07 9a eb 31 bf 32 f5 7b a9 52 2c 13 05 84 dd b0 4a ec c9 64 b3 89 e3 fa 91 e9 33 d3 f0 07 15 83 3d 99 3a 4b f1 97 a4 62 da a6 6f 6a 56 ca d3 35 8b 55 b2 49 c5 1b b8 a6 3d 4a f9 4e aa 67 fa 15 db 09 Data Ascii: )x\|63H12{R,Jd3=:KbojV5UI=JNgao5^Xc[>dD/,aj5ykQuQVg2F4\tn9Sbip0^I^\|O&LcYY'sxW&(c}n
Oct 30, 2024 17:12:21.681519985 CET	1236	IN	Data Raw: 20 12 98 95 b1 53 b2 3c ba 0a 1b 67 32 a3 38 50 a5 b8 04 0a 29 51 e3 24 de f4 ba 10 9d 15 37 b9 88 4a 73 85 f8 43 83 5a 72 cd 59 e3 8f 88 ff 68 dd f5 88 90 5a 56 42 95 32 c7 5a 1f a8 73 1d a2 8c bb cc 1b 32 de 53 ff 3d 92 d2 a3 ae e6 b1 fd 42 f2 Data Ascii: S<g28P)Q$7JsCZrYhZVB2Zs2S=B,75^/K:-Ou}Ojj7^s(>qr4Y<1j^htoTM[9kd\|ZJ3U;9]^41n>x
Oct 30, 2024 17:12:21.681530952 CET	1236	IN	Data Raw: e1 8b dc c1 fa b9 b4 11 8c 42 9c ed b1 c8 e6 5d c7 b2 28 71 27 44 f8 56 04 36 d9 e2 c1 61 37 0a 0a 43 38 1e b7 13 4d 47 15 15 a3 b2 2a df f4 b3 88 23 49 a6 04 d7 bb ce fc 98 4e 61 d6 44 6b 5d 76 36 c5 23 90 9f 10 44 74 ed 80 87 b7 5c aa ea f6 64 Data Ascii: B](q'DV6a7C8MG#INaDk]v6#Dt\dJ"@MEG)J>v8wQ/)Q\#z!(F7":1ETF>5GUW8H_uwOm)@LFK_6jYB1r8u
Oct 30, 2024 17:12:21.681545019 CET	848	IN	Data Raw: 21 e7 43 42 c0 46 39 d1 b4 2c 13 19 01 ac 4e a5 c2 b5 94 18 b3 ad 57 89 d1 ec 58 a4 9b a7 1a db 67 ae ba 82 69 7b ca bb 77 01 5c 86 f2 ba fb 83 98 a2 bc a9 28 b9 e2 4f b1 59 e6 f8 af d1 5d b2 87 44 e3 9d ae f5 2a d9 77 52 24 38 2a ef 5c a6 79 8e Data Ascii: !CBF9,NWXgi{w\(OY]DwR$8\y]qB$`#6`#m`O&of{iOb0xQL%NI{\eQ*~Oe/cu{$,w'!HK,_RwgLe,0150xTg{VHNp1\Civ-
Oct 30, 2024 17:12:21.681636095 CET	1156	IN	Data Raw: b4 66 43 f2 6a 40 20 b1 97 06 17 5a c8 d1 21 79 21 72 3c 5b a3 9b 90 38 32 1e 98 96 91 c0 c2 51 c1 e2 22 b1 62 fc 6b f9 ed 2f 44 fc 41 ca 13 10 f3 17 6d c0 3c 1a 6a 26 95 df 37 eb 41 a8 f0 90 5e f2 33 d9 7c 29 bd 51 06 e4 45 a1 bf b7 36 7b 5f ea Data Ascii: fCj@ Z!y!r<[82Q"bk/DAm<j&7A^3\|)QE6{_RIk>^ZZ,t(:Ubs9Z46\|0;0xT*w>p&tU? )Tp!f,Op(Di6p-Q4P\+a,Ot[
Oct 30, 2024 17:12:22.084697962 CET	533	OUT	GET /track.php?domain=heynannyly.online&toggle=browserjs&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D HTTP/1.1 Host: ww38.heynannyly.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.heynannyly.online/partner/schuler-group/account Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 30, 2024 17:12:22.338941097 CET	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Wed, 30 Oct 2024 16:12:22 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 30, 2024 17:12:22.821223021 CET	409	OUT	GET /ls.php?t=67225ae5&token=d863ccd3b1bda2fea7dcb3182ab0c38aa4dbc26f HTTP/1.1 Host: ww38.heynannyly.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.heynannyly.online/partner/schuler-group/account Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 30, 2024 17:12:23.093751907 CET	856	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Wed, 30 Oct 2024 16:12:22 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_V64Fp3gYVtq7Mr/ZQLa7qpfQ4ygau1NKxLLXJs5H3G7XRCOtngfDHlzvHyQKb0roY1D5nPW4zwavKk35bLV9/A== Transfer-Encoding: chunked Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Oct 30, 2024 17:12:28.348207951 CET	652	OUT	GET /track.php?domain=heynannyly.online&caf=1&toggle=answercheck&answer=yes&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D HTTP/1.1 Host: ww38.heynannyly.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.heynannyly.online/partner/schuler-group/account Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg
Oct 30, 2024 17:12:28.605158091 CET	601	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Wed, 30 Oct 2024 16:12:28 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 30, 2024 17:12:28.617325068 CET	517	OUT	GET /favicon.ico HTTP/1.1 Host: ww38.heynannyly.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.heynannyly.online/partner/schuler-group/account Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg
Oct 30, 2024 17:12:28.861794949 CET	221	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 0 Content-Type: image/x-icon Date: Wed, 30 Oct 2024 16:12:28 GMT Etag: "66e18132-0" Last-Modified: Wed, 11 Sep 2024 11:38:26 GMT Server: Caddy Server: nginx
Oct 30, 2024 17:12:50.551532984 CET	619	OUT	GET /privacy.html HTTP/1.1 Host: ww38.heynannyly.online Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ww38.heynannyly.online/partner/schuler-group/account Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg
Oct 30, 2024 17:12:50.796725988 CET	1236	IN	HTTP/1.1 200 OK Content-Encoding: gzip Content-Type: text/html Date: Wed, 30 Oct 2024 16:12:50 GMT Etag: W/"66b20e20-365a" Last-Modified: Tue, 06 Aug 2024 11:50:56 GMT Server: Caddy Server: nginx Vary: Accept-Encoding Transfer-Encoding: chunked Data Raw: 61 34 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 dd 5b db 6e 1b 49 92 7d 1e 7f 45 0e 1b 83 95 07 12 a9 4b fb 22 59 16 96 2d d2 36 b1 b2 24 50 b4 bd 7e 5a 24 ab 92 64 8d 8a 55 d5 55 45 d1 9c 41 7f da 62 3f 69 7f 61 cf 89 cc ac 0b 45 b9 bd 0d cc cb 74 a3 db 32 99 97 c8 88 13 27 2e 99 3a ff f3 e0 e6 72 f2 f5 76 a8 16 e5 32 56 b7 9f 7e b9 1a 5d aa ce 41 af f7 e5 e4 b2 d7 1b 4c 06 ea 3f 3f 4c 3e 5e a9 a3 ee a1 9a e4 3a 29 a2 32 4a 13 1d f7 7a c3 eb 8e ea 2c ca 32 3b eb f5 d6 eb 75 77 7d d2 4d f3 79 6f 32 ee 7d e3 5a 47 9c ec 7e 3c 28 1b 33 bb 61 19 76 2e 9e 9d cb 86 df 96 71 52 bc dd b1 cc d1 e9 e9 a9 9d dd 51 b1 4e e6 6f 3b 32 c7 e8 10 53 97 a6 d4 10 b8 cc 0e cc af ab e8 e1 6d e7 32 4d 4a 93 94 07 93 4d 66 3a 2a b0 7f 7b db 29 cd b7 b2 c7 7d de a8 60 a1 f3 c2 94 6f 57 e5 ec e0 75 47 f5 b0 4a 19 95 b1 b9 b8 cd a3 07 1d 6c d4 6d 1a 47 c1 e6 bc 67 3f 7d 76 5e 94 9b d8 a8 12 0b ba 75 82 a2 80 08 7a 5f 45 cb b9 fa 87 9a a6 79 68 f2 33 75 f8 46 fd f6 6c 9a 86 1b 7e a6 83 fb 79 9e ae 92 f0 ec 27 73 ca 7f df a8 4c [TRUNCATED] Data Ascii: a40[nI}EK"Y-6$P~Z$dUUEAb?iaEt2'.:rv2V~]AL??L>^:)2Jz,2;uw}Myo2}ZG~<(3av.qRQNo;2Sm2MJMf:{)}`oWuGJlmGg?}v^uz_Eyh3uFl~y'sLa0ny$<eo:LW]g_HLG37no8WO'''o~{]:L%l(,gO_rJpbUbgJ#,65p</PB8Ylf%%l.B&41!"l}K%?Md{yq=G4QAM7,XY}[P[XIb54-8S'U4SU.$)8F0RE=0,_Ks"I<%e.OO8Nnv}QCPERxrqTgn~/k0'S.Bx9yFusf\|o;f\|q\|q;}_~U7exkcp%\|]L:Wt=!"s's.TrL<}CA q\ejp1lQ*&mfUQ9H-(((vjo-J@Yt&7`Z
Oct 30, 2024 17:12:50.796927929 CET	212	IN	Data Raw: e0 99 50 27 01 4e 1e 95 0b 11 a6 28 75 09 16 c4 59 e4 54 8d 63 e7 66 be 8a 85 95 0a 04 80 24 88 57 24 f5 7d 35 c5 31 92 b4 04 44 96 50 64 b8 2f cb 34 06 f3 14 74 95 e1 2a 4f 33 03 d0 be 37 89 c9 a1 b6 01 d5 76 5b eb 75 5c 6d a0 f6 de 0f 6e c7 cf Data Ascii: P'N(uYTcf$W$}51DPd/4tO37v[u\mn-a2n4`8Vockzsj<W{VAJvWd!r.O+P3Zf9Pp4eg<A/ww7c\|
Oct 30, 2024 17:12:50.796940088 CET	1236	IN	Data Raw: 8e 27 a3 3b 80 5e 4d 86 97 1f ae 6f ae 6e de c3 0f ae fa 93 77 37 e3 8f cf b7 0f ad 43 20 b1 04 d4 81 1f 97 05 58 0b 00 02 1e df f8 11 86 b5 62 fb 43 35 e7 01 e9 8b 04 51 75 be 51 88 32 a5 95 7b a6 26 46 2f d5 08 69 46 9e 20 52 f7 df ef ab ab c8 Data Ascii: ';^Monw7C XbC5QuQ2{&F/iF RL&2}kqDb%{F!`Y,z$bN*(WeweuN`&8QQD=epkZ1/tF797E"""Cqlue3zM#ou61ohc
Oct 30, 2024 17:12:50.796957970 CET	1236	IN	Data Raw: 1f 2f 59 a9 d2 01 91 31 09 ed 12 d0 51 b2 92 2a 55 8a 15 cf dd 9e 39 48 b8 8d 49 35 03 23 ff 5e b1 3c 25 93 92 d3 f6 91 e1 29 b2 07 6c a6 b7 c4 b2 de 21 38 28 17 ab 46 ae 41 4f 2f 50 5f 92 51 10 cf 9d 70 64 07 58 b3 40 0f 10 4b a1 4e b5 a8 60 e5 Data Ascii: /Y1Q*U9HI5#^<%)l!8(FAO/P_QpdX@KN`@X4_02ie,Li"fwRNq:0myj HY6)PGX5Vaq)Z.M.CV<UA'qR;PacesUGU(\|U7X<Z`btT.1q
Oct 30, 2024 17:12:50.796969891 CET	1236	IN	Data Raw: 65 a8 19 47 d0 0c d9 95 2f 7a 5e af 83 7a 86 ef 5c 17 c5 5a 10 31 25 40 5b 14 d5 ba 5d 9a 17 da e8 9a 30 11 00 40 58 5b 37 a6 54 21 5f fc 16 2f 99 74 12 15 12 5d 60 92 25 ba 84 68 37 4b d5 dd e8 3c 63 43 df 3f c6 f1 25 4c fa 38 2e 6d a0 6e 85 e0 Data Ascii: eG/z^z\Z1%@[]0@X[7T!_/t]`%h7K<cC?%L8.mn]XG?LZ-BF^T\|#4u({e=A$f4J9HUh.I=TC6,\|egTx]N/6J8/;InlI(R`gYMSi27s
Oct 30, 2024 17:12:50.796982050 CET	510	IN	Data Raw: 5c bb b9 74 2b fa b0 35 04 b7 13 b0 7b 08 bb e5 fd eb 17 9c 45 4a 78 1c 96 41 98 6d 04 46 45 9e 1d a5 51 e6 9e c3 ee 23 a1 2e 10 a7 d1 5a 10 52 93 44 11 e5 9d 7b 42 83 45 98 3e b0 2a 49 1c a0 f9 9c c1 82 0b 65 75 1f 70 72 e9 1f e4 6c 64 00 78 a5 Data Ascii: \t+5{EJxAmFEQ#.ZRD{BE>*Ieuprldx$G)gXM5HD&)>M4i:pJH<6$I!4/eKlsbNDxwOL0YOC1,sA{7;h5I!-KkNCQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	18.66.121.190	80	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 17:12:22.846303940 CET	435	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.heynannyly.online/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 30, 2024 17:12:23.676954031 CET	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Wed, 30 Oct 2024 11:04:56 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 3072267d18c4d0ed9e535752800364e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: k9iLsrTp4UkgVylBpz5ry0bmHfeHx3aP8JcOK_j1F6_oLTWMEi8ZAg== Age: 18447
Oct 30, 2024 17:12:23.677064896 CET	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Oct 30, 2024 17:12:23.677077055 CET	212	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=
Oct 30, 2024 17:12:23.677099943 CET	1236	IN	Data Raw: 4e 44 24 8a f6 50 b8 c3 3b 11 51 90 7e b2 47 16 ee f0 4e 44 24 86 f6 90 b8 c3 3b 11 91 10 da c3 e2 0e ef 44 44 22 68 0f 8d 3b bc 13 11 09 a0 3d 3c ee f0 4e 44 94 9d f6 18 b8 c3 3b 11 51 a3 22 38 1c 05 77 78 27 22 ca 4a 7b 2c dc e1 9d 88 28 23 ed Data Ascii: ND$P;Q~GND$;DD"h;=<ND;Q"8wx'"J{,(#pw"l2wx'"B{l(qw"wx'"JJ{*(!pw"d NDnwx'"h7;MD&qw"2+;MD&q
Oct 30, 2024 17:12:23.677114010 CET	1236	IN	Data Raw: 8f b7 f7 a8 32 ae a5 a6 c2 3d 0f ed d9 70 8f c4 3b b8 57 c4 db 7b c4 31 99 7c b8 e7 a2 3d 23 ee 51 78 07 f7 aa b8 ac 4a 7d 71 2d 35 09 ee bb bf b8 2d 9f b0 19 71 8f c0 3b b8 57 c6 81 77 e2 bb 3d 03 ee bb 77 9e c8 e9 6b 56 dc 83 f3 0e ee 95 bd 0b Data Ascii: 2=p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~{v}7Gw=-h{{1F,E.`{_s1W&Bh{ s.vA=hn5wQS;}mwbNI(
Oct 30, 2024 17:12:23.677125931 CET	1236	IN	Data Raw: 56 71 47 77 c2 76 19 b8 c7 e2 bd fe ab d7 99 71 8f c0 7b 2d da cd e2 ce fb 1d 24 ab 4f 4f 16 8b 7b 97 f7 4b 1a 68 8f 85 7b 60 de 6b d2 6e 17 77 0e bc 93 a4 6e 9f 2c 19 f7 d0 bc 47 a2 3d 1e ee 1d de 7f 95 9a 76 c3 b8 73 24 92 e4 f4 ce 64 e1 b8 ef Data Ascii: VqGwvq{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=oipq=ipv~;$!;wP>?
Oct 30, 2024 17:12:23.677140951 CET	636	IN	Data Raw: e8 20 f9 59 c7 3d 03 ed b5 79 ef 3f 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf 48 fb c8 cd f7 91 b4 d7 c0 7d d8 c9 c8 c3 79 69 ef e7 Data Ascii: Y=y? SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg#6pg)v}
Oct 30, 2024 17:12:23.677263021 CET	1236	IN	Data Raw: db 0b 1e f4 0e e0 dd 85 a2 3d 19 ef 83 69 57 83 3b 1b ef c4 76 bb 2a dc 13 f1 ee 45 7b 8f f7 33 b5 70 f7 a6 3d 09 ef c3 68 57 84 3b ba 13 b6 ab c2 3d 01 ef de b4 77 fb e0 cc 48 dc 5b d1 1e 9d f7 e1 b4 6b c2 1d dd a9 98 b6 db c0 3d 32 ef ad 68 af Data Ascii: =iW;v*E{3p=hW;=wH[k=2h}=gL}wvewx?.~saZx;pQO{wt'lW{w7dwt'l{`w]N}.=vq{{
Oct 30, 2024 17:12:23.677274942 CET	1236	IN	Data Raw: 31 ef 69 68 1f ce bb 0e dc d9 6e a7 e2 fa 48 37 ee 69 68 6f ce fb d9 c1 b4 0f c5 bd 11 ef e9 68 1f c6 fb 1c b6 13 a1 7b 60 dc ff ec 5c 4a dd ea bf e7 31 94 f6 11 b8 77 79 3f 2b 8f f6 c1 bc cf 61 3b 11 ba 07 c5 3d 31 ed b5 79 1f 41 fb 48 dc 6b f1 Data Ascii: 1ihnH7ihoh{`\J1wy?+a;=1yAHkA+"3^}$s\|n{&G^Z*rSi{->.w)6W~v>DwW~v6q>Dw)f
Oct 30, 2024 17:12:23.677288055 CET	1236	IN	Data Raw: 1e 84 76 b1 b8 a3 3b 91 02 db c3 e0 be 8e f7 7c b4 67 c5 7d 95 f7 40 b4 cb c5 1d dd 89 e4 db 1e 0a f7 ab bc e7 a4 3d 33 ee 4b 4b 63 77 07 a4 5d 30 ee e8 4e 24 de f6 70 b8 f7 78 cf 4b 7b 76 dc 97 96 9e 3a 77 be 04 dc 3f 61 45 13 2d f7 49 09 b8 9f Data Ascii: v;\|g}@=3KKcw]0N$pxK{v:w?aE-I?tn[G;2D\|=zGDwB{fw'`sHGV/1w?.>"t{ywRh;=g=%BL=Ny_v"5P
Oct 30, 2024 17:12:23.682502985 CET	1236	IN	Data Raw: 4a f2 63 ab 4f ae c5 dd 08 ed b1 71 47 77 a2 bc bd 26 06 77 d1 13 81 9f fc 78 05 77 33 b4 47 c7 1d dd 89 0c db de 10 77 e9 bc 3b c1 b4 3f 31 d5 b4 d8 b8 b3 ef 4e 94 af cb d3 c2 70 97 cd bb 33 44 7b 0a dc d1 9d c8 aa ed 1e b8 4b e6 5d 28 ee 33 3e Data Ascii: JcOqGw&wxw3Gw;?1Np3D{K](3>'`qbG"qD6mG&pGw"O#wgTQ:-w59C'R\|wfm])q:wt'ftwt'2ft.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	76.223.26.96	80	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 17:12:23.636786938 CET	463	OUT	GET /track.php?domain=heynannyly.online&toggle=browserjs&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D HTTP/1.1 Host: ww38.heynannyly.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 30, 2024 17:12:24.372689009 CET	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Wed, 30 Oct 2024 16:12:24 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 30, 2024 17:12:28.631072044 CET	582	OUT	GET /track.php?domain=heynannyly.online&caf=1&toggle=answercheck&answer=yes&uid=MTczMDMwNDc0MS41MjAzOjhhYjdjOWMyODY1MDQ2ODA5Y2VmYTlkY2UxMDU1NDFkNTFiOGU1NzFkZjI4YWM4ODJlNDUzYzA4NjkwODZkNzU6NjcyMjVhZTU3ZjA0Nw%3D%3D HTTP/1.1 Host: ww38.heynannyly.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg
Oct 30, 2024 17:12:28.881686926 CET	601	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Wed, 30 Oct 2024 16:12:28 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 30, 2024 17:12:28.920509100 CET	386	OUT	GET /favicon.ico HTTP/1.1 Host: ww38.heynannyly.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=407975e4afa14637:T=1730304746:RT=1730304746:S=ALNI_MaACdAYcHgo5wmzaspGbi3Yy2-lbg
Oct 30, 2024 17:12:29.222923994 CET	221	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 0 Content-Type: image/x-icon Date: Wed, 30 Oct 2024 16:12:29 GMT Etag: "66e18132-0" Last-Modified: Wed, 11 Sep 2024 11:38:26 GMT Server: Caddy Server: nginx
Oct 30, 2024 17:13:14.232474089 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	18.66.121.190	80	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 17:12:24.096683025 CET	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 30, 2024 17:12:24.927660942 CET	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Wed, 30 Oct 2024 11:04:56 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 f49c99d2326b14738507e1c2ddcae1dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: oMb6M0gV67kizc1jInrASbZzmK4QwX2pjXfXBncn_7uIUgFISHPAcQ== Age: 18448
Oct 30, 2024 17:12:24.928215981 CET	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Oct 30, 2024 17:12:24.928277969 CET	1236	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;
Oct 30, 2024 17:12:24.928292990 CET	1236	IN	Data Raw: 3d 32 ee c9 79 07 77 74 27 af 58 35 e9 71 8f 4b 7b 74 dc 3b bc 7f 09 dc d1 9d b0 1d dc d3 d2 9e 00 f7 f9 f9 53 bb c0 1d dd 49 70 3f 67 c5 a4 c6 3d 3e ed 49 70 4f c8 3b b8 5f e9 4e c4 22 8e c9 48 c5 3d 05 ed 89 70 4f c6 3b b8 5f 8d eb 4c 54 b3 cf Data Ascii: =2ywt'X5qK{t;SIp?g=>IpO;_N"H=pO;_LTZd'W;.T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#
Oct 30, 2024 17:12:24.928388119 CET	1236	IN	Data Raw: 7b 5e dc 77 ec b8 e5 05 b5 b4 07 c0 3d db 5b da fd b4 1b c3 7d f2 f7 80 83 a4 f7 9d 49 d3 b8 e7 e2 3d 00 ed 61 70 cf c1 7b 15 ed d6 70 9f bc 80 1d 24 bb cf 4f 5a c7 3d 07 ef 41 68 0f 85 7b 6a de ab 69 37 87 3b d7 99 48 76 b7 4f 16 80 fb 8e 1d a7 Data Ascii: {^w=[}I=ap{p$OZ=Ah{ji7;HvO+=)yD=9I{gS}@pOA{W;Ij&K=Ai{d/$$Y\k}{`Eo?GVqGwvq{-$OO
Oct 30, 2024 17:12:24.928400993 CET	1236	IN	Data Raw: cc 5b 42 69 af c7 fb 04 b6 13 a1 7b 34 dc 23 d1 1e 86 f7 f5 b4 6f c4 bd c3 7b cb a3 33 f1 68 af c3 bb 45 dc 19 39 40 e8 2e 03 f7 be f7 f3 24 f1 be 91 f6 7e dc db 9d 8c 8c 4b fb 68 de 27 b0 9d 28 51 af 16 86 fb 2d b3 d1 79 f3 e7 fd be ef 2d f5 49 Data Ascii: [Bi{4#o{3hE9@.$~Kh'(Q-y-I^7<a}6MIx;h/^\| ^~^M@\|OG0Te}NF}sMNAqOL{yCp{znw Y=y? SK&=2\K
Oct 30, 2024 17:12:24.928411961 CET	1236	IN	Data Raw: 5f da f5 e2 8e ee 84 ed 7a 71 6f c0 7b 3a da 93 e2 5e 93 77 7f da 15 e3 8e ee 64 a7 87 4f 16 87 7b 4d de 53 d2 9e 18 f7 1a bc b7 a1 5d 33 ee f0 4e 7c b6 6b c6 bd 06 ef 69 69 4f 8e fb 70 de b7 3e d7 8a 76 dd b8 73 68 86 f8 6e d7 8c fb 70 de 9f 7d Data Ascii: _zqo{:^wdO{MS]3N\|kiiOp>vshnp}\|jk>ow]7y@{y@v]7g=]=N~3]?Fo<vN\|[i2i;}g75}m
Oct 30, 2024 17:12:24.928423882 CET	1236	IN	Data Raw: 4f 8f 3b ba 13 59 b1 7d 71 e1 fc f9 71 a9 b4 37 e7 bd 11 ee 4b 6b 13 c6 7b 87 f6 2c b8 a3 3b 51 94 32 2c e6 85 ae 22 e3 52 69 6f ca bb f3 a4 5d 18 ef 3d da f3 e0 8e ee 44 36 6c 5f c6 5d 12 ef 1b 68 6f c6 bb f3 a6 5d 10 ef 2b b4 67 c2 1d dd 89 4c Data Ascii: O;Y}qq7Kk{,;Q2,"Rio]=D6l_]ho]+gL~w)}/JWi;Y}w>x_C{6kqZu}^#Q]{Nng}V$QnX{.k^wLIX{k/5ig
Oct 30, 2024 17:12:24.928484917 CET	1236	IN	Data Raw: 4e 84 ee 29 70 6f 45 7b 12 de 9d 6c da 1b f2 be 80 ed 44 0a 7b 53 1b ee ad 69 4f c0 bb 93 4e 7b 23 de 17 b0 9d 08 dd 63 e3 1e 84 f6 e8 bc 3b f9 b4 37 e0 7d 01 db 89 d0 3d 2e ee c1 68 8f cc 7b 2c dc 2f 86 a4 bd 36 ef 12 70 67 9c 0c 91 47 07 94 e0 Data Ascii: N)poE{lD{SiON{#c;7}=.h{,/6pgG;]*%IiB{-8"~+(Gq+OdH;M=7 RB.t>l'BG=Ns"qgiM$IhSG0;}=$Ii
Oct 30, 2024 17:12:24.928498030 CET	1236	IN	Data Raw: 3b b6 13 99 d3 3d 1a ee 59 78 77 c9 69 9f 8a d8 11 6c 27 42 77 81 b8 67 e0 3d 2d ee 33 51 69 4f 88 3b eb 8d 28 5d 26 70 4f ce 7b 4a dc 67 22 ff 74 bc c4 44 84 ee 72 71 4f cc bb 33 44 7b 2a dc af 65 ad 11 a5 ed 5a 1b b8 27 e5 dd 19 a2 3d 11 ee d8 Data Ascii: ;=Yxwil'Bwg=-3QiO;(]&pO{Jg"tDrqO3D{*eZ'=Nd=R3pOC{"YgD6uOSwVQI5ct%FdV%w]jwg3N(k<>5ewe1KG==2Nd[#{$~;HwVqq+
Oct 30, 2024 17:12:24.933578014 CET	251	IN	Data Raw: 44 59 3a 1d 11 77 46 c8 10 11 e9 e0 dd 41 3b 11 91 3d de 1d 37 96 88 88 ec f1 ee a0 9d 88 48 51 fb 02 e2 0e ed 44 44 ba 78 77 d0 4e 44 a4 ac 10 b8 ff 1d 3f 23 11 91 3a de 1d d3 c1 88 88 ec f1 ee b8 b1 44 44 64 8f 77 07 ed 44 44 5a 79 3f dd 18 77 Data Ascii: DY:wFA;=7HQDDxwND?#:DDdwDDZy?wh'"Rv"";)1BKDDxwNDdwDD6W;)wh'"2c=;oADdw%""{;~""{;;;;;;4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49737	13.248.148.254	80	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 17:13:05.920931101 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	142.250.186.36	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:23 UTC	430	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww38.heynannyly.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:24 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 152276 Date: Wed, 30 Oct 2024 16:12:24 GMT Expires: Wed, 30 Oct 2024 16:12:24 GMT Cache-Control: private, max-age=3600 ETag: "3251049548995181077" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 16:12:24 UTC	534	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 34 30 36 33 35 33 32 36 32 31 32 33 34 37 37 37 37 31 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 37 2c 31 37 33 30 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"1406353262123477771",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,1730
2024-10-30 16:12:24 UTC	1378	IN	Data Raw: 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 Data Ascii: rProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQ
2024-10-30 16:12:24 UTC	1378	IN	Data Raw: 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 68 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 Data Ascii: s,"description",{configurable:!0,writable:!0,value:h})}if(a)return a;c.prototype.toString=function(){return this.je};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator
2024-10-30 16:12:24 UTC	1378	IN	Data Raw: 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 Data Ascii: ma?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.de
2024-10-30 16:12:24 UTC	1378	IN	Data Raw: 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 5a 66 28 68 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 68 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 67 3d 68 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 67 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 67 3d 21 31 7d 67 3f 74 68 69 73 2e 50 66 28 68 29 3a 74 68 69 73 2e 49 64 28 68 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 50 66 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 67 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 56 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 67 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e Data Ascii: anceof b)this.Zf(h);else{a:switch(typeof h){case "object":var g=h!=null;break a;case "function":g=!0;break a;default:g=!1}g?this.Pf(h):this.Id(h)}};b.prototype.Pf=function(h){var g=void 0;try{g=h.then}catch(k){this.Vc(k);return}typeof g=="function"?this.
2024-10-30 16:12:24 UTC	1378	IN	Data Raw: 6e 28 68 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6c 28 72 28 76 29 29 7d 63 61 74 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 67 62 28 6b 28 68 2c 6c 29 2c 6b 28 67 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 62 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 0a 67 29 7b 66 Data Ascii: n(h,g){function k(r,t){return typeof r=="function"?function(v){try{l(r(v))}catch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.gb(k(h,l),k(g,m));return p};b.prototype.catch=function(h){return this.then(void 0,h)};b.prototype.gb=function(h,g){f
2024-10-30 16:12:24 UTC	1378	IN	Data Raw: 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 68 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 68 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b Data Ascii: lue,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!sa(k,h)){var l=new c;ca(k,h,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;
2024-10-30 16:12:24 UTC	1378	IN	Data Raw: 6b 3b 76 61 72 20 6d 3d 67 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 73 61 28 67 5b 30 5d 2c 6c 29 29 66 6f 72 28 67 3d 30 3b 67 3c 6d 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 67 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 67 2c 48 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 48 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 75 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 67 2e 6e 65 78 Data Ascii: k;var m=g[0][l];if(m&&sa(g[0],l))for(g=0;g<m.length;g++){var p=m[g];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:g,H:p}}return{id:l,list:m,index:-1,H:void 0}}function e(g){this[0]={};this[1]=b();this.size=0;if(g){g=u(g);for(var k;!(k=g.nex
2024-10-30 16:12:24 UTC	1378	IN	Data Raw: 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 5b 67 2e 6b 65 79 2c 67 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 Data Ascii: ype.entries=function(){return c(this,function(g){return[g.key,g.value]})};e.prototype.keys=function(){return c(this,function(g){return g.key})};e.prototype.values=function(){return c(this,function(g){return g.value})};e.prototype.forEach=function(g,k){for
2024-10-30 16:12:24 UTC	1378	IN	Data Raw: 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 78 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 Data Ascii: a?a:function(b,c){var d=xa(this,b,"endsWith");b+="";c===void 0&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:25 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 16:12:25 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25942 Date: Wed, 30 Oct 2024 16:12:25 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49747	142.250.184.206	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:26 UTC	1772	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.heynannyly.online%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MjI1YWU1N2VmZjB8fHwxNzMwMzA0NzQxLjU1MTV8ZDIxNDAwM2I2YmE2YzgyZDY4M2ExMzU3ZTQ0ODY0NjRiZDI5NzkyM3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGQ4NjNjY2QzYjFiZGEyZmVhN2RjYjMxODJhYjBjMzhhYTRkYmMyNmZ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107%2C49280906%2C72771953&format=r3%7Cs&nocache=9531730304744137&num=0&output=afd_ads&domain_name=ww38.heynannyly.online&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1730304744138&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=691096265&rurl=http%3A [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://ww38.heynannyly.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:26 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Wed, 30 Oct 2024 16:12:26 GMT Expires: Wed, 30 Oct 2024 16:12:26 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bTk71uukhYLKU4x5iUPzAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 16:12:26 UTC	571	IN	Data Raw: 33 61 35 61 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3a5a<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 69 67 68 74 3a 31 30 30 25 3b 7d 2e 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a Data Ascii: ight:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 65 3a 31 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 2e 6d 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e Data Ascii: e:1; max-width: 100%;}.m_{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inlin
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c Data Ascii: ign:start; -webkit-align-items:flex-start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-al
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 31 30 32 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 64 69 76 3e 64 69 76 2e 73 69 31 32 38 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: webkit-flex-shrink:1; flex-shrink:1;}.si102{border-radius:15px;height:30px;width:1px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}div>div.si128:last-child{display:none;}.si133{background-co
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 20 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 Data Ascii: start;-ms-flex-wrap:wrap; -webkit-flex-wrap:wrap; flex-wrap:wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 Data Ascii: -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div si69" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:center
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 64 3d 22 65 33 22 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 6c 69 63 6b 74 72 61 63 6b 65 64 41 64 5f 6a 73 20 73 69 31 30 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 33 38 2e 68 65 79 6e 61 6e 6e 79 6c 79 2e 6f 6e 6c 69 6e 65 2f 3f 74 73 3d 66 45 4e 73 5a 57 46 75 55 47 56 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 57 4e 72 5a 58 51 77 4d 54 45 73 59 6e 56 Data Ascii: d="e3" class="i_ div clicktrackedAd_js si101" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="http://ww38.heynannyly.online/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnV
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 Data Ascii: content:center;-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-h
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 31 4e 32 56 6d 5a 6a 42 38 66 48 77 78 4e 7a 4d 77 4d 7a 41 30 4e 7a 51 78 4c 6a 55 31 4d 54 56 38 5a 44 49 78 4e 44 41 77 4d 32 49 32 59 6d 45 32 59 7a 67 79 5a 44 59 34 4d 32 45 78 4d 7a 55 33 5a 54 51 30 4f 44 59 30 4e 6a 52 69 5a 44 49 35 4e 7a 6b 79 4d 33 78 38 66 48 78 38 4d 58 78 38 4d 48 77 77 66 48 78 38 66 44 46 38 66 48 78 38 66 44 42 38 4d 48 78 38 66 48 78 38 66 48 78 38 66 48 77 77 66 44 42 38 66 44 42 38 66 48 77 77 66 44 42 38 56 7a 45 77 50 58 78 38 4d 58 78 58 4d 54 41 39 66 47 51 34 4e 6a 4e 6a 59 32 51 7a 59 6a 46 69 5a 47 45 79 5a 6d 56 68 4e 32 52 6a 59 6a 4d 78 4f 44 4a 68 59 6a 42 6a 4d 7a 68 68 59 54 52 6b 59 6d 4d 79 4e 6d 5a 38 4d 48 78 6b 63 43 31 30 5a 57 46 74 61 57 35 30 5a 58 4a 75 5a 58 51 77 4f 56 38 7a 63 47 68 38 4d 48 Data Ascii: 1N2VmZjB8fHwxNzMwMzA0NzQxLjU1MTV8ZDIxNDAwM2I2YmE2YzgyZDY4M2ExMzU3ZTQ0ODY0NjRiZDI5NzkyM3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGQ4NjNjY2QzYjFiZGEyZmVhN2RjYjMxODJhYjBjMzhhYTRkYmMyNmZ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	172.217.18.100	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:26 UTC	476	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:26 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153650 Date: Wed, 30 Oct 2024 16:12:26 GMT Expires: Wed, 30 Oct 2024 16:12:26 GMT Cache-Control: private, max-age=3600 ETag: "8306099939284893895" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 16:12:26 UTC	534	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 35 31 34 39 34 32 39 39 34 35 35 30 31 30 37 31 35 36 36 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 34 33 39 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,173
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e Data Ascii: dDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnN
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 Data Ascii: !0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.qe};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 Data Ascii: ;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.g
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4e 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4e 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 Data Ascii: tch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Nd(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Nd(g)};b.prototyp
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6c 28 72 28 76 29 29 7d 63 61 74 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 Data Ascii: typeof r=="function"?function(v){try{l(r(v))}catch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 Data Ascii: ion c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);r
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 Data Ascii: l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e Data Ascii: c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.
2024-10-30 16:12:26 UTC	1378	IN	Data Raw: 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 Data Ascii: s,b,"endsWith");b+="";c===void 0&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:26 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 16:12:26 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=26000 Date: Wed, 30 Oct 2024 16:12:26 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 16:12:26 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49753	142.250.184.206	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:27 UTC	555	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:27 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153679 Date: Wed, 30 Oct 2024 16:12:27 GMT Expires: Wed, 30 Oct 2024 16:12:27 GMT Cache-Control: private, max-age=3600 ETag: "4702534369519511286" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 16:12:27 UTC	534	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 35 31 34 39 34 32 39 39 34 35 35 30 31 30 37 31 35 36 36 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301
2024-10-30 16:12:27 UTC	1378	IN	Data Raw: 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 Data Ascii: ProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQs
2024-10-30 16:12:27 UTC	1378	IN	Data Raw: 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 Data Ascii: ,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.qe};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator"
2024-10-30 16:12:27 UTC	1378	IN	Data Raw: 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: a?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.def
2024-10-30 16:12:27 UTC	1378	IN	Data Raw: 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 66 67 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4e 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 Data Ascii: nceof b)this.fg(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Nd(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.g
2024-10-30 16:12:27 UTC	1378	IN	Data Raw: 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6c 28 72 28 76 29 29 7d 63 61 74 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 Data Ascii: (g,h){function k(r,t){return typeof r=="function"?function(v){try{l(r(v))}catch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){fu
2024-10-30 16:12:27 UTC	1378	IN	Data Raw: 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f Data Ascii: ue,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;O
2024-10-30 16:12:27 UTC	1378	IN	Data Raw: 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 73 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 Data Ascii: ;var m=h[0][l];if(m&&sa(h[0],l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next
2024-10-30 16:12:27 UTC	1378	IN	Data Raw: 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 Data Ascii: pe.entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(
2024-10-30 16:12:27 UTC	1378	IN	Data Raw: 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 78 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 Data Ascii: ?a:function(b,c){var d=xa(this,b,"endsWith");b+="";c===void 0&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	142.250.186.78	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:29 UTC	373	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:29 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 152261 Date: Wed, 30 Oct 2024 16:12:29 GMT Expires: Wed, 30 Oct 2024 16:12:29 GMT Cache-Control: private, max-age=3600 ETag: "7699232102608605120" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 16:12:29 UTC	534	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 34 30 36 33 35 33 32 36 32 31 32 33 34 37 37 37 37 31 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"1406353262123477771",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,173014
2024-10-30 16:12:29 UTC	1378	IN	Data Raw: 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 Data Ascii: seServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxp
2024-10-30 16:12:29 UTC	1378	IN	Data Raw: 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 68 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 Data Ascii: ,{configurable:!0,writable:!0,value:h})}if(a)return a;c.prototype.toString=function(){return this.je};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="A
2024-10-30 16:12:29 UTC	1378	IN	Data Raw: 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 Data Ascii: ){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties)
2024-10-30 16:12:29 UTC	1378	IN	Data Raw: 66 28 68 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 68 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 67 3d 68 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 67 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 67 3d 21 31 7d 67 3f 74 68 69 73 2e 50 66 28 68 29 3a 74 68 69 73 2e 49 64 28 68 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 50 66 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 67 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 56 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 67 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 61 67 28 67 2c 68 29 3a 74 68 69 73 2e 49 64 Data Ascii: f(h);else{a:switch(typeof h){case "object":var g=h!=null;break a;case "function":g=!0;break a;default:g=!1}g?this.Pf(h):this.Id(h)}};b.prototype.Pf=function(h){var g=void 0;try{g=h.then}catch(k){this.Vc(k);return}typeof g=="function"?this.ag(g,h):this.Id
2024-10-30 16:12:29 UTC	1378	IN	Data Raw: 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6c 28 72 28 76 29 29 7d 63 61 74 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 67 62 28 6b 28 68 2c 6c 29 2c 6b 28 67 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 62 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 0a 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 Data Ascii: k(r,t){return typeof r=="function"?function(v){try{l(r(v))}catch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.gb(k(h,l),k(g,m));return p};b.prototype.catch=function(h){return this.then(void 0,h)};b.prototype.gb=function(h,g){function k(){swi
2024-10-30 16:12:29 UTC	1378	IN	Data Raw: 30 5d 2c 6c 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 68 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 68 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 Data Ascii: 0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!sa(k,h)){var l=new c;ca(k,h,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtens
2024-10-30 16:12:29 UTC	1378	IN	Data Raw: 3b 69 66 28 6d 26 26 73 61 28 67 5b 30 5d 2c 6c 29 29 66 6f 72 28 67 3d 30 3b 67 3c 6d 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 67 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 67 2c 48 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 48 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 75 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e Data Ascii: ;if(m&&sa(g[0],l))for(g=0;g<m.length;g++){var p=m[g];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:g,H:p}}return{id:l,list:m,index:-1,H:void 0}}function e(g){this[0]={};this[1]=b();this.size=0;if(g){g=u(g);for(var k;!(k=g.next()).done;)k=k.
2024-10-30 16:12:29 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 5b 67 2e 6b 65 79 2c 67 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 Data Ascii: ction(){return c(this,function(g){return[g.key,g.value]})};e.prototype.keys=function(){return c(this,function(g){return g.key})};e.prototype.values=function(){return c(this,function(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.ent
2024-10-30 16:12:29 UTC	1378	IN	Data Raw: 63 29 7b 76 61 72 20 64 3d 78 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e Data Ascii: c){var d=xa(this,b,"endsWith");b+="";c===void 0&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49756	216.58.212.129	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:29 UTC	748	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:30 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 Date: Wed, 30 Oct 2024 16:12:29 GMT Expires: Thu, 31 Oct 2024 15:12:29 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 16:12:30 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49755	216.58.212.129	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:29 UTC	749	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:30 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 29 Oct 2024 20:29:11 GMT Expires: Wed, 30 Oct 2024 19:29:11 GMT Cache-Control: public, max-age=82800 Age: 70998 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 16:12:30 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49746	142.250.185.238	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:30 UTC	886	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=2pr8pnsbhk5i&aqid=6loiZ7L3FaTjjuwPoIa0yAI&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=691096265&csala=8%7C0%7C1979%7C1640%7C257&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww38.heynannyly.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:30 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-IOyyWBiuo4xVvfgJHKuSIQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Wed, 30 Oct 2024 16:12:30 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49760	142.250.185.238	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:32 UTC	886	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ak1dxsfd5oey&aqid=6loiZ7L3FaTjjuwPoIa0yAI&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=691096265&csala=8%7C0%7C1979%7C1640%7C257&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww38.heynannyly.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:32 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-PLQ3Ix70w89PogyJMO_stQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Wed, 30 Oct 2024 16:12:32 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49762	172.217.18.1	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:32 UTC	508	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:32 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 10:33:26 GMT Expires: Thu, 31 Oct 2024 09:33:26 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 20346 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 16:12:32 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	172.217.18.1	443	4208	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:12:32 UTC	507	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:12:32 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 12:06:50 GMT Expires: Thu, 31 Oct 2024 11:06:50 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 14742 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 16:12:32 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49767	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:12 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:12 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:12 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161312Z-17fbfdc98bbbnx4ldgze4de5zs00000006yg000000001dn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:12 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 16:13:12 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-30 16:13:12 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-30 16:13:12 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-30 16:13:12 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-30 16:13:12 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-30 16:13:12 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-30 16:13:12 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-30 16:13:12 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-30 16:13:12 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49772	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:13 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:14 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 63125a57-c01e-0046-4226-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161314Z-r1755647c66t77qv3m6k1gb3zw00000007tg00000000aphd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:14 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49768	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:13 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:14 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161314Z-r1755647c66ss75qkr31zpy1kc00000007u000000000apq9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:14 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49769	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:13 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:13 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161313Z-17fbfdc98bblzxqcphe71tp4qw00000003ng000000005cg1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:14 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49770	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:13 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:13 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 8f1f3dd8-601e-0097-4789-28f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161313Z-r1755647c664nptf1txg2psens0000000730000000005y69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:14 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49771	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:13 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:14 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c4ab37c7-901e-002a-3417-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161314Z-r1755647c66gqcpzhw8q9nhnq000000008x000000000b5yx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:14 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49777	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:15 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:15 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 8abc48b9-201e-0096-2f4f-28ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161315Z-r1755647c66hxv26qums8q8fsw000000069000000000a1a3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:15 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49776	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:15 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161315Z-17fbfdc98bbl4n669ut4r27e0800000007w000000000879t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49778	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:15 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:15 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d6813257-101e-0034-034f-2896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161315Z-r1755647c666qwwlm3r555dyqc00000008k0000000001egu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:15 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49775	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:15 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: bbf1142f-f01e-0085-589b-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161315Z-17fbfdc98bbx59j5xd9kpbrs8400000007ug0000000021r5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49774	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:15 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:15 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1041074d-101e-0034-30b5-2596ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161315Z-r1755647c6688lj6g0wg0rqr1400000008cg00000000a0h2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:15 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49785	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:16 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: abb1733e-f01e-005d-6a3c-2813ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161316Z-17fbfdc98bbsq6qfu114w62x8n000000072g000000005kf9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49781	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:16 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f66eff46-601e-0084-3c9d-276b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161316Z-17fbfdc98bbds27mnhu6ftg4d800000006k000000000907t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49784	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:16 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161316Z-r1755647c66x2fg5vpbex0bd8400000009rg0000000040c8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49782	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:16 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161316Z-r1755647c66hbclz9tgqkaxg2w00000009s0000000008xsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49783	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:16 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: fcb0891e-801e-007b-6669-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161316Z-r1755647c66x7vzx9armv8e3cw00000009ug000000008mqa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49787	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:17 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 77b1f39f-101e-0079-106b-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161317Z-r1755647c66hbclz9tgqkaxg2w00000009y0000000000cae x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49786	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:17 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 898be286-601e-003d-2804-276f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161317Z-r1755647c66tgwsmrrc4e69sk000000007m00000000041sy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49790	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:17 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:17 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 7bd8c047-e01e-000c-239d-278e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161317Z-17fbfdc98bb9cv5m0pampz446s00000007pg000000006f1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:17 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49788	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:17 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161317Z-r1755647c668lcmr2va34xxa5s000000070g000000000scg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:18 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49789	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:17 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:17 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161317Z-r1755647c66tgwsmrrc4e69sk000000007pg0000000004p0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:18 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49792	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:18 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 338c7fbe-d01e-0028-7d3c-287896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161318Z-r1755647c66t77qv3m6k1gb3zw00000007tg00000000appc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49791	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:18 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161318Z-17fbfdc98bb6kklk3r0qwaavtw00000006b0000000000urw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49793	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:18 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: faf669f2-101e-0065-23a4-264088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161318Z-r1755647c6688lj6g0wg0rqr1400000008f0000000005rhk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:19 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49794	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:18 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: c80232df-501e-00a3-48ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161318Z-r1755647c66p58nm9wqx75pnms00000007b000000000b5cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:19 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49795	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:18 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:18 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 2d06c87c-b01e-0021-139b-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161318Z-17fbfdc98bbdbgkb6uyh3q4ue400000007m0000000007k7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:19 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49800	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:20 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161320Z-17fbfdc98bbfmg5wrf1ctcuuun00000008k0000000009539 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49802	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:20 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:20 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 45317ed5-a01e-0098-2767-288556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161320Z-r1755647c66mrgwz6d897uymaw0000000280000000002awx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:20 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49798	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:20 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:20 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161320Z-r1755647c66ljccje5cnds62nc00000006y00000000094p7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:20 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49799	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:20 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 1089ebf2-001e-0028-530d-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161320Z-r1755647c66f4bf880huw27dwc00000009rg000000000gsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49801	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:20 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 08308beb-701e-001e-43b0-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161320Z-r1755647c66bdj57qqnd8h5hp800000009100000000003tw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49807	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:21 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:21 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161321Z-r1755647c66z67vn9nc21z11a800000007sg000000000uw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:21 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49806	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:21 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161321Z-17fbfdc98bbjwdgn5g1mr5hcxn000000068000000000240a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49804	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:21 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161321Z-17fbfdc98bbz4mxcabnudsmquw000000076g000000008381 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49803	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:21 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:21 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8e3eac93-d01e-0017-759c-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161321Z-17fbfdc98bb8mkvjfkt54wa5380000000690000000002ape x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:21 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49805	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:21 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b953619b-001e-0017-7a89-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161321Z-r1755647c66hpt4fmfneq8rup800000005gg000000004esn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49808	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:22 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:22 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161322Z-17fbfdc98bblfj7gw4f18guu2800000009t000000000300b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:22 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49809	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:22 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:22 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 08340ebf-701e-001e-35b1-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161322Z-r1755647c66pzcrw3ktqe96x2s00000009fg0000000083xz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:22 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:22 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:22 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161322Z-r1755647c666sbmsukk894ba7n000000061g000000004qp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:22 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:22 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: ca0e8e6b-b01e-00ab-6a67-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161322Z-17fbfdc98bbngfjxtncsq24exs0000000a3g000000000g4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:22 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 2399187d-801e-008f-5f67-282c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161322Z-17fbfdc98bb2xwflv0w9dps90c00000009000000000094c0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:23 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:23 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161323Z-17fbfdc98bbsq6qfu114w62x8n000000072g000000005khx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:23 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:23 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:23 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161323Z-17fbfdc98bbsw6nnfh43fuwvyn00000006900000000096kt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:23 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:23 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a93e4d9c-801e-0015-6aa4-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161323Z-r1755647c66x2fg5vpbex0bd8400000009pg000000007sqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:23 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:23 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:23 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2125f972-501e-0035-10a3-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161323Z-r1755647c665dwkwce4e7gadz0000000095g000000001han x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:23 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:23 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:23 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161323Z-r1755647c66z67vn9nc21z11a800000007rg000000002c6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:23 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:24 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: d145a723-401e-0067-13b1-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161324Z-17fbfdc98bb8mkvjfkt54wa5380000000690000000002aq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:24 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 64bb7fc7-f01e-0071-5d6f-28431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161324Z-r1755647c666s72wx0z5rz6s60000000096g00000000a4f1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49822	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:24 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: ba54a096-301e-0020-3719-266299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161324Z-17fbfdc98bb2cvg4m0cmab3ecw00000006y0000000007s20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49821	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:24 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: cb602259-c01e-0046-02b2-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161324Z-17fbfdc98bbngfjxtncsq24exs00000009wg000000008fdz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:24 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161324Z-17fbfdc98bbl4k6fkakdqzw75c00000007vg000000008nx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:25 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: a8de1b79-001e-0017-5ba3-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161325Z-r1755647c66pzcrw3ktqe96x2s00000009eg0000000097c7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:25 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161325Z-17fbfdc98bb2cvg4m0cmab3ecw00000006wg0000000092xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:25 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 57638fd1-a01e-0053-7b67-288603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161325Z-r1755647c66gqcpzhw8q9nhnq000000008zg000000007vmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49828	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:25 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161325Z-r1755647c66p58nm9wqx75pnms00000007f0000000004z5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:25 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:25 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161325Z-r1755647c664nptf1txg2psens000000073g000000004u4g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:26 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49830	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:25 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:25 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: ab84cae0-f01e-005d-23d7-2513ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161325Z-r1755647c66x2fg5vpbex0bd8400000009m0000000009kfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:26 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:25 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:25 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 18df47ae-c01e-00a1-2249-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161325Z-17fbfdc98bbnsg5pw6rasm3q8s00000008q0000000004arx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:26 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:26 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 86a4d3af-501e-0029-3f03-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161326Z-r1755647c66w6f6b5182nn0u0400000006u000000000203u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:27 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 481bd859-201e-00aa-219c-273928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161327Z-r1755647c66vkwr5neys93e0h400000007v0000000003zvc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:27 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:27 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 4e972348-801e-00ac-276d-28fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161327Z-r1755647c66mrgwz6d897uymaw0000000270000000003n9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:27 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:27 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161327Z-r1755647c66f4bf880huw27dwc00000009gg00000000b2fe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49835	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:27 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ffa56774-c01e-007a-6c38-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161327Z-r1755647c66tsn7nz9wda692z000000006q0000000002qrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:27 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2ac474a9-a01e-0098-14a3-268556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161327Z-17fbfdc98bbl4k6fkakdqzw75c0000000810000000000c37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:27 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:28 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:28 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 321a447c-801e-002a-4da3-2631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161328Z-17fbfdc98bbds27mnhu6ftg4d800000006hg000000009hcd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:28 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 04de2316-001e-0082-3987-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161328Z-17fbfdc98bbds27mnhu6ftg4d800000006sg000000000dnw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:28 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:28 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161328Z-r1755647c66vkwr5neys93e0h400000007x00000000018k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:28 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:28 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 6c7958f7-701e-001e-113a-29f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161328Z-17fbfdc98bb2cvg4m0cmab3ecw00000006y0000000007s3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:28 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cf3643bb-401e-0078-69a3-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161328Z-r1755647c66x2fg5vpbex0bd8400000009u0000000000b10 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:28 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:29 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161329Z-17fbfdc98bbnsg5pw6rasm3q8s00000008sg000000001bqg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:29 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: b8f0a3b1-001e-0017-5067-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161329Z-17fbfdc98bbsw6nnfh43fuwvyn00000006f0000000001vt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:29 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161329Z-17fbfdc98bbz4mxcabnudsmquw000000075g0000000091tk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:29 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 214eaf96-b01e-00ab-509c-27dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161329Z-r1755647c66ldhdjeavapf4fd000000008dg00000000092q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:29 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:29 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161329Z-r1755647c66hpt4fmfneq8rup800000005f0000000006fms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:29 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:29 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e0a2f103-c01e-007a-3367-28b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161330Z-17fbfdc98bbsq6qfu114w62x8n0000000700000000008cd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:29 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:29 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: ba33cc4f-e01e-0052-2e6f-28d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161329Z-r1755647c66vxbtprd2g591tyg0000000810000000000ag5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:30 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49848	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:29 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:29 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 071448c9-d01e-0028-2702-297896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161329Z-r1755647c66mrgwz6d897uymaw0000000280000000002b3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:30 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:30 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:30 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161330Z-r1755647c66ljccje5cnds62nc00000006x000000000a4q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:30 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:30 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:30 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: d08917dd-901e-0064-7ab2-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161330Z-r1755647c66ljccje5cnds62nc000000072g000000002s40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:30 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:31 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:31 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161331Z-r1755647c66mrgwz6d897uymaw000000024g000000006xgb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:31 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:31 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:31 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d72005e7-a01e-0002-1a61-285074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161331Z-17fbfdc98bbh7l5skzh3rekksc00000009pg00000000429u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:31 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:31 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:31 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:31 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161331Z-r1755647c66xdwzbrg67s9avs400000008t0000000002f9d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:31 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:31 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161331Z-17fbfdc98bblfj7gw4f18guu2800000009mg000000009q8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:31 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:31 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:31 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:31 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: f60f2227-501e-0064-5d90-271f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161331Z-17fbfdc98bbl4k6fkakdqzw75c00000007u00000000097de x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:31 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:32 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:32 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 37a0b860-701e-0001-05e6-27b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161332Z-17fbfdc98bblfj7gw4f18guu2800000009ug000000000qbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:32 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:32 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:32 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161332Z-r1755647c666s72wx0z5rz6s60000000098g000000007h2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:32 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:32 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: d866d412-001e-0028-1c9c-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161332Z-17fbfdc98bb6kklk3r0qwaavtw00000006a0000000002ng6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:32 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161332Z-r1755647c66mrgwz6d897uymaw000000025g00000000591e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:32 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:32 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161332Z-r1755647c66f4bf880huw27dwc00000009ng00000000445z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:32 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:32 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:32 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 78a8beb2-e01e-0071-6ad7-2508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161332Z-17fbfdc98bblfj7gw4f18guu2800000009t000000000304s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:33 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:32 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161332Z-17fbfdc98bbzsht4r5d3e0kyc000000007hg0000000032vx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:33 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:33 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:33 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: f21e1abf-101e-00a2-2367-289f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161333Z-17fbfdc98bb7jfvg3dxcbz5xm000000006n0000000002x93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:33 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:33 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:33 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4e087ea8-e01e-0099-0e5a-28da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161333Z-r1755647c66hpt4fmfneq8rup800000005d000000000a45q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:33 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:33 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:33 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5ec9f71f-c01e-0082-7a31-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161333Z-r1755647c66hpt4fmfneq8rup800000005m00000000007qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:33 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:33 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 17a5a9a5-201e-0003-7b36-28f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161333Z-17fbfdc98bbtwz55a8v24wfkdw00000009cg0000000061kp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:33 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161333Z-r1755647c66pzcrw3ktqe96x2s00000009h000000000573a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:33 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 08154944-901e-0083-2112-29bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161334Z-17fbfdc98bbz4mxcabnudsmquw000000075g0000000091ya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:34 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161334Z-r1755647c66vkwr5neys93e0h400000007u0000000005gsr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:34 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 672cac94-f01e-00aa-27b2-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161334Z-r1755647c66ldhdjeavapf4fd0000000086g00000000adw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:34 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: ead33fc5-401e-0029-0967-289b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161334Z-r1755647c666s72wx0z5rz6s60000000099000000000788b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49873	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:34 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 4bfb087f-501e-008f-4c9c-279054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161334Z-17fbfdc98bbgm62892kdp1w19800000007dg000000002z2b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:34 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:35 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161334Z-r1755647c668lcmr2va34xxa5s00000006w00000000089pp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:35 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:34 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:34 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: fcac5f09-801e-007b-3f67-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161334Z-17fbfdc98bb7jfvg3dxcbz5xm000000006fg000000008scg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:35 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49876	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:35 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:35 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:35 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161335Z-17fbfdc98bbl4k6fkakdqzw75c00000007yg000000003y8v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:35 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:35 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:35 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:35 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161335Z-r1755647c666sbmsukk894ba7n00000005y000000000860z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:35 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:35 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:35 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:35 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161335Z-17fbfdc98bb9xxzfyggrfrbqmw00000007k0000000004pnp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:35 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49879	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:35 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:35 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:35 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c91d50fe-d01e-0049-5267-28e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161335Z-r1755647c66ldhdjeavapf4fd000000008cg000000001qzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:35 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49880	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:35 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:35 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161335Z-17fbfdc98bbngfjxtncsq24exs00000009xg0000000078xt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:36 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49881	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:36 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:36 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 19d379a2-b01e-0084-4b5b-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161336Z-17fbfdc98bb6kklk3r0qwaavtw0000000650000000008ztc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49882	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:36 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:36 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 44c445c3-601e-003e-0f9c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161336Z-17fbfdc98bb2rxf2hfvcfz540000000006300000000098q5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49883	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:36 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 43b0bec6-701e-0050-4289-286767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161336Z-r1755647c666s72wx0z5rz6s6000000009b0000000003tzq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:36 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: cdbf2577-c01e-0034-7dc2-262af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161336Z-17fbfdc98bbsw6nnfh43fuwvyn00000006900000000096u8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49885	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:36 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161336Z-17fbfdc98bbngfjxtncsq24exs0000000a300000000010c0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49886	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:37 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:37 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161337Z-17fbfdc98bbngfjxtncsq24exs00000009zg000000005akg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49887	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:37 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161337Z-17fbfdc98bbp77nqf5g2c5aavs00000007yg000000003ydu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49888	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:37 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161337Z-r1755647c66trqwgqbys9wk81g00000006y0000000000rvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49889	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:37 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:37 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161337Z-17fbfdc98bbgnnfwq36myy7z0g00000008vg0000000052a8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49890	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:37 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:37 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 0ad7b348-901e-0067-0d67-28b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161337Z-17fbfdc98bbh7l5skzh3rekksc00000009ng000000006f99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49891	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:38 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161338Z-r1755647c66pzcrw3ktqe96x2s00000009d000000000a8v2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49892	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:38 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161338Z-r1755647c66x2fg5vpbex0bd8400000009sg000000002w42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49893	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:38 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:38 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8055f236-801e-0083-4e87-28f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161338Z-r1755647c66hpt4fmfneq8rup800000005fg000000005cvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:38 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49894	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:38 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:38 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161338Z-17fbfdc98bbzsht4r5d3e0kyc000000007eg000000007sde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:38 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49895	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:38 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:38 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:38 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 260950aa-801e-00a3-269d-277cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161338Z-17fbfdc98bbsw6nnfh43fuwvyn00000006a0000000008pk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:38 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49896	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:38 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:38 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 84f9cde7-901e-0083-36a3-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161338Z-17fbfdc98bb2xwflv0w9dps90c000000095g000000002x5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:39 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49897	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:39 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:39 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161339Z-r1755647c66x7vzx9armv8e3cw00000009yg0000000040bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:39 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49898	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:39 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:39 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 28aaec9d-301e-0033-281d-26fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161339Z-r1755647c66qg7mpa8m0fzcvy000000009g00000000031ug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:39 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49899	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:39 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:39 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:39 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 30963bf2-701e-0001-2a98-28b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161339Z-17fbfdc98bblzxqcphe71tp4qw00000003m00000000077ap x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:39 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49900	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:39 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:39 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:39 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 8e439449-301e-0051-2567-2838bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161339Z-17fbfdc98bbvvplhck7mbap4bw00000009yg000000003kk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:39 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49901	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:39 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:39 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:39 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4a3ae400-b01e-0001-38e4-2546e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161339Z-r1755647c66f4bf880huw27dwc00000009pg000000003g3k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:39 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49902	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:40 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:40 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:40 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161340Z-17fbfdc98bb5d4fn785en176rg00000008cg0000000018s9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:40 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49904	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:40 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:40 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 3fefe110-f01e-0099-6331-299171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161340Z-17fbfdc98bbbnx4ldgze4de5zs00000006u00000000084kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:40 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49903	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:40 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:40 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:40 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161340Z-17fbfdc98bblfj7gw4f18guu2800000009u00000000013vq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:40 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49905	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:40 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:40 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:40 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161340Z-r1755647c66z4xgb5rng8h32e8000000073g00000000avg5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:13:40 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49906	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:40 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:13:40 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:13:40 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: bb02c222-c01e-00ad-7da4-26a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161340Z-r1755647c6688lj6g0wg0rqr1400000008kg00000000117h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:13:40 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49907	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:13:41 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Target ID:	0
Start time:	12:12:12
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:12:17
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1932,i,15426486743168307693,15003162677301905896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:12:19
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ww38.heynannyly.online/partner/schuler-group/account"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	12:13:11
Start date:	30/10/2024
Path:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
Imagebase:	0x7ff73fdb0000
File size:	2'486'784 bytes
MD5 hash:	6F8EAC2C377C8F16D91CB5AC8B8DBF5F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	12:13:17
Start date:	30/10/2024
Path:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
Imagebase:	0x7ff6f7af0000
File size:	274'432 bytes
MD5 hash:	6FEB00C9A2C3FF66230658B3012BAB6A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation	Jump to behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://ww38.heynannyly.online/partner/schuler-group/account

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\997766A9-B413-4FC1-862C-BFE2A7B54F69

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxAccountsAlwaysOnLog.etl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxmAlwaysOnLog.etl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Windows Analysis Report
http://ww38.heynannyly.online/partner/schuler-group/account