Edit tour

Windows Analysis Report
https://na4.docusign.net/Signing/EmailStart.aspx?a=efd4acd3-3acc-4088-a2a7-53241bdf60b1&etti=24&acct=667bdcdf-7e30-4b26-9a28-cdfd47d27620&er=280620f2-b628-44e5-bd4d-0943c13c18f7

Overview

General Information

Sample URL:	https://na4.docusign.net/Signing/EmailStart.aspx?a=efd4acd3-3acc-4088-a2a7-53241bdf60b1&etti=24&acct=667bdcdf-7e30-4b26-9a28-cdfd47d27620&er=280620f2-b628-44e5-bd4d-0943c13c18f7
Analysis ID:	1546216
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1992,i,4131933963223236764,10375215342501524208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na4.docusign.net/Signing/EmailStart.aspx?a=efd4acd3-3acc-4088-a2a7-53241bdf60b1&etti=24&acct=667bdcdf-7e30-4b26-9a28-cdfd47d27620&er=280620f2-b628-44e5-bd4d-0943c13c18f7" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T16:30:57.931516+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.4	49784	TCP
2024-10-31T16:31:37.056566+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.4	61517	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:61517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61518 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61559 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:61515 -> 1.1.1.1:53

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.4:49784
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.4:61517

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET /ds_arya_wrapper.min.js?f=1 HTTP/1.1Host: a.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://na4.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ds_arya_wrapper.min.js?f=1 HTTP/1.1Host: a.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ds_a=f24f9305-dbfe-46b9-b5ab-fac99f0c2ef1
Source: global traffic	HTTP traffic detected: GET /track/?data=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&ip=1&_=1730388649544 HTTP/1.1Host: api.mixpanel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://na4.docusign.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://na4.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=eyJldmVudCI6ICJtcF9wYWdlX3ZpZXciLCJwcm9wZXJ0aWVzIjogeyIkb3MiOiAiV2luZG93cyIsIiRicm93c2VyIjogIkNocm9tZSIsIiRyZWZlcnJpbmdfZG9tYWluIjogIm5hNC5kb2N1c2lnbi5uZXQiLCIkc2NyZWVuX2hlaWdodCI6IDEwMjQsIiRzY3JlZW5fd2lkdGgiOiAxMjgwLCJtcF9saWIiOiAid2ViIiwiZGlzdGluY3RfaWQiOiAiMTkyZTMzMzY2NDIyZC0wYjZhNTJjMDkwMGYwNy0yNjAzMWU1MS0xNDAwMDAtMTkyZTMzMzY2NDMzMGQiLCIkaW5pdGlhbF9yZWZlcnJpbmdfZG9tYWluIjogIm5hNC5kb2N1c2lnbi5uZXQiLCJtcF9wYWdlIjogIm5hNC5kb2N1c2lnbi5uZXQiLCJtcF9yZWZlcnJlciI6ICJuYTQuZG9jdXNpZ24ubmV0IiwibXBfYnJvd3NlciI6ICJDaHJvbWUiLCJtcF9wbGF0Zm9ybSI6ICJXaW5kb3dzIiwidG9rZW4iOiAiNjI0NGJiOWUzMWRmNmQ4ZGNmOGM0MTM1ZGVmZTY0NjAifX0%3D&ip=1&_=1730388649547 HTTP/1.1Host: api.mixpanel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://na4.docusign.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://na4.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D&ip=1&_=1730388649547 HTTP/1.1Host: api.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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&ip=1&_=1730388649544 HTTP/1.1Host: api.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Bdk1MbCYZAPtUBY&MD=yRHDplKb HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Bdk1MbCYZAPtUBY&MD=yRHDplKb HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: na4.docusign.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: docucdn-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: a.docusign.com
Source: global traffic	DNS traffic detected: DNS query: api.mixpanel.com

Source: chromecache_182.2.dr, chromecache_193.2.dr	String found in binary or memory: http://dbj.org/dbj/?p=286
Source: chromecache_182.2.dr, chromecache_193.2.dr	String found in binary or memory: http://dean.edwards.name/weblog/2005/10/add-event/
Source: chromecache_182.2.dr, chromecache_193.2.dr	String found in binary or memory: http://documentcloud.github.com/underscore/
Source: chromecache_182.2.dr, chromecache_193.2.dr	String found in binary or memory: http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/
Source: chromecache_182.2.dr, chromecache_193.2.dr	String found in binary or memory: http://mixpanel.com/
Source: chromecache_182.2.dr, chromecache_193.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/5.1/#sec-12.4
Source: chromecache_182.2.dr, chromecache_193.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/DOM/XMLHttpRequest#withCredentials
Source: chromecache_182.2.dr, chromecache_193.2.dr	String found in binary or memory: https://gist.github.com/1930440
Source: chromecache_182.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js/blob/master/json_parse.js
Source: chromecache_177.2.dr, chromecache_203.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_177.2.dr, chromecache_203.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.2/LICENSE

Source: unknown	Network traffic detected: HTTP traffic on port 61522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 61568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61597 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61624
Source: unknown	Network traffic detected: HTTP traffic on port 61619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61629
Source: unknown	Network traffic detected: HTTP traffic on port 61539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61620
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61621
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61633
Source: unknown	Network traffic detected: HTTP traffic on port 61557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61635
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61636
Source: unknown	Network traffic detected: HTTP traffic on port 61614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61637
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61519
Source: unknown	Network traffic detected: HTTP traffic on port 61620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61631
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61632
Source: unknown	Network traffic detected: HTTP traffic on port 61637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61524
Source: unknown	Network traffic detected: HTTP traffic on port 61533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61645
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61647
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61648
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61529
Source: unknown	Network traffic detected: HTTP traffic on port 61552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61641
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61643
Source: unknown	Network traffic detected: HTTP traffic on port 61569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61656
Source: unknown	Network traffic detected: HTTP traffic on port 61643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61657
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61658
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61659
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61539
Source: unknown	Network traffic detected: HTTP traffic on port 61660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61650
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61530
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61532
Source: unknown	Network traffic detected: HTTP traffic on port 61538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61654
Source: unknown	Network traffic detected: HTTP traffic on port 61629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 61564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 61520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61609
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61600
Source: unknown	Network traffic detected: HTTP traffic on port 61642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61601
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61606
Source: unknown	Network traffic detected: HTTP traffic on port 61613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61607
Source: unknown	Network traffic detected: HTTP traffic on port 61537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 61571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 61653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61619
Source: unknown	Network traffic detected: HTTP traffic on port 61565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61611
Source: unknown	Network traffic detected: HTTP traffic on port 61582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61612
Source: unknown	Network traffic detected: HTTP traffic on port 61559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61613
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61614
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61617
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61618
Source: unknown	Network traffic detected: HTTP traffic on port 61576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61610
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61591
Source: unknown	Network traffic detected: HTTP traffic on port 61639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61589
Source: unknown	Network traffic detected: HTTP traffic on port 61640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61581
Source: unknown	Network traffic detected: HTTP traffic on port 61611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61583
Source: unknown	Network traffic detected: HTTP traffic on port 61577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61584
Source: unknown	Network traffic detected: HTTP traffic on port 61531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61585
Source: unknown	Network traffic detected: HTTP traffic on port 61663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61586
Source: unknown	Network traffic detected: HTTP traffic on port 61554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61588
Source: unknown	Network traffic detected: HTTP traffic on port 61594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61592
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61595
Source: unknown	Network traffic detected: HTTP traffic on port 61645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61598
Source: unknown	Network traffic detected: HTTP traffic on port 61519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61599
Source: unknown	Network traffic detected: HTTP traffic on port 61595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61548
Source: unknown	Network traffic detected: HTTP traffic on port 61644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61549
Source: unknown	Network traffic detected: HTTP traffic on port 61615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61660
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61542
Source: unknown	Network traffic detected: HTTP traffic on port 61550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61543
Source: unknown	Network traffic detected: HTTP traffic on port 61535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61544
Source: unknown	Network traffic detected: HTTP traffic on port 61546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61558
Source: unknown	Network traffic detected: HTTP traffic on port 61584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61550
Source: unknown	Network traffic detected: HTTP traffic on port 61578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61554
Source: unknown	Network traffic detected: HTTP traffic on port 61649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61555
Source: unknown	Network traffic detected: HTTP traffic on port 61627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61569
Source: unknown	Network traffic detected: HTTP traffic on port 61585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61562
Source: unknown	Network traffic detected: HTTP traffic on port 61661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61563
Source: unknown	Network traffic detected: HTTP traffic on port 61556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61565
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61566
Source: unknown	Network traffic detected: HTTP traffic on port 61605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61580
Source: unknown	Network traffic detected: HTTP traffic on port 61540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61579
Source: unknown	Network traffic detected: HTTP traffic on port 61616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61575
Source: unknown	Network traffic detected: HTTP traffic on port 61517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61577

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:61517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61518 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61559 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@21/96@18/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1992,i,4131933963223236764,10375215342501524208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na4.docusign.net/Signing/EmailStart.aspx?a=efd4acd3-3acc-4088-a2a7-53241bdf60b1&etti=24&acct=667bdcdf-7e30-4b26-9a28-cdfd47d27620&er=280620f2-b628-44e5-bd4d-0943c13c18f7"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1992,i,4131933963223236764,10375215342501524208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
api.mixpanel.com	35.190.25.25	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
arya-1323461286.us-west-2.elb.amazonaws.com	52.33.228.130	true	false	unknown
na4.docusign.net	unknown	unknown	false	unknown
a.docusign.com	unknown	unknown	false	unknown
docucdn-a.akamaihd.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://na4.docusign.net/Signing/?ti=d16b8536ed84459087e5e84c4d9157e8	false		unknown
https://a.docusign.com/ds_arya_wrapper.min.js?f=1	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://developer.mozilla.org/en-US/docs/DOM/XMLHttpRequest#withCredentials	chromecache_182.2.dr, chromecache_193.2.dr	false	unknown
http://documentcloud.github.com/underscore/	chromecache_182.2.dr, chromecache_193.2.dr	false	unknown
http://www.ecma-international.org/ecma-262/5.1/#sec-12.4	chromecache_182.2.dr, chromecache_193.2.dr	false	unknown
https://github.com/douglascrockford/JSON-js/blob/master/json_parse.js	chromecache_182.2.dr, chromecache_193.2.dr	false	unknown
http://dbj.org/dbj/?p=286	chromecache_182.2.dr, chromecache_193.2.dr	false	unknown
http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/	chromecache_182.2.dr, chromecache_193.2.dr	false	unknown
https://gist.github.com/1930440	chromecache_182.2.dr, chromecache_193.2.dr	false	unknown
https://github.com/zloirock/core-js	chromecache_177.2.dr, chromecache_203.2.dr	false	unknown
http://dean.edwards.name/weblog/2005/10/add-event/	chromecache_182.2.dr, chromecache_193.2.dr	false	unknown
https://github.com/zloirock/core-js/blob/v3.30.2/LICENSE	chromecache_177.2.dr, chromecache_203.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.33.228.130	arya-1323461286.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
35.190.25.25	api.mixpanel.com	United States	15169	GOOGLEUS	false
107.178.240.159	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.23.100	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546216
Start date and time:	2024-10-31 16:29:48 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://na4.docusign.net/Signing/EmailStart.aspx?a=efd4acd3-3acc-4088-a2a7-53241bdf60b1&etti=24&acct=667bdcdf-7e30-4b26-9a28-cdfd47d27620&er=280620f2-b628-44e5-bd4d-0943c13c18f7
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@21/96@18/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 74.125.206.84, 172.217.18.14, 34.104.35.123, 162.248.184.188, 2.19.126.135, 2.19.126.140, 2.19.126.227, 2.19.126.218, 93.184.221.240, 192.229.221.95, 20.3.187.198, 216.58.212.131
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, a1737.b.akamai.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, na4-se.docusign.net.akadns.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, na4.docusign.net.akadns.net, docucdn-a.akamaihd.net.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://na4.docusign.net/Signing/EmailStart.aspx?a=efd4acd3-3acc-4088-a2a7-53241bdf60b1&etti=24&acct=667bdcdf-7e30-4b26-9a28-cdfd47d27620&er=280620f2-b628-44e5-bd4d-0943c13c18f7

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6455)
Category:	downloaded
Size (bytes):	6636
Entropy (8bit):	5.32559964561976
Encrypted:	false
SSDEEP:	96:n4MqCAsxUvOay1SYLpBY3HwKvacwdx65LLHRMnkZSqHsTrJGqj+FBGB+1ht:n4M17UvOatYVBY0x8LHSkerJGm+F31f
MD5:	7C6BEDD9B75D72907D591245A4E212CB
SHA1:	FC6B2C0E89BCD4C4521FB3426D88D0A326839F8E
SHA-256:	52C5D697C1D2EEF48D021BAF563B26208AB7F59474B0B78DB0AC8239E51AEA2A
SHA-512:	77EB49B15C29AC896ACB37191F72D3D8F06F754D53F1F449186FEA8C0B07B3A7701696F223025C715FD065186CC988822B39D0BE4E7189B39C45CE3D59DB433C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.preloader.js?cs=f66bcdf2c24732319cd1
Preview:	/! For license information please see signing_iframeless_mobile.preloader.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9523],{64431:function(t,n){!function(){var e,r=Array.prototype.forEach,i=Object.prototype.hasOwnProperty,o=Array.prototype.slice,c=0,u={keys:Object.keys\|\|function(t){if("object"!=typeof t&&"function"!=typeof t\|\|null===t)throw new TypeError("keys() called on a non-object");var n,e=[];for(n in t)t.hasOwnProperty(n)&&(e[e.length]=n);return e},uniqueId:function(t){var n=++c+"";return t?t+n:n},has:function(t,n){return i.call(t,n)},each:function(t,n,e){if(null!=t)if(r&&t.forEach===r)t.forEach(n,e);else if(t.length===+t.length)for(var i=0,o=t.length;i<o;i++)n.call(e,t[i],i,t);else for(var c in t)this.has(t,c)&&n.call(e,t[c],c,t)},once:function(t){var n,e=!1;return function(){return e\|\|(e=!0,n=t.apply(this,arguments),t=null),n}}};e={on:function(t,n,e){return a(this,"on",t,[n,e])&&n?(this._events\|\|(this._events={}),(this._events[t]\|\|

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	118369
Entropy (8bit):	5.387403752626347
Encrypted:	false
SSDEEP:	3072:uChP98OYrRKfys+71PeVxlDDnO6Zh1xG6dVbMcyH:TotXPeVx1XxG6dVble
MD5:	48EB4E014D9BA07A1FDE36774CEFE18C
SHA1:	AEB98C46BB9E7632D8F4035F66044AD5428534B4
SHA-256:	3441A0C0375E37A41F5879FD999A5BCF7EE319E3E798081EC53FD3365DBE0D63
SHA-512:	5D658063B38327599890D0C4448FEE1C0D643B557D09CEBA2A0FBB338DC8315BB68EA415518468283E81F5D0DB135CEB7324BD77B3D169C1544A9B59B328CE0F
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.8925.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8925],{40139:function(e,t,n){var r=n(93633);e.exports=(r.default\|\|r).template({1:function(e,t,n,r,o){var i=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" "+e.escapeExpression((i(n,"getResource")\|\|t&&i(t,"getResource")\|\|e.hooks.helperMissing).call(null!=t?t:e.nullContext\|\|{},"DocuSign_NotarizeError",{name:"getResource",hash:{},data:o,loc:{start:{line:1,column:57},end:{line:1,column:97}}}))+" "},3:function(e,t,n,r,o){var i=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" "+e.escapeExpression((i(n,"getResource")\|\|t&&i(t,"getResource")\|\|e.hooks.helperMissing).call(null!=t?t:e.nullContext\|\|{},"DocuSign_NotarizeWarning",{name:"getResource",hash:{},data:o,loc:{start:{line:1,column:107},end:{line:1,column:149}}}))+" "},5:function(e,t,n,r,o

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16718)
Category:	downloaded
Size (bytes):	16889
Entropy (8bit):	5.305771559126156
Encrypted:	false
SSDEEP:	384:z405ybTgZTyTyEmsUJURmJqfKny/Ay82JrHGw3+euhJ21Z7gnf87CQNmc/3S:n5uTgZTy+ERUmAMfPHfHjg2r7gSV3S
MD5:	7E0A5ABCB31199770B38DD9A0F557491
SHA1:	D4719F356E6800A6F664BCE7B3DDF7715607E5A3
SHA-256:	0EE7DF63AA74F1623D01D69A016D845FD9024854A2F034D229ADE68D801DE4AA
SHA-512:	FD96C650BE8A5714BA3A92BD6EBA045B5CBDD9666163BE3701B9357F2046F9966C9FFFEACE28F69713695B2351ADA9268511286680D2CC722A78D5DCAD260E7C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.6463.js?cs=1ccc097fdc30afbdcae8
Preview:	/! For license information please see signing_iframeless_mobile.6463.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6463],{96463:function(e,t,s){s(19693),s(68763),s(79073),s(87136),s(6048),s(40173),s(68329);var n=s(74692),i=s.n(n),r=s(89221),o=s(75550);t.A=function(e,t,s){var n,a,l,u=e.ss\|\|{},p=/^\s+/,h=/\s+$/,c=/[xy]/g,d=/.(\/\|\\)/,f=/.[.]/,_=/[\t\r\n]/g,g=Object.prototype.toString.call(e.HTMLElement).indexOf("Constructor")>0,m=t.createElement("input");return m.type="file",n="multiple"in m&&"undefined"!=typeof File&&void 0!==(new XMLHttpRequest).upload,u.obj2string=function(e,t){var s=[];for(var n in e)if(Object.prototype.hasOwnProperty.call(e,n)){var i=t?t+"["+n+"]":n,r=e[n];s.push("object"==typeof r?u.obj2string(r,i):encodeURIComponent(i)+"="+encodeURIComponent(r))}return s.join("&")},u.extendObj=function(e,t){for(var s in t)Object.prototype.hasOwnProperty.call(t,s)&&(e[s]=t[s])},u.contains=function(e,t){for(var s=e.length;s-

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65452)
Category:	downloaded
Size (bytes):	390749
Entropy (8bit):	5.4438795001494515
Encrypted:	false
SSDEEP:	3072:6EKNqSD5mFCl9FX+HupoU0iZZhd/+nqgMER167WdH/KPKxMytLCxcM4:6f5aCTcJU0iZsm7W8KxtX
MD5:	6B9E763659722B759B330AFF51DA7D30
SHA1:	2D273929A0BDC0BC24C5234A10DEF2E713BB50CD
SHA-256:	B9338C45BBE474A3C1D05FFE0EA1B3BCB8515D56EA2D7927DA2A34C5D7BECE06
SHA-512:	0ED4BFE1E20B8D62F94C5BE6F5DC7B78014482CE122F53304CE5F4A8F7780DBF2CF70C76690021FC8C843EFCB1383271ADD03669D12F28C41A737B17F4BCD497
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.js?cs=7aa34814
Preview:	/! For license information please see signing_iframeless_mobile.js.LICENSE.txt /.!function(){var t,e,r,n,o,i={51544:function(t,e,r){"use strict";r.d(e,{dF:function(){return a},fC:function(){return u},mB:function(){return c}});var n=r(39653),o=r(56213),i=r(49859),a=function(){function t(e){(0,n.A)(this,t),(0,i.A)(this,"thunk",void 0),this.thunk=e}return(0,o.A)(t,[{key:"value",get:function(){return this.thunk()}}]),t}(),u=new a((function(){return window})),c=new a((function(){return document}))},79100:function(t,e,r){"use strict";r.d(e,{_:function(){return s}});var n=r(38729),o=function(){function t(){}return t.prototype.active=function(){return n.l},t.prototype.with=function(t,e,r){for(var n=[],o=3;o<arguments.length;o++)n[o-3]=arguments[o];return e.call.apply(e,function(t,e,r){if(r\|\|2===arguments.length)for(var n,o=0,i=e.length;o<i;o++)!n&&o in e\|\|(n\|\|(n=Array.prototype.slice.call(e,0,o)),n[o]=e[o]);return t.concat(n\|\|Array.prototype.slice.call(e))}([r],function(t,e){var r="function"

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	83506
Entropy (8bit):	5.186546714348487
Encrypted:	false
SSDEEP:	768:KL9mqxqpKZiL9mqxq8m0L9mqxqpyT/9mYxyzbZ8yXCy6MmYxamL9mqxqAcyxCjBK:GJA5mELTc7X+FScdMTpz
MD5:	88383B0CB4DE7EBA40D7BEE66CDD359B
SHA1:	38363E3E87B46FF324A6DAA844D978F78699DEBC
SHA-256:	7C9371A4BA66B61F81937D1106113C6C7626A07638E53F305C95E772802C650B
SHA-512:	741837091ABBF9452775C4083B4A018C4E38997CDF9FA1752D226CD7EDB817D1A89C17E23B447DAD67C24BEEE06AADAF89638CF768B1087D13509E7AA9C4467E
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.9764.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9764],{95390:function(t,e,r){r.d(e,{_d:function(){return n},NA:function(){return h},aJ:function(){return m},bI:function(){return p},_q:function(){return f}});var n="https://a.docusign.com/f",o=(r(40590),r(27727),r(17),r(18665),r(10557),r(14913),r(31586),r(96982),r(3101),r(69193),r(44154),r(56639),r(83725),r(35019),r(29838),r(58379),r(14602),r(79248)),i=r(40010);function a(){a=function(){return e};var t,e={},r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},i="function"==typeof Symbol?Symbol:{},c=i.iterator\|\|"@@iterator",u=i.asyncIterator\|\|"@@asyncIterator",l=i.toStringTag\|\|"@@toStringTag";function s(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{s({},"")}catch(t){s=function(t,e,r){return t[e]=r}}function f(t,e,r,n){var i

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52240)
Category:	dropped
Size (bytes):	52411
Entropy (8bit):	5.407768673993161
Encrypted:	false
SSDEEP:	768:Tu9vcYxXddfGAkkIFHYCrvD0C+hcV4cbL6Log6Dazba:Tux9OhkjWvD8nW0ba
MD5:	A407C368011283A2E90E39C31D7C074F
SHA1:	967E873665404DE2F39D4C27D3218A4FADF06717
SHA-256:	DCB0D3378502347EA16252B8D9C59F8258C29F1D746AFCD46A1498416950846E
SHA-512:	AA4B48F7847FAB7FA2905609C5BAC1EC24466712143CD2DA6022179412640DDE12D6049BC6130CF541AE0E3862444EA2C624C08594C266083C40BC367885E644
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.3053.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3053],{12685:function(e,t,n){"use strict";var r=n(97032),o=n(96540);t.A=({accessibilityText:e,forwardedRef:t,...n})=>o.createElement("svg",(0,r.A)({xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24",width:24,height:24,"aria-hidden":!e\|\|void 0,"aria-label":e,focusable:!1,ref:t,role:e?"img":void 0},n),o.createElement("path",{d:"M20 5.36 18.64 4 12 10.65 5.36 4 4 5.36 10.65 12 4 18.66 5.34 20 12 13.35 18.66 20 20 18.66 13.35 12 20 5.36z"}))},49780:function(e,t,n){"use strict";var r=n(97032),o=n(96540);t.A=({accessibilityText:e,forwardedRef:t,...n})=>o.createElement("svg",(0,r.A)({xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 20 20",width:20,height:20,"aria-hidden":!e\|\|void 0,"aria-label":e,focusable:!1,ref:t,role:e?"img":void 0},n),o.createElement("path",{d:"M17 4.34 15.66 3 10 8.66 4.34 3 3 4.34 8.66 10 3 15.66 4.34 17 10 11.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	485630
Entropy (8bit):	5.533785895135338
Encrypted:	false
SSDEEP:	6144:f3O89VHlI7t/aC/lWCtHDmtTgtT8tTMtHOzZfD+Ds3UOEn66wGQI9wuKEC:f9TIobZfD+Ds3UOEnfw2IEC
MD5:	B61D74CB1EFAD0D1AEF8D0CE3DD2C6B7
SHA1:	479891ECFEB4488E72829F52CF75A6A23D7CC5F6
SHA-256:	0F820B74D13E5A343455A7946F809E9F7EA65026FD56F0FE5FF2B80DB5F06FC1
SHA-512:	15E51AB04B3F1F8A2B78B5D90C323A1132F041EE08617227B24F7FDE04D8CBE9CCEEDB86479F84E9848CFA5DCB7EDF9390C6139B3927F5CD237025A37EBB5979
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.3821.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3821],{58079:function(e){function t(e){return Promise.resolve().then((function(){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}))}t.keys=function(){return[]},t.resolve=t,t.id=58079,e.exports=t},42584:function(e,t,n){var i=n(93633);e.exports=(i.default\|\|i).template({1:function(e,t,n,i,a){var r,o,s=null!=t?t:e.nullContext\|\|{},l=e.hooks.helperMissing,u="function",c=e.escapeExpression,d=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" <"+c(typeof(o=null!=(o=d(n,"htmlTag")\|\|(null!=t?d(t,"htmlTag"):t))?o:l)===u?o.call(s,{name:"htmlTag",hash:{},data:a,loc:{start:{line:3,column:3},end:{line:3,column:14}}}):o)+'\n class="pdf-ua_'+c(typeof(o=null!=(o=d(n,"tag")\|\|(null!=t?d(t,"tag"):t))?o:l)===u?o.call(s,{name:"tag",hash:{},data:a,loc:{start:{line:4,colum

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	136176
Entropy (8bit):	5.178395204770072
Encrypted:	false
SSDEEP:	1536:bprIg2sdtEyE4aoo/Iy4onqRmn4r4B52zqdiq85fhdsbPvLKaSlMaQLp9jV:RtcqoIzqdiqcsRSlMzJ
MD5:	B996140AA55B4DCEFBE20B0EC96447B3
SHA1:	5C715DD38582604148904BADAF0342982195F698
SHA-256:	54C6DB3FC48C1F54FAD197E91744DA04EB8FB584FBDB581A5C1E92CD6E72E12D
SHA-512:	529A34EEEE2EB0765F549CBD667238928DA1C57CC48B41B5674CABA9098E44E7706B0B7F7B3FB9A22C69CD5ACF29EB0546DCAC4515FA2E298C72A7CD5B034561
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.olive.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1540],{43466:function(e){e.exports=function(e){function t(i){if(n[i])return n[i].exports;var o=n[i]={exports:{},id:i,loaded:!1};return e[i].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};return t.m=e,t.c=n,t.p="/",t(0)}([function(e,t,n){"use strict";n(1),n(2),n(3);var i=n(76);i.keys().forEach((function(e){i(e)}))},function(e,t,n){"use strict";!function(e,t){e.config={closePopoverOnEsc:!0,closePopoverOnClickAnywhere:!0,debug:!1,isAutoInitEnabled:!0},e.version="17.20.0",e.KEYS={tab:9,enter:13,esc:27,left:37,up:38,right:39,down:40},e.l10n={close:"Close",characterLimit:"{{REMAINING}} (maximum {{MAX}} characters)"},e.init=function(e){var t=[],n={add:function(e){return t.push(e),n},run:function(){var e;for(e=0;e<t.length;e++)t[e]();return n},afterLoad:function(){e.config.isAutoInitEnabled&&e.init.run(),e.util.polyfillFle

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	119869
Entropy (8bit):	4.18401975910281
Encrypted:	false
SSDEEP:	1536:h5nLZxjaZ8x2R3Ud4FqBW92ZgyFqBW9sLBHdyoXwIWc1GO9GwIw6CTq14e7pnvaM:h5LZxjml1GO9xqB7pnva38
MD5:	ECE7A224F69AB2205D90900589AE1D05
SHA1:	3D861B816A5DA892C8A88D5755A5537C036239DE
SHA-256:	FFA8C6A4CE199BFD9E32B05E0E4DECE330C6A577FB3A0E8518291619C658C486
SHA-512:	EEF4BDD54AF95BE42224FFE605BB627293DAEA0C58A50B328ACC8B56040C81FDCB5EC8406F56856FC617A552E4D6DD28BB892467666889D27F03EE8BFCD16D7B
Malicious:	false
Reputation:	low
Preview:	/. DocuSign modified version of Mixpanel JS Library v2.2.1. * $initial_referer and $referer have been removed, as not to send any senstive information. * $initial_referring_domain and referring_domain have been retained.. . Mixpanel JS Library v2.2.1. . . * Copyright 2012, Mixpanel, Inc. All Rights Reserved. * http://mixpanel.com/. . Includes portions of Underscore.js. * http://documentcloud.github.com/underscore/. * (c) 2011 Jeremy Ashkenas, DocumentCloud Inc.. * Released under the MIT License.. /..// ==ClosureCompiler==.// @compilation_level ADVANCED_OPTIMIZATIONS.// @output_file_name mixpanel-2.2.min.js.// ==/ClosureCompiler==../.Will export window.mixpanel./../.SIMPLE STYLE GUIDE:..this.x == public function.this._x == internal - only use within this file.this.__x == private - only use within the class..Globals should be all caps./.(function(mixpanel) {. /. * Saved references to long variable names, so that closure compiler can. * minimize file size.. */. var

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57931)
Category:	dropped
Size (bytes):	58102
Entropy (8bit):	5.295738846704423
Encrypted:	false
SSDEEP:	768:zBFyvv4CSyOCNiCNi3NmCEzcCK8+MgCLMCMiC20CbmC6ICkOCFYCE4C+MCg9UMCU:jMiL8+39xpc4b3
MD5:	09A24028990121221D57DD5A6FDB4AEB
SHA1:	07948564AE3ED1C38C47A4005B97E2AA98A49B01
SHA-256:	9DC14CA5CEA76005E0632D7EF57EF1405DDA9AD0A0F33ACBC3BC3149AD0CB79E
SHA-512:	8A2342BBA91D53E56F50CFCCDEC0C44D43130E5543776EEF7BC3AA6845A2A97EB578C98D895600EA313E5E2A2F5724D3CCEC9E85DACF655E97D046ED03A78D0C
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.4480.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4480],{49810:function(e,t,r){r.d(t,{A:function(){return s}});var n=r(96540),o=r(52474),i=r(42134),a=r(28936),u=r(79943),l=r(52738),c=r(3574),f=r(56289);function s(){var e,t,r=(0,i.A)(),s=(0,a.remToPx)(25),d=!(null==r\|\|null===(e=r.recipient)\|\|void 0===e\|\|!e.emailAddress)&&(null==r?void 0:r.isCompleteState)&&(null==r\|\|null===(t=r.recipient)\|\|void 0===t?void 0:t.isAccountless),y=(0,u.GV)(l.JU)<f.SL.small+(isNaN(s)?400:s)\|\|(0,c.Fr)();return{style:(0,n.useMemo)((()=>(0,o.Y)(y)),[y]),isMobileLayout:y,isEnabled:d}}},52474:function(e,t,r){r.d(t,{U:function(){return o},Y:function(){return i}});var n=r(17437),o=(e,t,r,o)=>({container:(0,n.css)({position:e?"relative":"fixed",zIndex:o&&t&&r.modalIsShowing&&!r.finishLineSlideUpShowing?800:void 0},"","")}),i=e=>(0,n.css)({display:"flex",flexDirection:e?"column":"row",height:"100vh

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	126842
Entropy (8bit):	5.267722876468899
Encrypted:	false
SSDEEP:	1536:iThOCvgOToFBrFRtZzITioFBVct4XLqpq7YFnaPZCXjgCI/DF:ahOCIO6duH9XWpqsFaRCTgCIB
MD5:	5BDABCD6C45CAAD8B5855528AEC7B1DF
SHA1:	62BCF113A643A35D9A4FA5997D6926F4E6AB0499
SHA-256:	201685703E0D8F7BA3994A340AC693CF11FF4885BCDB0F6D225EE6B3990193CC
SHA-512:	E8C25494A3F7A72197D9A4F1FEF3010B01FED302ABF797044EC2400A7F7B41474FEB2D890EC95DBDCC810B59C142629A49D430D33F75916D9A646F3DD25D02D2
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.6693.js?cs=9d29316d332cafa8097a
Preview:	/! For license information please see signing_iframeless_mobile.6693.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6693],{23172:function(e,t,n){var r=n(65077),l=n(30281),a=n(91641),o=n(5476),u=l(n(9304).f),i=l([].push),s=function(e){return function(t){for(var n,l=o(t),s=a(l),c=s.length,f=0,d=[];c>f;)n=s[f++],r&&!u(l,n)\|\|i(d,e?[n,l[n]]:l[n]);return d}};e.exports={entries:s(!0),values:s(!1)}},84095:function(e,t,n){var r=n(51605),l=n(23172).entries;r({target:"Object",stat:!0},{entries:function(e){return l(e)}})},4146:function(e,t,n){"use strict";var r=n(73404),l={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},a={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},o={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},u={};function i(e){return r.isMemo(e)?o:u[e

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9377)
Category:	dropped
Size (bytes):	9548
Entropy (8bit):	5.249913681512712
Encrypted:	false
SSDEEP:	192:or4MFNKPW032uIHsuugf3eQMH7Koocspf3CX4l0cII6j73:or4MmPW032pMuh3YKooHf3C4lxIl3
MD5:	B37450C5A66EEE84E294D821A6A02A64
SHA1:	3BF70E88ADEE39121B6237EE5D3BE9021565BB71
SHA-256:	30092DA12ACD136AE59B9DAA166475DAEB91A6C1085CB2A78EB70793E9F5C5C1
SHA-512:	A9E9F7C98526C532A1728C2055A3F1F6D23E473E13DBD556B72B0FE423CD8782782A372C41D4E516C1609BB32DC91490F84E91A0A5CA286011F3531F03D4C007
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.9904.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9904],{79904:function(t,e,i){i.d(e,{A:function(){return u}});var n=i(13861),a=i(8784),s=i(16297),r=function(t){this._make(t)};n.A.extend(r.prototype,{_make:function(t){this._data=n.A.cloneDeep(t)},id:function(){return this._data.documentId},name:function(){return this._data.name},number:function(){return this._data.order},numberOfPages:function(t,e){var i=this._data.pages;return arguments.length&&t!==i&&(this._data.pages=t,s.A.send("document:change:numberOfPages",n.A.extend({},{id:this.id(),numberOfPages:this.numberOfPages()},e))),this._data.pages},displayType:function(){return this._data.displayType\|\|""},includeInDownload:function(){return this._data.includeInDownload},thumbnailsCollapsed:function(t){"boolean"!=typeof this._data.thumbnailsCollapsed&&(this._data.thumbnailsCollapsed=!1);var e=this._data.thumbnailsColl

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57931)
Category:	downloaded
Size (bytes):	58102
Entropy (8bit):	5.295738846704423
Encrypted:	false
SSDEEP:	768:zBFyvv4CSyOCNiCNi3NmCEzcCK8+MgCLMCMiC20CbmC6ICkOCFYCE4C+MCg9UMCU:jMiL8+39xpc4b3
MD5:	09A24028990121221D57DD5A6FDB4AEB
SHA1:	07948564AE3ED1C38C47A4005B97E2AA98A49B01
SHA-256:	9DC14CA5CEA76005E0632D7EF57EF1405DDA9AD0A0F33ACBC3BC3149AD0CB79E
SHA-512:	8A2342BBA91D53E56F50CFCCDEC0C44D43130E5543776EEF7BC3AA6845A2A97EB578C98D895600EA313E5E2A2F5724D3CCEC9E85DACF655E97D046ED03A78D0C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.4480.js?cs=e0f89518ee9d4946ce13
Preview:	/! For license information please see signing_iframeless_mobile.4480.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4480],{49810:function(e,t,r){r.d(t,{A:function(){return s}});var n=r(96540),o=r(52474),i=r(42134),a=r(28936),u=r(79943),l=r(52738),c=r(3574),f=r(56289);function s(){var e,t,r=(0,i.A)(),s=(0,a.remToPx)(25),d=!(null==r\|\|null===(e=r.recipient)\|\|void 0===e\|\|!e.emailAddress)&&(null==r?void 0:r.isCompleteState)&&(null==r\|\|null===(t=r.recipient)\|\|void 0===t?void 0:t.isAccountless),y=(0,u.GV)(l.JU)<f.SL.small+(isNaN(s)?400:s)\|\|(0,c.Fr)();return{style:(0,n.useMemo)((()=>(0,o.Y)(y)),[y]),isMobileLayout:y,isEnabled:d}}},52474:function(e,t,r){r.d(t,{U:function(){return o},Y:function(){return i}});var n=r(17437),o=(e,t,r,o)=>({container:(0,n.css)({position:e?"relative":"fixed",zIndex:o&&t&&r.modalIsShowing&&!r.finishLineSlideUpShowing?800:void 0},"","")}),i=e=>(0,n.css)({display:"flex",flexDirection:e?"column":"row",height:"100vh

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63087)
Category:	dropped
Size (bytes):	200350
Entropy (8bit):	5.691334106357135
Encrypted:	false
SSDEEP:	3072:Hh5RIpzxH20qee1EA0s/v68W5PXJDT6B6JFX:HoqeMX6HT6CX
MD5:	6503230F4A6FEBB2ED820A06626FC46B
SHA1:	11EBA7D98F1B0BE2BEEA1009F0A993BC5DF7C4CB
SHA-256:	B5D8C675F1B227346E2F54E5DFF33A1A0890A068AF65F8551FCC5CE66F1125E2
SHA-512:	2AD2D6C5C92EA9CE9DD3533D5CE36A24C040953DE3E34890CBF463F5C505B5E47881AFB420119AF014D01893979F2C60EA3F07BF472DB56F9F6B831B2CAD5B9C
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.5382.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5382],{62714:function(e,t,r){"use strict";function a(e,t,r,a,n,i,s){try{var o=e[i](s),u=o.value}catch(e){return void r(e)}o.done?t(u):Promise.resolve(u).then(a,n)}function n(e){return function(){var t=this,r=arguments;return new Promise((function(n,i){var s=e.apply(t,r);function o(e){a(s,n,i,o,u,"next",e)}function u(e){a(s,n,i,o,u,"throw",e)}o(void 0)}))}}function i(e,t){var r,a,n,i,s={label:0,sent:function(){if(1&n[0])throw n[1];return n[1]},trys:[],ops:[]};return i={next:o(0),throw:o(1),return:o(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function o(e){return function(t){return u([e,t])}}function u(i){if(r)throw new TypeError("Generator is already executing.");for(;s;)try{if(r=1,a&&(n=2&i[0]?a.return:i[0]?a.throw\|\|((n=a.return)&&n.call(a),0):a.next)&&!(n=n.call(a,i[1])).done)return n;switch(a=0

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631), with no line terminators
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	5.135187510335341
Encrypted:	false
SSDEEP:	12:2QSkMnt0YPhgmQNVGIkTLFMdOGn61CCq4jBAHOYZcQP3rSzD1Jxt15eUmA:2QSkammQVGr3F4hCZjiuOhPWNJr1hN
MD5:	BFECE3EF0556D468AC81BD677E076F50
SHA1:	0ED3399BDC58A902ACA78F06D7D4AD8A732F5EF9
SHA-256:	0DBA31A4A24E822A9500EDCBDD82FBB28D1F1B9535082DEEFE3ABD1EEE603E40
SHA-512:	B146619419BAC07F62DCC2508D7285B83348F45C9687E5BFE686DC26F5F0D9CA7338AE6ED0B1A760DBE915E3E375B397C0CA82F7ED87983BC26D59187DB3715A
Malicious:	false
Reputation:	low
URL:	https://a.docusign.com/ds_arya_wrapper.min.js?f=1
Preview:	(function(){var u=this;!function(n,t,i,f,r,e,o){if("function"==typeof define&&define.amd)return define(o);f&&f[r]?f[r]=o(n,0,!0,f,r,e):u[n]=o(n,0,!0,f,r,e)}("DS_Arya",0,0,u.module,"exports","length",function(t,i,n,f,r,e,o){"use strict";var u={},c=(s(function(){}),s({})),a=s("");function d(n){throw t+"-"+n}function s(n){var t=typeof n;return function(n){return typeof n==t}}function h(n){for(var t in n)u[t]=n[t]}return{i:function(n){i++?d(1):n!==o&&c(n)&&!n[e]?h(n):d(11)},g:function(n,t){return n&&a(n)?t&&t(u[n])\|\|u[n]\|\|!1:t&&t(u)\|\|u\|\|!1}}})}).call(this);;DS_Arya.i({"DS_A":"f24f9305-dbfe-46b9-b5ab-fac99f0c2ef1","DS_A_C":""});

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30984)
Category:	dropped
Size (bytes):	31159
Entropy (8bit):	5.242540707783587
Encrypted:	false
SSDEEP:	768:wCyo3xcGSQWQ0UGUEQsF8h6m9qW6A4MzK7n8CutA2q0d2KP6LJgRMVUWFgHmbOfR:wCvSQWQ0UGUEQsFy6m9qW6A4MzK7n8CK
MD5:	48BC933608F733A9283F2218C73A941F
SHA1:	E04E625C70A5E8505B77A51D82D9A73AFA9F3547
SHA-256:	FCBC395A3D24699D9229846A30C9FE245D77A7AFDBC8386838A03A837C6672AA
SHA-512:	DED1BDD62FAAD01AF0B6F05A28A8D8721080B862EFDD5866EBDB4672A21A8EE15D3965B523C691784B7EF8817296707D5A3217F7B8CE713B212520EE9170329B
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.9788.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9788],{44903:function(e,t,n){var i,o;"undefined"!=typeof self&&self,i=function(){"function"!=typeof Promise&&function(t){function n(e,t){return function(){e.apply(t,arguments)}}function i(e){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=null,this._value=null,this._deferreds=[],c(e,n(r,this),n(a,this))}function o(e){var t=this;return null===this._state?void this._deferreds.push(e):void p((function(){var n=t._state?e.onFulfilled:e.onRejected;if(null!==n){var i;try{i=n(t._value)}catch(t){return void e.reject(t)}e.resolve(i)}else(t._state?e.resolve:e.reject)(t._value)}))}function r(e){try{if(e===this)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var t=e.t

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	84993
Entropy (8bit):	5.267112927447494
Encrypted:	false
SSDEEP:	1536:N5e1Z4fo4oHS75P+e0TFCaJsslQD+wHuL1WPHiqcuoH+187BvgOiWaORqFnwdAWn:KZuynsfD4w6qNp6nIE0C
MD5:	FFC995495B9BD876B88ABC7E73E867A4
SHA1:	28EF2CAC33B7BD81F90B5EC0AFC534A899A62EDC
SHA-256:	D7325AD98A5F0BE6BD3112C375030BF901224AEFCA21B1D24A6C589C6B9D80BD
SHA-512:	B960FEB45320BA6EEE28E13594137EFF1F14F098817E0970BE83C62CEFD1D3E8941DDC06F6F1212B6637D5AAF1D9140051C3496A0689D39259EE496EA9A11E97
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.6826.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6826],{45603:function(e,t,n){n.d(t,{k:function(){return u}});var r=n(38008),o=n(96540),i=n(64020),u=function(){var e=(0,o.useState)((0,i._T)()\|\|""),t=(0,r.A)(e,2),n=t[0],u=t[1];return(0,o.useEffect)((function(){var e=function(){u(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"")};return(0,i.pF)(e),function(){return(0,i.CK)(e)}}),[]),n}},92742:function(e,t,n){n.d(t,{A:function(){return S}});var r=n(53811),o=n(27026),i=n(48079),u=n.n(i),c=n(96319),l=n.n(c),s=n(8628),a=n.n(s),f=n(96540),d=n(45603),m=n(90812),p=n(6982),v=n(95361),g=n(34743),h=n(53289),y=n(18491),b=n(59793),w=n(94801),x=n(31824),E={flip:function(){return{mainAxis:!(arguments.length>0&&void 0!==arguments[0])\|\|arguments[0],crossAxis:!(arguments.length>1&&void 0!==arguments[1])\|\|arguments[1],fallbackAxisSideDirection:arguments.length>2&&void 0!==arg

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65440)
Category:	downloaded
Size (bytes):	902948
Entropy (8bit):	5.337442892975745
Encrypted:	false
SSDEEP:	6144:Xe8VArAJRVLScphH9czgi4MevB33oxVJ5OZoHk78oOKroxcox/6JoxPoxmr:WrAJCXnHkY6Kr
MD5:	202430AFDC27F45C73C3E3FA3694F6C0
SHA1:	0EE2C593EB4ECB80D02DA2BCED08293FC46DA0D1
SHA-256:	A3DC9EA908EF210520125B4CD493DE3C994F8D8EC7EA84E7F39EAF477BD8CF1E
SHA-512:	52EC89B4F37EB5776A4B061DD18AE8C58F03B27F87BC36E2845107D1BE5685FD9D15390237C77993A208B1C0D0926AE84F7226EDC02B0989C23D28008A0718B3
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.backbone-app.js?cs=c68d85a1c4827eac6a8c
Preview:	/! For license information please see signing_iframeless_mobile.backbone-app.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2618,3920],{443:function(e,t,n){var a=n(93633);e.exports=(a.default\|\|a).template({compiler:[8,">= 4.3.0"],main:function(e,t,n,a,l){var i,o=null!=t?t:e.nullContext\|\|{},r=e.hooks.helperMissing,s=e.escapeExpression,c="function",u=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return'<div id="simple-verify-dialog" class="modal-wrap dialog" data-qa="simple-dialog"><div class="modal-content" role="dialog" aria-labelledby="simple-verify-dialog-title" aria-describedby="simple-verify-dialog-content"><button type="button" class="icon icon-times x-close close" data-action="canceled"><span class="btn-label">'+s((u(n,"$")\|\|t&&u(t,"$")\|\|r).call(o,"DocuSign_Close",{name:"$",hash:{},data:l,loc:{start:{line:1,column:322},end:{line:1,column:344}}}))+'</span></button><div class="header"><h1 id="sim

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63087)
Category:	downloaded
Size (bytes):	200350
Entropy (8bit):	5.691334106357135
Encrypted:	false
SSDEEP:	3072:Hh5RIpzxH20qee1EA0s/v68W5PXJDT6B6JFX:HoqeMX6HT6CX
MD5:	6503230F4A6FEBB2ED820A06626FC46B
SHA1:	11EBA7D98F1B0BE2BEEA1009F0A993BC5DF7C4CB
SHA-256:	B5D8C675F1B227346E2F54E5DFF33A1A0890A068AF65F8551FCC5CE66F1125E2
SHA-512:	2AD2D6C5C92EA9CE9DD3533D5CE36A24C040953DE3E34890CBF463F5C505B5E47881AFB420119AF014D01893979F2C60EA3F07BF472DB56F9F6B831B2CAD5B9C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.5382.js?cs=338b46a07e23ff65158c
Preview:	/! For license information please see signing_iframeless_mobile.5382.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5382],{62714:function(e,t,r){"use strict";function a(e,t,r,a,n,i,s){try{var o=e[i](s),u=o.value}catch(e){return void r(e)}o.done?t(u):Promise.resolve(u).then(a,n)}function n(e){return function(){var t=this,r=arguments;return new Promise((function(n,i){var s=e.apply(t,r);function o(e){a(s,n,i,o,u,"next",e)}function u(e){a(s,n,i,o,u,"throw",e)}o(void 0)}))}}function i(e,t){var r,a,n,i,s={label:0,sent:function(){if(1&n[0])throw n[1];return n[1]},trys:[],ops:[]};return i={next:o(0),throw:o(1),return:o(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function o(e){return function(t){return u([e,t])}}function u(i){if(r)throw new TypeError("Generator is already executing.");for(;s;)try{if(r=1,a&&(n=2&i[0]?a.return:i[0]?a.throw\|\|((n=a.return)&&n.call(a),0):a.next)&&!(n=n.call(a,i[1])).done)return n;switch(a=0

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	119869
Entropy (8bit):	4.18401975910281
Encrypted:	false
SSDEEP:	1536:h5nLZxjaZ8x2R3Ud4FqBW92ZgyFqBW9sLBHdyoXwIWc1GO9GwIw6CTq14e7pnvaM:h5LZxjml1GO9xqB7pnva38
MD5:	ECE7A224F69AB2205D90900589AE1D05
SHA1:	3D861B816A5DA892C8A88D5755A5537C036239DE
SHA-256:	FFA8C6A4CE199BFD9E32B05E0E4DECE330C6A577FB3A0E8518291619C658C486
SHA-512:	EEF4BDD54AF95BE42224FFE605BB627293DAEA0C58A50B328ACC8B56040C81FDCB5EC8406F56856FC617A552E4D6DD28BB892467666889D27F03EE8BFCD16D7B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/v/static/mixpanel-2-2-1b.js
Preview:	/. DocuSign modified version of Mixpanel JS Library v2.2.1. * $initial_referer and $referer have been removed, as not to send any senstive information. * $initial_referring_domain and referring_domain have been retained.. . Mixpanel JS Library v2.2.1. . . * Copyright 2012, Mixpanel, Inc. All Rights Reserved. * http://mixpanel.com/. . Includes portions of Underscore.js. * http://documentcloud.github.com/underscore/. * (c) 2011 Jeremy Ashkenas, DocumentCloud Inc.. * Released under the MIT License.. /..// ==ClosureCompiler==.// @compilation_level ADVANCED_OPTIMIZATIONS.// @output_file_name mixpanel-2.2.min.js.// ==/ClosureCompiler==../.Will export window.mixpanel./../.SIMPLE STYLE GUIDE:..this.x == public function.this._x == internal - only use within this file.this.__x == private - only use within the class..Globals should be all caps./.(function(mixpanel) {. /. * Saved references to long variable names, so that closure compiler can. * minimize file size.. */. var

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	213053
Entropy (8bit):	5.3048536075085995
Encrypted:	false
SSDEEP:	3072:wglJ3CwkZbGOvfBw3bs1vUvozi1KLU8k8OWQ4AmcyruDQ6+V2cOT6YT04lX9+K:dllkZbGOvO3mm1wOL4Agr8+/kXAK
MD5:	9DA993B3F5C7590CCCA0A4D411BC44A8
SHA1:	23D1C23805D2C364B5FCD8B26863584180B00714
SHA-256:	CBF3E508493FAF9864881FA1DD1A157739501028FBE7006C78ED3299556BA349
SHA-512:	8D7EDC3EC76A9C0CE29D1AE39FEB37D2C6AF691C2056E2E9974C24C51AD2A87931D6D70BF2A7178917AEE030943B857ED7F9818FC6877227C183022103BFD020
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.1344.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1344],{49955:function(t,e,n){"use strict";n.d(e,{f:function(){return a},n:function(){return o}});const a=["action-required","actionRequired","add","add-column-left","add-column-right","add-logic","add-row-above","add-row-below","addColumnLeft","addColumnRight","addLogic","addRowAbove","addRowBelow","alert","alert-triangle","alertTriangle","align-bottom","align-left","align-right","align-top","alignBottom","alignLeft","alignRight","alignTop","approve","arrow-down","arrow-left","arrow-right","arrow-up","arrow-up-left","arrowDown","arrowLeft","arrowRight","arrowUp","arrowUpLeft","at","attachment","authentication","auto-fill","autoFill","award","bell","block","bold","book","book-open","bookOpen","boolean","box-plus-above","box-plus-after","box-plus-before","box-plus-below","boxPlusAbove","boxPlusAfter","boxPlusBefore","boxPlusBelow",

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27974)
Category:	dropped
Size (bytes):	28145
Entropy (8bit):	5.111932567512103
Encrypted:	false
SSDEEP:	384:J40Ps15ENmd5gZnE5md5gZdVeErOzVIRWQw1h6bMos1nX5xhEwXTY:y7ENO5ynE5O5ydwEr3RWQe6bU1nXFrM
MD5:	F03BC80FE19576E53EE79979463F9024
SHA1:	3B2AE70F8ECC97DDA978AE7473146C83BE499262
SHA-256:	955EC39E298442113983D14E7EBCB49C8C57F301E88A3DAA05705AD34556286B
SHA-512:	5D16125CB1C83A9C7863FDCF019714CDDE1A20D3F453D29D9E312A7669D6A5025807F45DA647E554C72862AA20688862CFBA5ABAF2736FB508293D0C2477EFC4
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.1882.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1882],{6648:function(n,r,t){var u=t(65077),e=t(18679),i=TypeError,o=Object.getOwnPropertyDescriptor,f=u&&!function(){if(void 0!==this)return!0;try{Object.defineProperty([],"length",{writable:!1}).length=1}catch(n){return n instanceof TypeError}}();n.exports=f?function(n,r){if(e(n)&&!o(n,"length").writable)throw i("Cannot set read only .length");return n.length=r}:function(n,r){return n.length=r}},24881:function(n,r,t){var u=t(13838),e=TypeError;n.exports=function(n,r){if(!delete n[r])throw e("Cannot delete property "+u(r)+" of "+u(n))}},68763:function(n,r,t){var u=t(51605),e=t(92612),i=t(6539),o=t(79328),f=t(23493),c=t(6648),a=t(57242),l=t(62998),s=t(52057),p=t(24881),h=t(45634)("splice"),v=Math.max,d=Math.min;u({target:"Array",proto:!0,forced:!h},{splice:function(n,r){var t,u,h,y,g,m,b=e(this),w=f(b),j=i(n,w),x=argu

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65446)
Category:	downloaded
Size (bytes):	176239
Entropy (8bit):	5.400397462325491
Encrypted:	false
SSDEEP:	3072:OklIINk60Tedpnf1pVvbJbYIoL1piubEl0:Zt8KbfzVjBHoviYp
MD5:	7FE25BE33AC537B233B9E1D3B53C30D6
SHA1:	53332F07FE455F6D77104A2E153B1033C03C10C5
SHA-256:	048898107B20BFFE7B2690476083A57DA8F5B5A33DF95395FA478DD3E80E8622
SHA-512:	795CB3FA69580AC06C38B53A3391335F0CBC28FF418D92E82C1E0B5E64EBE49B843D37415BA375C8A823E8890E186E0CBA4DEB5A1A26D1A2327CCBCBCF5BEDD0
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.1358.js?cs=5682ebd8fdc291030bb5
Preview:	/! For license information please see signing_iframeless_mobile.1358.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1358],{34861:function(e,t,r){"use strict";r.d(t,{$oX:function(){return h},EZk:function(){return p},EyF:function(){return v},Gpd:function(){return y},MRs:function(){return m},Md_:function(){return g},P6x:function(){return u},RJC:function(){return d},T1N:function(){return o},Tmo:function(){return b},W5p:function(){return a},Yro:function(){return i},Zkh:function(){return c},atX:function(){return l},ekt:function(){return f},f3R:function(){return x},ho7:function(){return s},iKt:function(){return n},j4I:function(){return C}});const n={avatarBgColor1:"#e2e0fc",avatarBgColor1Alt:"#eeddfc",avatarBgColor2:"#90f7c1",avatarBgColor2Alt:"#cdfce0",avatarBgColor3:"#fbdbdf",avatarBgColor3Alt:"#fcebed",avatarBgColor4:"#fee7a7",avatarBgColor4Alt:"#fef0cc",avatarBgColor5:"#e6e1de",avatarBgColor5Alt:"#f4f0ee",avatarBgColorDefault:"#dee3e9",avatarBgCo

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6455)
Category:	dropped
Size (bytes):	6636
Entropy (8bit):	5.32559964561976
Encrypted:	false
SSDEEP:	96:n4MqCAsxUvOay1SYLpBY3HwKvacwdx65LLHRMnkZSqHsTrJGqj+FBGB+1ht:n4M17UvOatYVBY0x8LHSkerJGm+F31f
MD5:	7C6BEDD9B75D72907D591245A4E212CB
SHA1:	FC6B2C0E89BCD4C4521FB3426D88D0A326839F8E
SHA-256:	52C5D697C1D2EEF48D021BAF563B26208AB7F59474B0B78DB0AC8239E51AEA2A
SHA-512:	77EB49B15C29AC896ACB37191F72D3D8F06F754D53F1F449186FEA8C0B07B3A7701696F223025C715FD065186CC988822B39D0BE4E7189B39C45CE3D59DB433C
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.preloader.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9523],{64431:function(t,n){!function(){var e,r=Array.prototype.forEach,i=Object.prototype.hasOwnProperty,o=Array.prototype.slice,c=0,u={keys:Object.keys\|\|function(t){if("object"!=typeof t&&"function"!=typeof t\|\|null===t)throw new TypeError("keys() called on a non-object");var n,e=[];for(n in t)t.hasOwnProperty(n)&&(e[e.length]=n);return e},uniqueId:function(t){var n=++c+"";return t?t+n:n},has:function(t,n){return i.call(t,n)},each:function(t,n,e){if(null!=t)if(r&&t.forEach===r)t.forEach(n,e);else if(t.length===+t.length)for(var i=0,o=t.length;i<o;i++)n.call(e,t[i],i,t);else for(var c in t)this.has(t,c)&&n.call(e,t[c],c,t)},once:function(t){var n,e=!1;return function(){return e\|\|(e=!0,n=t.apply(this,arguments),t=null),n}}};e={on:function(t,n,e){return a(this,"on",t,[n,e])&&n?(this._events\|\|(this._events={}),(this._events[t]\|\|

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	376228
Entropy (8bit):	5.736117762501786
Encrypted:	false
SSDEEP:	3072:t7/97IIEDu4KgD0Hd7C4AggTaNa99RIDthSopAH2iqtDvvGbUpAcF+jGab0q/l4V:eKmaaevGYpAcFxOxj8bhRVG4
MD5:	51E25B8A8D64616309DCBD0977CD8AC9
SHA1:	FBDA65EFD745B635B9AEF52003339FC680AB39CD
SHA-256:	5717996076FF00F5DEDDC9D3E6BCCAA441708A42C71A4FA8892017BA7950DD09
SHA-512:	F145A8DECB5BF76808B728A43098EBA1C4F36061F3D17265BFA126E044448676CE2830D4AD3FC252503E5213F6A6A800B711607E7F1B1AFFBBEE6A0DE2FF120D
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.2191.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2191,1976],{81652:function(t,e,n){"use strict";n.d(e,{e:function(){return yt}});var r=n(53811),o=n(34963),a=n(39653),i=n(56213),s=n(49859),c=n(44828),l=n.n(c),u=n(61240),f=n.n(u),_=n(50697),v=n.n(_),d=n(96319),h=n.n(d),p=n(11393),m=n.n(p),A={get:function(){return null},has:function(){return!1},forEach:function(){return""}},E=function t(e,n,r,o){(0,a.A)(this,t),(0,s.A)(this,"status",void 0),(0,s.A)(this,"description",void 0),(0,s.A)(this,"request",void 0),(0,s.A)(this,"error",void 0),(0,s.A)(this,"willRetry",void 0),(0,s.A)(this,"attempt",void 0),this.request=r,this.description=n,this.status=e,this.error=o},g=n(11922),C=n(49166),T=n(13101),S=n(35352),I=n(85569),R=n.n(I),y="undefined"!=typeof globalThis&&globalThis\|\|"undefined"!=typeof self&&self\|\|void 0!==n.g&&n.g\|\|{},N="URLSearchParams"in y,O="Symbol"in y&&"iterator"in Symbol,w="

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7965)
Category:	dropped
Size (bytes):	8136
Entropy (8bit):	5.127481723253427
Encrypted:	false
SSDEEP:	192:G465IUUMXnH4i3LI644EfwVFcCB30p7UUdEKyM9a+VtNZp6j96ysXs:G465IU/nHD3LI6hFcCBqbaWMz
MD5:	CF0A3FB647010CD001AF1B0430E25098
SHA1:	2DEA95C29D245223540CCBFE2F246F718DB7B283
SHA-256:	D7B8DDB44BFC73780B9AF7FBB6619AABEDC3C57062FF68E06A016DE042A7FF71
SHA-512:	44A4FC311EE835098B68CC2FA8CF5CA11620DBFAB17544B848769256C62FB803F4CB72A053C207394B5FF2D684A9ACA10CEE75B7F16EF237F7CD0D16FB43FF38
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.1946.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1946],{1946:function(e,t,a){a(83995),a(83725),a(52598);var i=a(4523),n=a(74692),o=a.n(n),d=a(85919),l=a(3147),r=a(89221),c=a(51552),s=a(19753),h=a(23664),u=a(19839),g=a(973),p=a(6232),v=0,f=d.A.extend({tagName:"div",className:"modal",events:{"click .close":"cancelOrClose"},dialogId:null,uri:null,useCache:!0,$lastActiveElement:o()([]),initialize(e){},mapUriData(e){return e},update(e,t){t=t\|\|{},e=e\|\|{};var a=this;function n(e){var t=!!e;if(s.default.envelope){var n=e.resources\|\|{},o=s.default.envelope.resources\|\|{};(e=i.default.extend({},s.default.envelope,e)).resources=i.default.extend({},o,n)}t?a.reload(a.mapUriData(e)):a.render(),a.$el.attr("modal-ready","")}"envelope"!==this.uri&&s.default[this.uri]?(n(s.default[this.uri]),t.afterUpdate&&t.afterUpdate()):this.uri&&!s.default[this.uri]?(t.showProgress&&c.A.trigger("

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20560)
Category:	dropped
Size (bytes):	20731
Entropy (8bit):	5.488777566484376
Encrypted:	false
SSDEEP:	384:x4HPTUYYmiuqjGuJEUlQ6N+adWrarOkhXRJnPZvqocGrt7xQ3DewLhb44gDNn2Qw:63YmqKB6N+aorarO6fu3D04SYEjK
MD5:	D56F8C4A6B3DB2677E962A7B0F45634A
SHA1:	5AFF66065038A218B20AAA779AE7F9023C88287A
SHA-256:	1C0ECB84B8364F76298D5022BDD9A03CDE1E065964BDB5870FA6439572F550D9
SHA-512:	0DCF83E2602241685D5763AF0F2C9FEC8F8358B3084DD73322665515273435CA603E5017069DC51BC189FC0FBF4C1CE715438A617795278CD5CE4869888C3F80
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.3188.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3188],{8306:function(t,e,n){"use strict";n.d(e,{$:function(){return A},AL:function(){return _},D$:function(){return l},G:function(){return C},IM:function(){return M},QB:function(){return f},S0:function(){return D},dS:function(){return L},iD:function(){return P},mj:function(){return k},nD:function(){return N}});var i=n(96319),r=n.n(i),s=n(11265),o=n.n(s),a=n(25514),h={first2:{firstN:2,lastN:0,cjk_validate:!1},last2:{firstN:0,lastN:2,cjk_validate:!1},first1last1:{firstN:1,lastN:1,cjk_validate:!1},last2_cjk:{firstN:0,lastN:2,cjk_validate:!0}},u={full:{numN:5,separator:" ",lastfirst:!1,cjk_validate:!1},first_middle_last:{numN:3,separator:" ",lastfirst:!1,cjk_validate:!1},lastfirst:{numN:1,separator:"",lastfirst:!0,cjk_validate:!1},last_first:{numN:2,separator:" ",lastfirst:!0,cjk_validate:!1},lastfirst_cjk:{numN:1,separator:"",lastfi

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	77442
Entropy (8bit):	5.338148878225273
Encrypted:	false
SSDEEP:	768:QQozOylfELxCZfUpRa3QJVioYSFHBAIzWJHH552VsUcwoioIDQ4h1NlR7NxhL2H2:FQ+uc+R55qs/0Q4h1NvBxFcf/FYj/
MD5:	AFEB5ECA8D00802FEABCACB1A960AC1E
SHA1:	2739EB27E219F5BC80C82E1BFC1A434AA494D0D7
SHA-256:	E451EEAE12302410673586871F0E545FB03379726222B64C3DF622D2320B6D1E
SHA-512:	9DD6691A620D1692C6B24142BECEEDE3222C4181C2B9F55AF8EF72C9538384D00CB6550862CFC9468BED4452FEA25F39039834404C4BDA76567A327569F5832B
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.5140.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5140],{57279:function(t,e,n){"use strict";var r=n(5946);Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0;var o=r(n(61240)),a=r(n(20271)),i=r(n(43563)),u=r(n(70533)),c=function(){function t(){(0,a.default)(this,t),(0,u.default)(this,"queue",new Array),(0,u.default)(this,"workingOnPromise",!1)}return(0,i.default)(t,[{key:"enqueue",value:function(t){var e=this;return new o.default((function(n,r){e.queue.push({worker:t,resolve:n,reject:r}),e.dequeue()}))}},{key:"dequeue",value:function(){var t=this;if(this.workingOnPromise)return!1;var e=this.queue.shift();if(!e)return!1;try{this.workingOnPromise=!0,e.worker().then((function(n){t.workingOnPromise=!1,e.resolve(n),t.dequeue()})).catch((function(n){t.workingOnPromise=!1,e.reject(n),t.dequeue()}))}catch(t){this.workingOnPromise=!1,e.reject(t),this.dequeue()}return!0}}]),

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30984)
Category:	downloaded
Size (bytes):	31159
Entropy (8bit):	5.242540707783587
Encrypted:	false
SSDEEP:	768:wCyo3xcGSQWQ0UGUEQsF8h6m9qW6A4MzK7n8CutA2q0d2KP6LJgRMVUWFgHmbOfR:wCvSQWQ0UGUEQsFy6m9qW6A4MzK7n8CK
MD5:	48BC933608F733A9283F2218C73A941F
SHA1:	E04E625C70A5E8505B77A51D82D9A73AFA9F3547
SHA-256:	FCBC395A3D24699D9229846A30C9FE245D77A7AFDBC8386838A03A837C6672AA
SHA-512:	DED1BDD62FAAD01AF0B6F05A28A8D8721080B862EFDD5866EBDB4672A21A8EE15D3965B523C691784B7EF8817296707D5A3217F7B8CE713B212520EE9170329B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.9788.js?cs=f79a378751a74981e5f2
Preview:	/! For license information please see signing_iframeless_mobile.9788.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9788],{44903:function(e,t,n){var i,o;"undefined"!=typeof self&&self,i=function(){"function"!=typeof Promise&&function(t){function n(e,t){return function(){e.apply(t,arguments)}}function i(e){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=null,this._value=null,this._deferreds=[],c(e,n(r,this),n(a,this))}function o(e){var t=this;return null===this._state?void this._deferreds.push(e):void p((function(){var n=t._state?e.onFulfilled:e.onRejected;if(null!==n){var i;try{i=n(t._value)}catch(t){return void e.reject(t)}e.resolve(i)}else(t._state?e.resolve:e.reject)(t._value)}))}function r(e){try{if(e===this)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var t=e.t

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65452)
Category:	dropped
Size (bytes):	390749
Entropy (8bit):	5.4438795001494515
Encrypted:	false
SSDEEP:	3072:6EKNqSD5mFCl9FX+HupoU0iZZhd/+nqgMER167WdH/KPKxMytLCxcM4:6f5aCTcJU0iZsm7W8KxtX
MD5:	6B9E763659722B759B330AFF51DA7D30
SHA1:	2D273929A0BDC0BC24C5234A10DEF2E713BB50CD
SHA-256:	B9338C45BBE474A3C1D05FFE0EA1B3BCB8515D56EA2D7927DA2A34C5D7BECE06
SHA-512:	0ED4BFE1E20B8D62F94C5BE6F5DC7B78014482CE122F53304CE5F4A8F7780DBF2CF70C76690021FC8C843EFCB1383271ADD03669D12F28C41A737B17F4BCD497
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.js.LICENSE.txt /.!function(){var t,e,r,n,o,i={51544:function(t,e,r){"use strict";r.d(e,{dF:function(){return a},fC:function(){return u},mB:function(){return c}});var n=r(39653),o=r(56213),i=r(49859),a=function(){function t(e){(0,n.A)(this,t),(0,i.A)(this,"thunk",void 0),this.thunk=e}return(0,o.A)(t,[{key:"value",get:function(){return this.thunk()}}]),t}(),u=new a((function(){return window})),c=new a((function(){return document}))},79100:function(t,e,r){"use strict";r.d(e,{_:function(){return s}});var n=r(38729),o=function(){function t(){}return t.prototype.active=function(){return n.l},t.prototype.with=function(t,e,r){for(var n=[],o=3;o<arguments.length;o++)n[o-3]=arguments[o];return e.call.apply(e,function(t,e,r){if(r\|\|2===arguments.length)for(var n,o=0,i=e.length;o<i;o++)!n&&o in e\|\|(n\|\|(n=Array.prototype.slice.call(e,0,o)),n[o]=e[o]);return t.concat(n\|\|Array.prototype.slice.call(e))}([r],function(t,e){var r="function"

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	77442
Entropy (8bit):	5.338148878225273
Encrypted:	false
SSDEEP:	768:QQozOylfELxCZfUpRa3QJVioYSFHBAIzWJHH552VsUcwoioIDQ4h1NlR7NxhL2H2:FQ+uc+R55qs/0Q4h1NvBxFcf/FYj/
MD5:	AFEB5ECA8D00802FEABCACB1A960AC1E
SHA1:	2739EB27E219F5BC80C82E1BFC1A434AA494D0D7
SHA-256:	E451EEAE12302410673586871F0E545FB03379726222B64C3DF622D2320B6D1E
SHA-512:	9DD6691A620D1692C6B24142BECEEDE3222C4181C2B9F55AF8EF72C9538384D00CB6550862CFC9468BED4452FEA25F39039834404C4BDA76567A327569F5832B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.5140.js?cs=d06887fca6755135104e
Preview:	/! For license information please see signing_iframeless_mobile.5140.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5140],{57279:function(t,e,n){"use strict";var r=n(5946);Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0;var o=r(n(61240)),a=r(n(20271)),i=r(n(43563)),u=r(n(70533)),c=function(){function t(){(0,a.default)(this,t),(0,u.default)(this,"queue",new Array),(0,u.default)(this,"workingOnPromise",!1)}return(0,i.default)(t,[{key:"enqueue",value:function(t){var e=this;return new o.default((function(n,r){e.queue.push({worker:t,resolve:n,reject:r}),e.dequeue()}))}},{key:"dequeue",value:function(){var t=this;if(this.workingOnPromise)return!1;var e=this.queue.shift();if(!e)return!1;try{this.workingOnPromise=!0,e.worker().then((function(n){t.workingOnPromise=!1,e.resolve(n),t.dequeue()})).catch((function(n){t.workingOnPromise=!1,e.reject(n),t.dequeue()}))}catch(t){this.workingOnPromise=!1,e.reject(t),this.dequeue()}return!0}}]),

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	281478
Entropy (8bit):	4.9037229836757925
Encrypted:	false
SSDEEP:	1536:dh+jC/OXuLjOylffcBzBABaxBa1xcpMvemTMvU6jHT7Syq0FWhNtYhBrORhjsxQI:jOyl1+I1xcpMvemTMvU6jmhc
MD5:	7E4446C2B304CD85BFC0353535C38CE8
SHA1:	AC982793D6A610A02C92254784C7AC5C554F62B1
SHA-256:	DBCACD679B359983BDFB45D67E24069529982B01AFF7E3F543EA6B9534F323D2
SHA-512:	71FFEC2AB03A08BB3B5378192423ECE0BC239A1839F23E3A60818C1E73EF2618D8360159B72BE10FA8FD5DF91B5B8F7B1641F8F384A5A202546C7F114F5A4378
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.styles.js?cs=c1968ad6db519078773d
Preview:	/! For license information please see signing_iframeless_mobile.styles.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1869],{52631:function(e,t,o){var i=o(31601),n=o.n(i),a=o(76314),r=o.n(a)()(n());r.push([e.id,'.btn .icon,.btn-text{color:#333}img{max-width:none}.dialog.modal-wrap{background:rgba(0,0,0,.5);top:0;left:0;width:100%;height:100%;position:fixed;overflow:auto;outline:0!important;text-align:center;padding:0 2em}.icon{width:auto;height:auto;background:0 0;overflow:visible}.mvn-pro{font-family:"Maven Pro",DSIndigo,Helvetica,Arial,sans-serif;font-weight:700}.helv,div:not([data-disable-olive-div] ){font-family:DSIndigo,Helvetica,Arial,sans-serif;font-weight:400}div:not([data-disable-olive-div] ){font-size:13px;line-height:normal;text-rendering:optimizeLegibility}h1,h2,h3,h4{font-family:"Maven Pro",DSIndigo,Helvetica,Arial,sans-serif;font-weight:700}h5{font-family:DSIndigo,Helvetica,Arial,sans-serif;font-weight:400;font-wei

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32844)
Category:	dropped
Size (bytes):	33015
Entropy (8bit):	5.379440412002838
Encrypted:	false
SSDEEP:	384:641Cso/Im0OlknR1UF6jdcln2PMvDoxzGJbXRm0PSa8H5hy1tj30vOwAmQQx4uMd:tFK0M82KZhy1tjmNAmQY4jd
MD5:	072146BBA6E4EB09461CFC1365FF1C6E
SHA1:	90765FB7072CDF6F9C945D723DFA3C4499AA0B88
SHA-256:	8BA950B78817B87D98FB3784B08434D1EC450F8D88EED1B5C5BBE2349B89614E
SHA-512:	84E7F2A831C231B1D9C23207F52346E16DBBE72D81B1D43788E4069E776B6A1E5AF5DCEC04344B94CF1D7112B3B0F3D9CE28446603B0F676D7147FC09DDB53E0
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.9350.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9350],{32627:function(e,t,n){"use strict";n.d(t,{k:function(){return i}});var o=n(96540),i=function(e){var t=(0,o.useRef)();return void 0===t.current&&(t.current={value:e()}),t.current.value}},44164:function(e,t,n){"use strict";n.d(t,{B:function(){return r}});var o=n(38008),i=n(96540);function r(e,t){var n=(0,i.useState)(!1),r=(0,o.A)(n,2),a=r[0],s=r[1];return(0,i.useEffect)((function(){var n=new IntersectionObserver((function(e){(0,o.A)(e,1)[0].intersectionRatio<1?s(!0):s(!1)}),{root:t,threshold:1});return e&&n.observe(e),function(){n.disconnect()}}),[t,e]),a}n(95127)},45268:function(e,t,n){"use strict";n.d(t,{p:function(){return i}});var o=n(96540);function i(){var e=(0,o.useRef)(!1),t={get mounted(){return!!e.current}};return(0,o.useLayoutEffect)((function(){return e.current=!0,function(){e.current=!1}}),[]),t}},9729:function(

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	485630
Entropy (8bit):	5.533785895135338
Encrypted:	false
SSDEEP:	6144:f3O89VHlI7t/aC/lWCtHDmtTgtT8tTMtHOzZfD+Ds3UOEn66wGQI9wuKEC:f9TIobZfD+Ds3UOEnfw2IEC
MD5:	B61D74CB1EFAD0D1AEF8D0CE3DD2C6B7
SHA1:	479891ECFEB4488E72829F52CF75A6A23D7CC5F6
SHA-256:	0F820B74D13E5A343455A7946F809E9F7EA65026FD56F0FE5FF2B80DB5F06FC1
SHA-512:	15E51AB04B3F1F8A2B78B5D90C323A1132F041EE08617227B24F7FDE04D8CBE9CCEEDB86479F84E9848CFA5DCB7EDF9390C6139B3927F5CD237025A37EBB5979
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.3821.js?cs=73919a1c00366882b67d
Preview:	/! For license information please see signing_iframeless_mobile.3821.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3821],{58079:function(e){function t(e){return Promise.resolve().then((function(){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}))}t.keys=function(){return[]},t.resolve=t,t.id=58079,e.exports=t},42584:function(e,t,n){var i=n(93633);e.exports=(i.default\|\|i).template({1:function(e,t,n,i,a){var r,o,s=null!=t?t:e.nullContext\|\|{},l=e.hooks.helperMissing,u="function",c=e.escapeExpression,d=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" <"+c(typeof(o=null!=(o=d(n,"htmlTag")\|\|(null!=t?d(t,"htmlTag"):t))?o:l)===u?o.call(s,{name:"htmlTag",hash:{},data:a,loc:{start:{line:3,column:3},end:{line:3,column:14}}}):o)+'\n class="pdf-ua_'+c(typeof(o=null!=(o=d(n,"tag")\|\|(null!=t?d(t,"tag"):t))?o:l)===u?o.call(s,{name:"tag",hash:{},data:a,loc:{start:{line:4,colum

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	126842
Entropy (8bit):	5.267722876468899
Encrypted:	false
SSDEEP:	1536:iThOCvgOToFBrFRtZzITioFBVct4XLqpq7YFnaPZCXjgCI/DF:ahOCIO6duH9XWpqsFaRCTgCIB
MD5:	5BDABCD6C45CAAD8B5855528AEC7B1DF
SHA1:	62BCF113A643A35D9A4FA5997D6926F4E6AB0499
SHA-256:	201685703E0D8F7BA3994A340AC693CF11FF4885BCDB0F6D225EE6B3990193CC
SHA-512:	E8C25494A3F7A72197D9A4F1FEF3010B01FED302ABF797044EC2400A7F7B41474FEB2D890EC95DBDCC810B59C142629A49D430D33F75916D9A646F3DD25D02D2
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.6693.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6693],{23172:function(e,t,n){var r=n(65077),l=n(30281),a=n(91641),o=n(5476),u=l(n(9304).f),i=l([].push),s=function(e){return function(t){for(var n,l=o(t),s=a(l),c=s.length,f=0,d=[];c>f;)n=s[f++],r&&!u(l,n)\|\|i(d,e?[n,l[n]]:l[n]);return d}};e.exports={entries:s(!0),values:s(!1)}},84095:function(e,t,n){var r=n(51605),l=n(23172).entries;r({target:"Object",stat:!0},{entries:function(e){return l(e)}})},4146:function(e,t,n){"use strict";var r=n(73404),l={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},a={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},o={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},u={};function i(e){return r.isMemo(e)?o:u[e

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	376228
Entropy (8bit):	5.736117762501786
Encrypted:	false
SSDEEP:	3072:t7/97IIEDu4KgD0Hd7C4AggTaNa99RIDthSopAH2iqtDvvGbUpAcF+jGab0q/l4V:eKmaaevGYpAcFxOxj8bhRVG4
MD5:	51E25B8A8D64616309DCBD0977CD8AC9
SHA1:	FBDA65EFD745B635B9AEF52003339FC680AB39CD
SHA-256:	5717996076FF00F5DEDDC9D3E6BCCAA441708A42C71A4FA8892017BA7950DD09
SHA-512:	F145A8DECB5BF76808B728A43098EBA1C4F36061F3D17265BFA126E044448676CE2830D4AD3FC252503E5213F6A6A800B711607E7F1B1AFFBBEE6A0DE2FF120D
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.2191.js?cs=7274cc17d13232c2210e
Preview:	/! For license information please see signing_iframeless_mobile.2191.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2191,1976],{81652:function(t,e,n){"use strict";n.d(e,{e:function(){return yt}});var r=n(53811),o=n(34963),a=n(39653),i=n(56213),s=n(49859),c=n(44828),l=n.n(c),u=n(61240),f=n.n(u),_=n(50697),v=n.n(_),d=n(96319),h=n.n(d),p=n(11393),m=n.n(p),A={get:function(){return null},has:function(){return!1},forEach:function(){return""}},E=function t(e,n,r,o){(0,a.A)(this,t),(0,s.A)(this,"status",void 0),(0,s.A)(this,"description",void 0),(0,s.A)(this,"request",void 0),(0,s.A)(this,"error",void 0),(0,s.A)(this,"willRetry",void 0),(0,s.A)(this,"attempt",void 0),this.request=r,this.description=n,this.status=e,this.error=o},g=n(11922),C=n(49166),T=n(13101),S=n(35352),I=n(85569),R=n.n(I),y="undefined"!=typeof globalThis&&globalThis\|\|"undefined"!=typeof self&&self\|\|void 0!==n.g&&n.g\|\|{},N="URLSearchParams"in y,O="Symbol"in y&&"iterator"in Symbol,w="

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	213053
Entropy (8bit):	5.3048536075085995
Encrypted:	false
SSDEEP:	3072:wglJ3CwkZbGOvfBw3bs1vUvozi1KLU8k8OWQ4AmcyruDQ6+V2cOT6YT04lX9+K:dllkZbGOvO3mm1wOL4Agr8+/kXAK
MD5:	9DA993B3F5C7590CCCA0A4D411BC44A8
SHA1:	23D1C23805D2C364B5FCD8B26863584180B00714
SHA-256:	CBF3E508493FAF9864881FA1DD1A157739501028FBE7006C78ED3299556BA349
SHA-512:	8D7EDC3EC76A9C0CE29D1AE39FEB37D2C6AF691C2056E2E9974C24C51AD2A87931D6D70BF2A7178917AEE030943B857ED7F9818FC6877227C183022103BFD020
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.1344.js?cs=8e84cf5db98c39a94426
Preview:	/! For license information please see signing_iframeless_mobile.1344.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1344],{49955:function(t,e,n){"use strict";n.d(e,{f:function(){return a},n:function(){return o}});const a=["action-required","actionRequired","add","add-column-left","add-column-right","add-logic","add-row-above","add-row-below","addColumnLeft","addColumnRight","addLogic","addRowAbove","addRowBelow","alert","alert-triangle","alertTriangle","align-bottom","align-left","align-right","align-top","alignBottom","alignLeft","alignRight","alignTop","approve","arrow-down","arrow-left","arrow-right","arrow-up","arrow-up-left","arrowDown","arrowLeft","arrowRight","arrowUp","arrowUpLeft","at","attachment","authentication","auto-fill","autoFill","award","bell","block","bold","book","book-open","bookOpen","boolean","box-plus-above","box-plus-after","box-plus-before","box-plus-below","boxPlusAbove","boxPlusAfter","boxPlusBefore","boxPlusBelow",

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	136176
Entropy (8bit):	5.178395204770072
Encrypted:	false
SSDEEP:	1536:bprIg2sdtEyE4aoo/Iy4onqRmn4r4B52zqdiq85fhdsbPvLKaSlMaQLp9jV:RtcqoIzqdiqcsRSlMzJ
MD5:	B996140AA55B4DCEFBE20B0EC96447B3
SHA1:	5C715DD38582604148904BADAF0342982195F698
SHA-256:	54C6DB3FC48C1F54FAD197E91744DA04EB8FB584FBDB581A5C1E92CD6E72E12D
SHA-512:	529A34EEEE2EB0765F549CBD667238928DA1C57CC48B41B5674CABA9098E44E7706B0B7F7B3FB9A22C69CD5ACF29EB0546DCAC4515FA2E298C72A7CD5B034561
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.olive.js?cs=e0740911f01cf8fd8c81
Preview:	/! For license information please see signing_iframeless_mobile.olive.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1540],{43466:function(e){e.exports=function(e){function t(i){if(n[i])return n[i].exports;var o=n[i]={exports:{},id:i,loaded:!1};return e[i].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};return t.m=e,t.c=n,t.p="/",t(0)}([function(e,t,n){"use strict";n(1),n(2),n(3);var i=n(76);i.keys().forEach((function(e){i(e)}))},function(e,t,n){"use strict";!function(e,t){e.config={closePopoverOnEsc:!0,closePopoverOnClickAnywhere:!0,debug:!1,isAutoInitEnabled:!0},e.version="17.20.0",e.KEYS={tab:9,enter:13,esc:27,left:37,up:38,right:39,down:40},e.l10n={close:"Close",characterLimit:"{{REMAINING}} (maximum {{MAX}} characters)"},e.init=function(e){var t=[],n={add:function(e){return t.push(e),n},run:function(){var e;for(e=0;e<t.length;e++)t[e]();return n},afterLoad:function(){e.config.isAutoInitEnabled&&e.init.run(),e.util.polyfillFle

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65440)
Category:	dropped
Size (bytes):	902948
Entropy (8bit):	5.337442892975745
Encrypted:	false
SSDEEP:	6144:Xe8VArAJRVLScphH9czgi4MevB33oxVJ5OZoHk78oOKroxcox/6JoxPoxmr:WrAJCXnHkY6Kr
MD5:	202430AFDC27F45C73C3E3FA3694F6C0
SHA1:	0EE2C593EB4ECB80D02DA2BCED08293FC46DA0D1
SHA-256:	A3DC9EA908EF210520125B4CD493DE3C994F8D8EC7EA84E7F39EAF477BD8CF1E
SHA-512:	52EC89B4F37EB5776A4B061DD18AE8C58F03B27F87BC36E2845107D1BE5685FD9D15390237C77993A208B1C0D0926AE84F7226EDC02B0989C23D28008A0718B3
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.backbone-app.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2618,3920],{443:function(e,t,n){var a=n(93633);e.exports=(a.default\|\|a).template({compiler:[8,">= 4.3.0"],main:function(e,t,n,a,l){var i,o=null!=t?t:e.nullContext\|\|{},r=e.hooks.helperMissing,s=e.escapeExpression,c="function",u=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return'<div id="simple-verify-dialog" class="modal-wrap dialog" data-qa="simple-dialog"><div class="modal-content" role="dialog" aria-labelledby="simple-verify-dialog-title" aria-describedby="simple-verify-dialog-content"><button type="button" class="icon icon-times x-close close" data-action="canceled"><span class="btn-label">'+s((u(n,"$")\|\|t&&u(t,"$")\|\|r).call(o,"DocuSign_Close",{name:"$",hash:{},data:l,loc:{start:{line:1,column:322},end:{line:1,column:344}}}))+'</span></button><div class="header"><h1 id="sim

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	91926
Entropy (8bit):	5.156184880438797
Encrypted:	false
SSDEEP:	768:u0V8L+oxVm7+82ZbKoYCPOGUkqxhIii7Jwldw8KeTdV8L+dXhx7+8UN9RZrE6dK:3V8IcZbDPeFRV88Oq
MD5:	1C065938739CF31D81692C38819E045C
SHA1:	9038D98DEA16113148D68413B8F54E1B3AC4C755
SHA-256:	17AFE3069E479E437A4864A4684A5BCBD0A3C2DD328274BED28EFC91A5CC9C0F
SHA-512:	5F349B4CBB886D34F008EAF121C60B9B2A2373A7F7063D6C2A46FE8D243C0E9A2D70032B3417DF03A385EAFA20F2578E47CF0A232BAC31F4B2C473DD24CD01AA
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.8919.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8919],{83201:function(e,t,n){function r(){r=function(){return t};var e,t={},n=Object.prototype,o=n.hasOwnProperty,i=Object.defineProperty\|\|function(e,t,n){e[t]=n.value},a="function"==typeof Symbol?Symbol:{},s=a.iterator\|\|"@@iterator",u=a.asyncIterator\|\|"@@asyncIterator",c=a.toStringTag\|\|"@@toStringTag";function p(e,t,n){return Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{p({},"")}catch(e){p=function(e,t,n){return e[t]=n}}function d(e,t,n,r){var o=t&&t.prototype instanceof h?t:h,a=Object.create(o.prototype),s=new I(r\|\|[]);return i(a,"_invoke",{value:E(e,n,s)}),a}function g(e,t,n){try{return{type:"normal",arg:e.call(t,n)}}catch(e){return{type:"throw",arg:e}}}t.wrap=d;var m="suspendedStart",f="suspendedYield",l="executing",w="completed",v={};function h(){}function b(){}function

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	84993
Entropy (8bit):	5.267112927447494
Encrypted:	false
SSDEEP:	1536:N5e1Z4fo4oHS75P+e0TFCaJsslQD+wHuL1WPHiqcuoH+187BvgOiWaORqFnwdAWn:KZuynsfD4w6qNp6nIE0C
MD5:	FFC995495B9BD876B88ABC7E73E867A4
SHA1:	28EF2CAC33B7BD81F90B5EC0AFC534A899A62EDC
SHA-256:	D7325AD98A5F0BE6BD3112C375030BF901224AEFCA21B1D24A6C589C6B9D80BD
SHA-512:	B960FEB45320BA6EEE28E13594137EFF1F14F098817E0970BE83C62CEFD1D3E8941DDC06F6F1212B6637D5AAF1D9140051C3496A0689D39259EE496EA9A11E97
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.6826.js?cs=74a621b15ce03f124594
Preview:	/! For license information please see signing_iframeless_mobile.6826.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6826],{45603:function(e,t,n){n.d(t,{k:function(){return u}});var r=n(38008),o=n(96540),i=n(64020),u=function(){var e=(0,o.useState)((0,i._T)()\|\|""),t=(0,r.A)(e,2),n=t[0],u=t[1];return(0,o.useEffect)((function(){var e=function(){u(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"")};return(0,i.pF)(e),function(){return(0,i.CK)(e)}}),[]),n}},92742:function(e,t,n){n.d(t,{A:function(){return S}});var r=n(53811),o=n(27026),i=n(48079),u=n.n(i),c=n(96319),l=n.n(c),s=n(8628),a=n.n(s),f=n(96540),d=n(45603),m=n(90812),p=n(6982),v=n(95361),g=n(34743),h=n(53289),y=n(18491),b=n(59793),w=n(94801),x=n(31824),E={flip:function(){return{mainAxis:!(arguments.length>0&&void 0!==arguments[0])\|\|arguments[0],crossAxis:!(arguments.length>1&&void 0!==arguments[1])\|\|arguments[1],fallbackAxisSideDirection:arguments.length>2&&void 0!==arg

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	dropped
Size (bytes):	281478
Entropy (8bit):	4.9037229836757925
Encrypted:	false
SSDEEP:	1536:dh+jC/OXuLjOylffcBzBABaxBa1xcpMvemTMvU6jHT7Syq0FWhNtYhBrORhjsxQI:jOyl1+I1xcpMvemTMvU6jmhc
MD5:	7E4446C2B304CD85BFC0353535C38CE8
SHA1:	AC982793D6A610A02C92254784C7AC5C554F62B1
SHA-256:	DBCACD679B359983BDFB45D67E24069529982B01AFF7E3F543EA6B9534F323D2
SHA-512:	71FFEC2AB03A08BB3B5378192423ECE0BC239A1839F23E3A60818C1E73EF2618D8360159B72BE10FA8FD5DF91B5B8F7B1641F8F384A5A202546C7F114F5A4378
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.styles.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1869],{52631:function(e,t,o){var i=o(31601),n=o.n(i),a=o(76314),r=o.n(a)()(n());r.push([e.id,'.btn .icon,.btn-text{color:#333}img{max-width:none}.dialog.modal-wrap{background:rgba(0,0,0,.5);top:0;left:0;width:100%;height:100%;position:fixed;overflow:auto;outline:0!important;text-align:center;padding:0 2em}.icon{width:auto;height:auto;background:0 0;overflow:visible}.mvn-pro{font-family:"Maven Pro",DSIndigo,Helvetica,Arial,sans-serif;font-weight:700}.helv,div:not([data-disable-olive-div] ){font-family:DSIndigo,Helvetica,Arial,sans-serif;font-weight:400}div:not([data-disable-olive-div] ){font-size:13px;line-height:normal;text-rendering:optimizeLegibility}h1,h2,h3,h4{font-family:"Maven Pro",DSIndigo,Helvetica,Arial,sans-serif;font-weight:700}h5{font-family:DSIndigo,Helvetica,Arial,sans-serif;font-weight:400;font-wei

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27974)
Category:	downloaded
Size (bytes):	28145
Entropy (8bit):	5.111932567512103
Encrypted:	false
SSDEEP:	384:J40Ps15ENmd5gZnE5md5gZdVeErOzVIRWQw1h6bMos1nX5xhEwXTY:y7ENO5ynE5O5ydwEr3RWQe6bU1nXFrM
MD5:	F03BC80FE19576E53EE79979463F9024
SHA1:	3B2AE70F8ECC97DDA978AE7473146C83BE499262
SHA-256:	955EC39E298442113983D14E7EBCB49C8C57F301E88A3DAA05705AD34556286B
SHA-512:	5D16125CB1C83A9C7863FDCF019714CDDE1A20D3F453D29D9E312A7669D6A5025807F45DA647E554C72862AA20688862CFBA5ABAF2736FB508293D0C2477EFC4
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.1882.js?cs=24c1d6df45358823acd7
Preview:	/! For license information please see signing_iframeless_mobile.1882.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1882],{6648:function(n,r,t){var u=t(65077),e=t(18679),i=TypeError,o=Object.getOwnPropertyDescriptor,f=u&&!function(){if(void 0!==this)return!0;try{Object.defineProperty([],"length",{writable:!1}).length=1}catch(n){return n instanceof TypeError}}();n.exports=f?function(n,r){if(e(n)&&!o(n,"length").writable)throw i("Cannot set read only .length");return n.length=r}:function(n,r){return n.length=r}},24881:function(n,r,t){var u=t(13838),e=TypeError;n.exports=function(n,r){if(!delete n[r])throw e("Cannot delete property "+u(r)+" of "+u(n))}},68763:function(n,r,t){var u=t(51605),e=t(92612),i=t(6539),o=t(79328),f=t(23493),c=t(6648),a=t(57242),l=t(62998),s=t(52057),p=t(24881),h=t(45634)("splice"),v=Math.max,d=Math.min;u({target:"Array",proto:!0,forced:!h},{splice:function(n,r){var t,u,h,y,g,m,b=e(this),w=f(b),j=i(n,w),x=argu

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	326
Entropy (8bit):	6.860674885804344
Encrypted:	false
SSDEEP:	6:6v/lhPe/6TsR/rnMXvFGVAkFjqYCm8BQ5XIYDg/jruT0l8pgVy6EybrNcVp:6v/7m/6Ts/rnAF4nFWF5BQWdae82yXys
MD5:	AFE00DB89CE086B91A541C227EDBF136
SHA1:	961B2EE6FB39C4D515BDC49EC1BA688B0916F104
SHA-256:	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
SHA-512:	85F265A917E83BA92FEDB2152FBFADA273FCFF2937A85B080641307FD2E61D0138493162883E016796C9F68062A01D79DA60F546EFC2CB1FB4078760EB3451F0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx.....0...Uq...UP.\|..v.K.>.O`.$.[.B....'pvJ}..B..P.h...I.!.rs.%.$....O"r!.I.m....J..........U.. ..F[.....j4<...6.b6.T!x..Y..]..;._.,..........K.F..b.~.$..M.......M....,...i....*.z...x8."C.r.{.2~.~........x...B.G.6.....IEND.B`.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65446)
Category:	dropped
Size (bytes):	176239
Entropy (8bit):	5.400397462325491
Encrypted:	false
SSDEEP:	3072:OklIINk60Tedpnf1pVvbJbYIoL1piubEl0:Zt8KbfzVjBHoviYp
MD5:	7FE25BE33AC537B233B9E1D3B53C30D6
SHA1:	53332F07FE455F6D77104A2E153B1033C03C10C5
SHA-256:	048898107B20BFFE7B2690476083A57DA8F5B5A33DF95395FA478DD3E80E8622
SHA-512:	795CB3FA69580AC06C38B53A3391335F0CBC28FF418D92E82C1E0B5E64EBE49B843D37415BA375C8A823E8890E186E0CBA4DEB5A1A26D1A2327CCBCBCF5BEDD0
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.1358.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1358],{34861:function(e,t,r){"use strict";r.d(t,{$oX:function(){return h},EZk:function(){return p},EyF:function(){return v},Gpd:function(){return y},MRs:function(){return m},Md_:function(){return g},P6x:function(){return u},RJC:function(){return d},T1N:function(){return o},Tmo:function(){return b},W5p:function(){return a},Yro:function(){return i},Zkh:function(){return c},atX:function(){return l},ekt:function(){return f},f3R:function(){return x},ho7:function(){return s},iKt:function(){return n},j4I:function(){return C}});const n={avatarBgColor1:"#e2e0fc",avatarBgColor1Alt:"#eeddfc",avatarBgColor2:"#90f7c1",avatarBgColor2Alt:"#cdfce0",avatarBgColor3:"#fbdbdf",avatarBgColor3Alt:"#fcebed",avatarBgColor4:"#fee7a7",avatarBgColor4Alt:"#fef0cc",avatarBgColor5:"#e6e1de",avatarBgColor5Alt:"#f4f0ee",avatarBgColorDefault:"#dee3e9",avatarBgCo

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65433)
Category:	downloaded
Size (bytes):	195530
Entropy (8bit):	5.033222244320257
Encrypted:	false
SSDEEP:	3072:HtSZwL0t2BNwjZAokdwJsZC1sT574LXZlc5spd9Eo/pxVmgLSbRUXY74LgkiyUKh:HtSnt2DwjZAokdwsZC1sT5MLXZlc58xz
MD5:	FFF6E9B98FCD50A4DD16468FB561173E
SHA1:	B7F0170A96CE3ABB11ECD8254B531AE8218C4185
SHA-256:	6D2B4294095379BD608695BAA30D8F8AC51A5D3E9F0749A4D8296B4813C13EEF
SHA-512:	128FBD7B9BA7AFE3B0C0D4648860CE085851D51DB0FFD29DB0E5315755539AA5ECBFDA75F8511CADCA7BE4AF3B3C6F30AADA95C3B1843FABF8420C753887F43C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.5889.js?cs=fbd28c9a1af0f71fe17f
Preview:	/! For license information please see signing_iframeless_mobile.5889.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5889],{5889:function(e,t,n){n.d(t,{W:function(){return b}}),n(40590),n(27727),n(18665),n(10557),n(14913),n(31586),n(96982),n(69193),n(56639),n(83725),n(29838),n(58379),n(14602);var i=n(18719),a=n(59028),r=n(34248),o=(n(80115),n(15195),n(84095),n(75670),n(87136),n(6048),n(40173),n(64020));function s(e,t,n,i,a,r,o){try{var s=e[r](o),l=s.value}catch(e){return void n(e)}s.done?t(l):Promise.resolve(l).then(i,a)}function l(){l=function(){return t};var e,t={},n=Object.prototype,i=n.hasOwnProperty,a=Object.defineProperty\|\|function(e,t,n){e[t]=n.value},r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",s=r.asyncIterator\|\|"@@asyncIterator",c=r.toStringTag\|\|"@@toStringTag";function u(e,t,n){return Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{u({},"")}catch(e){u=function(e

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65433)
Category:	dropped
Size (bytes):	195530
Entropy (8bit):	5.033222244320257
Encrypted:	false
SSDEEP:	3072:HtSZwL0t2BNwjZAokdwJsZC1sT574LXZlc5spd9Eo/pxVmgLSbRUXY74LgkiyUKh:HtSnt2DwjZAokdwsZC1sT5MLXZlc58xz
MD5:	FFF6E9B98FCD50A4DD16468FB561173E
SHA1:	B7F0170A96CE3ABB11ECD8254B531AE8218C4185
SHA-256:	6D2B4294095379BD608695BAA30D8F8AC51A5D3E9F0749A4D8296B4813C13EEF
SHA-512:	128FBD7B9BA7AFE3B0C0D4648860CE085851D51DB0FFD29DB0E5315755539AA5ECBFDA75F8511CADCA7BE4AF3B3C6F30AADA95C3B1843FABF8420C753887F43C
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.5889.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5889],{5889:function(e,t,n){n.d(t,{W:function(){return b}}),n(40590),n(27727),n(18665),n(10557),n(14913),n(31586),n(96982),n(69193),n(56639),n(83725),n(29838),n(58379),n(14602);var i=n(18719),a=n(59028),r=n(34248),o=(n(80115),n(15195),n(84095),n(75670),n(87136),n(6048),n(40173),n(64020));function s(e,t,n,i,a,r,o){try{var s=e[r](o),l=s.value}catch(e){return void n(e)}s.done?t(l):Promise.resolve(l).then(i,a)}function l(){l=function(){return t};var e,t={},n=Object.prototype,i=n.hasOwnProperty,a=Object.defineProperty\|\|function(e,t,n){e[t]=n.value},r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",s=r.asyncIterator\|\|"@@asyncIterator",c=r.toStringTag\|\|"@@toStringTag";function u(e,t,n){return Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{u({},"")}catch(e){u=function(e

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7965)
Category:	downloaded
Size (bytes):	8136
Entropy (8bit):	5.127481723253427
Encrypted:	false
SSDEEP:	192:G465IUUMXnH4i3LI644EfwVFcCB30p7UUdEKyM9a+VtNZp6j96ysXs:G465IU/nHD3LI6hFcCBqbaWMz
MD5:	CF0A3FB647010CD001AF1B0430E25098
SHA1:	2DEA95C29D245223540CCBFE2F246F718DB7B283
SHA-256:	D7B8DDB44BFC73780B9AF7FBB6619AABEDC3C57062FF68E06A016DE042A7FF71
SHA-512:	44A4FC311EE835098B68CC2FA8CF5CA11620DBFAB17544B848769256C62FB803F4CB72A053C207394B5FF2D684A9ACA10CEE75B7F16EF237F7CD0D16FB43FF38
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.1946.js?cs=df9533cf509fcba22a5e
Preview:	/! For license information please see signing_iframeless_mobile.1946.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1946],{1946:function(e,t,a){a(83995),a(83725),a(52598);var i=a(4523),n=a(74692),o=a.n(n),d=a(85919),l=a(3147),r=a(89221),c=a(51552),s=a(19753),h=a(23664),u=a(19839),g=a(973),p=a(6232),v=0,f=d.A.extend({tagName:"div",className:"modal",events:{"click .close":"cancelOrClose"},dialogId:null,uri:null,useCache:!0,$lastActiveElement:o()([]),initialize(e){},mapUriData(e){return e},update(e,t){t=t\|\|{},e=e\|\|{};var a=this;function n(e){var t=!!e;if(s.default.envelope){var n=e.resources\|\|{},o=s.default.envelope.resources\|\|{};(e=i.default.extend({},s.default.envelope,e)).resources=i.default.extend({},o,n)}t?a.reload(a.mapUriData(e)):a.render(),a.$el.attr("modal-ready","")}"envelope"!==this.uri&&s.default[this.uri]?(n(s.default[this.uri]),t.afterUpdate&&t.afterUpdate()):this.uri&&!s.default[this.uri]?(t.showProgress&&c.A.trigger("

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20560)
Category:	downloaded
Size (bytes):	20731
Entropy (8bit):	5.488777566484376
Encrypted:	false
SSDEEP:	384:x4HPTUYYmiuqjGuJEUlQ6N+adWrarOkhXRJnPZvqocGrt7xQ3DewLhb44gDNn2Qw:63YmqKB6N+aorarO6fu3D04SYEjK
MD5:	D56F8C4A6B3DB2677E962A7B0F45634A
SHA1:	5AFF66065038A218B20AAA779AE7F9023C88287A
SHA-256:	1C0ECB84B8364F76298D5022BDD9A03CDE1E065964BDB5870FA6439572F550D9
SHA-512:	0DCF83E2602241685D5763AF0F2C9FEC8F8358B3084DD73322665515273435CA603E5017069DC51BC189FC0FBF4C1CE715438A617795278CD5CE4869888C3F80
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.3188.js?cs=b35d60540278334d0601
Preview:	/! For license information please see signing_iframeless_mobile.3188.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3188],{8306:function(t,e,n){"use strict";n.d(e,{$:function(){return A},AL:function(){return _},D$:function(){return l},G:function(){return C},IM:function(){return M},QB:function(){return f},S0:function(){return D},dS:function(){return L},iD:function(){return P},mj:function(){return k},nD:function(){return N}});var i=n(96319),r=n.n(i),s=n(11265),o=n.n(s),a=n(25514),h={first2:{firstN:2,lastN:0,cjk_validate:!1},last2:{firstN:0,lastN:2,cjk_validate:!1},first1last1:{firstN:1,lastN:1,cjk_validate:!1},last2_cjk:{firstN:0,lastN:2,cjk_validate:!0}},u={full:{numN:5,separator:" ",lastfirst:!1,cjk_validate:!1},first_middle_last:{numN:3,separator:" ",lastfirst:!1,cjk_validate:!1},lastfirst:{numN:1,separator:"",lastfirst:!0,cjk_validate:!1},last_first:{numN:2,separator:" ",lastfirst:!0,cjk_validate:!1},lastfirst_cjk:{numN:1,separator:"",lastfi

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9667)
Category:	downloaded
Size (bytes):	9838
Entropy (8bit):	5.281528459190238
Encrypted:	false
SSDEEP:	192:n4d5cCpzKI4Bk8LxtwOPjGgo0kPDo9BQOwPIxL:n4YCpp4BvWOPjGgo0DxL
MD5:	67EB698330BC24C39D51CE54687CBE19
SHA1:	864D423ED1CF0D6F3CF2DEF9D935DF7190094551
SHA-256:	F5C08FB0F269E1D448373EFDB4F80474ED401EEADF6794416B20C55EFCC5AB01
SHA-512:	0C0024BF83991959D76A640298FE01AF0F0366107FA4051A17EBC28156D03B356F01F76C4D944BFFF767B218769836F23EBE603FFBEA58B786C9AC4E8891A5B8
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.4942.js?cs=f52deaefefd4ca8ebdde
Preview:	/! For license information please see signing_iframeless_mobile.4942.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4942],{18049:function(e,t,i){i(40590),i(15195),i(18665),i(14913),i(87136),i(6048),i(14602);var s=i(21391),n=i.n(s),o=i(4523);function a(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var i=0,s=new Array(t);i<t;i++)s[i]=e[i];return s}function r(e,t,i){var s,a=(i=i\|\|{})._isSideEffect,r=null===(s=this.computed)\|\|void 0===s?void 0:s[e],d=r&&this.computed[e].set,u={};return r&&(u=o.default.extend({useTwoWayBinding:!0,useModel:this},this.computedDefaults)),a\|\|!r?n().Model.prototype.set.call(this,e,t,i):d?d.call(this,t,i):u.useTwoWayBinding&&g.call(this,e,t,i),this}function d(e,t){var i,s,n=(t=t\|\|{}).useModel\|\|this,o=t.useAttribute,r=t.useAttributes;return o?e=o:null!=r&&r.length&&(e=(i=r,s=1,function(e){if(Array.isArray(e))return e}(i)\|\|function(e,t){var i=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@ite

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3728
Entropy (8bit):	4.718277261919778
Encrypted:	false
SSDEEP:	96:JvfEcg0UqvMcOAvXa4zwjo0HtedznCOpKpFWgot:5Ecg04cXvXa4f0Y4p0
MD5:	EC396047518A7FEF11D53D1B4F6BE65B
SHA1:	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F
SHA-256:	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
SHA-512:	34AD62B5CC5EE5C950F340D65800102AE1CD06D34D24A611E7AC2CB9F23308AC96AC669D3B226C258DC6F862D985030EC3D5BB29609ECFEDF34E14F8F48529EB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1200 241.4" style="enable-background:new 0 0 1200 241.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#4C00FF;}...st1{fill:#FF5252;}.</style>.<g>..<g>...<g>....<path d="M1169.2,109.7v78.7h-28.9v-73.5c0-17.9-7.7-27.9-22.7-27.9s-24.9,10.5-27.7,28.1c-0.8,4.2-1,10.7-1,24.4v48.8H1060v-125.....h25.6c0.1,1.1,0.7,12.3,0.7,13c0,0.9,1.1,1.4,1.8,0.8c10.6-8.4,22.3-16.2,38.6-16.2C1153.5,60.9,1169.2,79,1169.2,109.7z"/>....<path d="M1013.4,63.4l-0.9,14.3c-0.1,0.9-1.2,1.4-1.8,0.8c-3.5-3.3-16.4-17.5-38.3-17.5c-31.4,0-54.5,27.1-54.5,63.9l0,0.....c0,37.3,22.9,64.5,54.5,64.5c21.1,0,34-13.7,36.4-16.7c0.7-0.8,2-0.3,2,0.7c-0.3,3.8-0.8,13.3-4,21.4c-4,10.2-13,19.7-31.1,19.7.....c-14.9,0-28.1-5.7-40.6-17.9L920,217.3c13.7,15.5,35

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631), with no line terminators
Category:	dropped
Size (bytes):	631
Entropy (8bit):	5.135187510335341
Encrypted:	false
SSDEEP:	12:2QSkMnt0YPhgmQNVGIkTLFMdOGn61CCq4jBAHOYZcQP3rSzD1Jxt15eUmA:2QSkammQVGr3F4hCZjiuOhPWNJr1hN
MD5:	BFECE3EF0556D468AC81BD677E076F50
SHA1:	0ED3399BDC58A902ACA78F06D7D4AD8A732F5EF9
SHA-256:	0DBA31A4A24E822A9500EDCBDD82FBB28D1F1B9535082DEEFE3ABD1EEE603E40
SHA-512:	B146619419BAC07F62DCC2508D7285B83348F45C9687E5BFE686DC26F5F0D9CA7338AE6ED0B1A760DBE915E3E375B397C0CA82F7ED87983BC26D59187DB3715A
Malicious:	false
Reputation:	low
Preview:	(function(){var u=this;!function(n,t,i,f,r,e,o){if("function"==typeof define&&define.amd)return define(o);f&&f[r]?f[r]=o(n,0,!0,f,r,e):u[n]=o(n,0,!0,f,r,e)}("DS_Arya",0,0,u.module,"exports","length",function(t,i,n,f,r,e,o){"use strict";var u={},c=(s(function(){}),s({})),a=s("");function d(n){throw t+"-"+n}function s(n){var t=typeof n;return function(n){return typeof n==t}}function h(n){for(var t in n)u[t]=n[t]}return{i:function(n){i++?d(1):n!==o&&c(n)&&!n[e]?h(n):d(11)},g:function(n,t){return n&&a(n)?t&&t(u[n])\|\|u[n]\|\|!1:t&&t(u)\|\|u\|\|!1}}})}).call(this);;DS_Arya.i({"DS_A":"f24f9305-dbfe-46b9-b5ab-fac99f0c2ef1","DS_A_C":""});

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9377)
Category:	downloaded
Size (bytes):	9548
Entropy (8bit):	5.249913681512712
Encrypted:	false
SSDEEP:	192:or4MFNKPW032uIHsuugf3eQMH7Koocspf3CX4l0cII6j73:or4MmPW032pMuh3YKooHf3C4lxIl3
MD5:	B37450C5A66EEE84E294D821A6A02A64
SHA1:	3BF70E88ADEE39121B6237EE5D3BE9021565BB71
SHA-256:	30092DA12ACD136AE59B9DAA166475DAEB91A6C1085CB2A78EB70793E9F5C5C1
SHA-512:	A9E9F7C98526C532A1728C2055A3F1F6D23E473E13DBD556B72B0FE423CD8782782A372C41D4E516C1609BB32DC91490F84E91A0A5CA286011F3531F03D4C007
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.9904.js?cs=af71957ed394aec4b4de
Preview:	/! For license information please see signing_iframeless_mobile.9904.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9904],{79904:function(t,e,i){i.d(e,{A:function(){return u}});var n=i(13861),a=i(8784),s=i(16297),r=function(t){this._make(t)};n.A.extend(r.prototype,{_make:function(t){this._data=n.A.cloneDeep(t)},id:function(){return this._data.documentId},name:function(){return this._data.name},number:function(){return this._data.order},numberOfPages:function(t,e){var i=this._data.pages;return arguments.length&&t!==i&&(this._data.pages=t,s.A.send("document:change:numberOfPages",n.A.extend({},{id:this.id(),numberOfPages:this.numberOfPages()},e))),this._data.pages},displayType:function(){return this._data.displayType\|\|""},includeInDownload:function(){return this._data.includeInDownload},thumbnailsCollapsed:function(t){"boolean"!=typeof this._data.thumbnailsCollapsed&&(this._data.thumbnailsCollapsed=!1);var e=this._data.thumbnailsColl

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30012)
Category:	downloaded
Size (bytes):	30211
Entropy (8bit):	5.3763749101014735
Encrypted:	false
SSDEEP:	768:hcUIZupaP+9Bfsc+CFsCjf8mBH8sspuM3Qyc:dxpaaXLBhmQl
MD5:	4011F6F95BA3B294E76FCFD7D3CF034D
SHA1:	C584E662B0C3C08BBEF2F92F19E13BF4770255F0
SHA-256:	822098BC9C4C8CC7DF2B904F07A3C806FA11EA13E3E7E8D881C6DDD7F89B25A9
SHA-512:	65F9DDB0CA9F3F4D39DA25586B7CCAED7AC7F784C279BAB7AA64B4B0C4A3843D00F505C46540E8CEA9DD29321FC6C6C1BE3D7740DAA54866C4147A74D2B12E9F
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.telemetry-recorder.js?cs=353169d821b1e48ec3eb
Preview:	/! For license information please see signing_iframeless_mobile.telemetry-recorder.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4043],{62247:function(e,t,r){r.r(t),r.d(t,{default:function(){return Z},registerTabLookup:function(){return Q}});var n={};r.r(n),r.d(n,{cleanUpTelemetryArr:function(){return A},getShouldUseSendBeaconForSave:function(){return k},isTelemetryFeatureEnabled:function(){return T},promiseToSwallowErrors:function(){return j},save:function(){return N},swallowErrors:function(){return x},telemetryRecorder:function(){return E}});var o=r(72398),i=(r(40590),r(27727),r(80115),r(17),r(15195),r(18665),r(59581),r(10557),r(14913),r(31586),r(96982),r(3101),r(69193),r(87136),r(6048),r(54989),r(44154),r(56639),r(2100),r(83725),r(35019),r(29838),r(51339),r(58379),r(14602),r(74692)),a=r.n(i),c=r(83973),u=r(23487),l=r(3574),f=r(28936),s=r(40010),p=r(46887);function d(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){va

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	83506
Entropy (8bit):	5.186546714348487
Encrypted:	false
SSDEEP:	768:KL9mqxqpKZiL9mqxq8m0L9mqxqpyT/9mYxyzbZ8yXCy6MmYxamL9mqxqAcyxCjBK:GJA5mELTc7X+FScdMTpz
MD5:	88383B0CB4DE7EBA40D7BEE66CDD359B
SHA1:	38363E3E87B46FF324A6DAA844D978F78699DEBC
SHA-256:	7C9371A4BA66B61F81937D1106113C6C7626A07638E53F305C95E772802C650B
SHA-512:	741837091ABBF9452775C4083B4A018C4E38997CDF9FA1752D226CD7EDB817D1A89C17E23B447DAD67C24BEEE06AADAF89638CF768B1087D13509E7AA9C4467E
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.9764.js?cs=e3f7b5c2a1210511c587
Preview:	/! For license information please see signing_iframeless_mobile.9764.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9764],{95390:function(t,e,r){r.d(e,{_d:function(){return n},NA:function(){return h},aJ:function(){return m},bI:function(){return p},_q:function(){return f}});var n="https://a.docusign.com/f",o=(r(40590),r(27727),r(17),r(18665),r(10557),r(14913),r(31586),r(96982),r(3101),r(69193),r(44154),r(56639),r(83725),r(35019),r(29838),r(58379),r(14602),r(79248)),i=r(40010);function a(){a=function(){return e};var t,e={},r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},i="function"==typeof Symbol?Symbol:{},c=i.iterator\|\|"@@iterator",u=i.asyncIterator\|\|"@@asyncIterator",l=i.toStringTag\|\|"@@toStringTag";function s(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{s({},"")}catch(t){s=function(t,e,r){return t[e]=r}}function f(t,e,r,n){var i

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52240)
Category:	downloaded
Size (bytes):	52411
Entropy (8bit):	5.407768673993161
Encrypted:	false
SSDEEP:	768:Tu9vcYxXddfGAkkIFHYCrvD0C+hcV4cbL6Log6Dazba:Tux9OhkjWvD8nW0ba
MD5:	A407C368011283A2E90E39C31D7C074F
SHA1:	967E873665404DE2F39D4C27D3218A4FADF06717
SHA-256:	DCB0D3378502347EA16252B8D9C59F8258C29F1D746AFCD46A1498416950846E
SHA-512:	AA4B48F7847FAB7FA2905609C5BAC1EC24466712143CD2DA6022179412640DDE12D6049BC6130CF541AE0E3862444EA2C624C08594C266083C40BC367885E644
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.3053.js?cs=1a44874e82a0115e60aa
Preview:	/! For license information please see signing_iframeless_mobile.3053.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3053],{12685:function(e,t,n){"use strict";var r=n(97032),o=n(96540);t.A=({accessibilityText:e,forwardedRef:t,...n})=>o.createElement("svg",(0,r.A)({xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24",width:24,height:24,"aria-hidden":!e\|\|void 0,"aria-label":e,focusable:!1,ref:t,role:e?"img":void 0},n),o.createElement("path",{d:"M20 5.36 18.64 4 12 10.65 5.36 4 4 5.36 10.65 12 4 18.66 5.34 20 12 13.35 18.66 20 20 18.66 13.35 12 20 5.36z"}))},49780:function(e,t,n){"use strict";var r=n(97032),o=n(96540);t.A=({accessibilityText:e,forwardedRef:t,...n})=>o.createElement("svg",(0,r.A)({xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 20 20",width:20,height:20,"aria-hidden":!e\|\|void 0,"aria-label":e,focusable:!1,ref:t,role:e?"img":void 0},n),o.createElement("path",{d:"M17 4.34 15.66 3 10 8.66 4.34 3 3 4.34 8.66 10 3 15.66 4.34 17 10 11.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16718)
Category:	dropped
Size (bytes):	16889
Entropy (8bit):	5.305771559126156
Encrypted:	false
SSDEEP:	384:z405ybTgZTyTyEmsUJURmJqfKny/Ay82JrHGw3+euhJ21Z7gnf87CQNmc/3S:n5uTgZTy+ERUmAMfPHfHjg2r7gSV3S
MD5:	7E0A5ABCB31199770B38DD9A0F557491
SHA1:	D4719F356E6800A6F664BCE7B3DDF7715607E5A3
SHA-256:	0EE7DF63AA74F1623D01D69A016D845FD9024854A2F034D229ADE68D801DE4AA
SHA-512:	FD96C650BE8A5714BA3A92BD6EBA045B5CBDD9666163BE3701B9357F2046F9966C9FFFEACE28F69713695B2351ADA9268511286680D2CC722A78D5DCAD260E7C
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.6463.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6463],{96463:function(e,t,s){s(19693),s(68763),s(79073),s(87136),s(6048),s(40173),s(68329);var n=s(74692),i=s.n(n),r=s(89221),o=s(75550);t.A=function(e,t,s){var n,a,l,u=e.ss\|\|{},p=/^\s+/,h=/\s+$/,c=/[xy]/g,d=/.(\/\|\\)/,f=/.[.]/,_=/[\t\r\n]/g,g=Object.prototype.toString.call(e.HTMLElement).indexOf("Constructor")>0,m=t.createElement("input");return m.type="file",n="multiple"in m&&"undefined"!=typeof File&&void 0!==(new XMLHttpRequest).upload,u.obj2string=function(e,t){var s=[];for(var n in e)if(Object.prototype.hasOwnProperty.call(e,n)){var i=t?t+"["+n+"]":n,r=e[n];s.push("object"==typeof r?u.obj2string(r,i):encodeURIComponent(i)+"="+encodeURIComponent(r))}return s.join("&")},u.extendObj=function(e,t){for(var s in t)Object.prototype.hasOwnProperty.call(t,s)&&(e[s]=t[s])},u.contains=function(e,t){for(var s=e.length;s-

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	91926
Entropy (8bit):	5.156184880438797
Encrypted:	false
SSDEEP:	768:u0V8L+oxVm7+82ZbKoYCPOGUkqxhIii7Jwldw8KeTdV8L+dXhx7+8UN9RZrE6dK:3V8IcZbDPeFRV88Oq
MD5:	1C065938739CF31D81692C38819E045C
SHA1:	9038D98DEA16113148D68413B8F54E1B3AC4C755
SHA-256:	17AFE3069E479E437A4864A4684A5BCBD0A3C2DD328274BED28EFC91A5CC9C0F
SHA-512:	5F349B4CBB886D34F008EAF121C60B9B2A2373A7F7063D6C2A46FE8D243C0E9A2D70032B3417DF03A385EAFA20F2578E47CF0A232BAC31F4B2C473DD24CD01AA
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.8919.js?cs=cfaefc47adbafc9ceefa
Preview:	/! For license information please see signing_iframeless_mobile.8919.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8919],{83201:function(e,t,n){function r(){r=function(){return t};var e,t={},n=Object.prototype,o=n.hasOwnProperty,i=Object.defineProperty\|\|function(e,t,n){e[t]=n.value},a="function"==typeof Symbol?Symbol:{},s=a.iterator\|\|"@@iterator",u=a.asyncIterator\|\|"@@asyncIterator",c=a.toStringTag\|\|"@@toStringTag";function p(e,t,n){return Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{p({},"")}catch(e){p=function(e,t,n){return e[t]=n}}function d(e,t,n,r){var o=t&&t.prototype instanceof h?t:h,a=Object.create(o.prototype),s=new I(r\|\|[]);return i(a,"_invoke",{value:E(e,n,s)}),a}function g(e,t,n){try{return{type:"normal",arg:e.call(t,n)}}catch(e){return{type:"throw",arg:e}}}t.wrap=d;var m="suspendedStart",f="suspendedYield",l="executing",w="completed",v={};function h(){}function b(){}function

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	6.860674885804344
Encrypted:	false
SSDEEP:	6:6v/lhPe/6TsR/rnMXvFGVAkFjqYCm8BQ5XIYDg/jruT0l8pgVy6EybrNcVp:6v/7m/6Ts/rnAF4nFWF5BQWdae82yXys
MD5:	AFE00DB89CE086B91A541C227EDBF136
SHA1:	961B2EE6FB39C4D515BDC49EC1BA688B0916F104
SHA-256:	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
SHA-512:	85F265A917E83BA92FEDB2152FBFADA273FCFF2937A85B080641307FD2E61D0138493162883E016796C9F68062A01D79DA60F546EFC2CB1FB4078760EB3451F0
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.63.0/global-assets/ds-icons-favicon-default-16x16.png
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx.....0...Uq...UP.\|..v.K.>.O`.$.[.B....'pvJ}..B..P.h...I.!.rs.%.$....O"r!.I.m....J..........U.. ..F[.....j4<...6.b6.T!x..Y..]..;._.,..........K.F..b.~.$..M.......M....,...i....*.z...x8."C.r.{.2~.~........x...B.G.6.....IEND.B`.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9667)
Category:	dropped
Size (bytes):	9838
Entropy (8bit):	5.281528459190238
Encrypted:	false
SSDEEP:	192:n4d5cCpzKI4Bk8LxtwOPjGgo0kPDo9BQOwPIxL:n4YCpp4BvWOPjGgo0DxL
MD5:	67EB698330BC24C39D51CE54687CBE19
SHA1:	864D423ED1CF0D6F3CF2DEF9D935DF7190094551
SHA-256:	F5C08FB0F269E1D448373EFDB4F80474ED401EEADF6794416B20C55EFCC5AB01
SHA-512:	0C0024BF83991959D76A640298FE01AF0F0366107FA4051A17EBC28156D03B356F01F76C4D944BFFF767B218769836F23EBE603FFBEA58B786C9AC4E8891A5B8
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.4942.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4942],{18049:function(e,t,i){i(40590),i(15195),i(18665),i(14913),i(87136),i(6048),i(14602);var s=i(21391),n=i.n(s),o=i(4523);function a(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var i=0,s=new Array(t);i<t;i++)s[i]=e[i];return s}function r(e,t,i){var s,a=(i=i\|\|{})._isSideEffect,r=null===(s=this.computed)\|\|void 0===s?void 0:s[e],d=r&&this.computed[e].set,u={};return r&&(u=o.default.extend({useTwoWayBinding:!0,useModel:this},this.computedDefaults)),a\|\|!r?n().Model.prototype.set.call(this,e,t,i):d?d.call(this,t,i):u.useTwoWayBinding&&g.call(this,e,t,i),this}function d(e,t){var i,s,n=(t=t\|\|{}).useModel\|\|this,o=t.useAttribute,r=t.useAttributes;return o?e=o:null!=r&&r.length&&(e=(i=r,s=1,function(e){if(Array.isArray(e))return e}(i)\|\|function(e,t){var i=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@ite

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	118369
Entropy (8bit):	5.387403752626347
Encrypted:	false
SSDEEP:	3072:uChP98OYrRKfys+71PeVxlDDnO6Zh1xG6dVbMcyH:TotXPeVx1XxG6dVble
MD5:	48EB4E014D9BA07A1FDE36774CEFE18C
SHA1:	AEB98C46BB9E7632D8F4035F66044AD5428534B4
SHA-256:	3441A0C0375E37A41F5879FD999A5BCF7EE319E3E798081EC53FD3365DBE0D63
SHA-512:	5D658063B38327599890D0C4448FEE1C0D643B557D09CEBA2A0FBB338DC8315BB68EA415518468283E81F5D0DB135CEB7324BD77B3D169C1544A9B59B328CE0F
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.8925.js?cs=b792426be134e7a29212
Preview:	/! For license information please see signing_iframeless_mobile.8925.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8925],{40139:function(e,t,n){var r=n(93633);e.exports=(r.default\|\|r).template({1:function(e,t,n,r,o){var i=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" "+e.escapeExpression((i(n,"getResource")\|\|t&&i(t,"getResource")\|\|e.hooks.helperMissing).call(null!=t?t:e.nullContext\|\|{},"DocuSign_NotarizeError",{name:"getResource",hash:{},data:o,loc:{start:{line:1,column:57},end:{line:1,column:97}}}))+" "},3:function(e,t,n,r,o){var i=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" "+e.escapeExpression((i(n,"getResource")\|\|t&&i(t,"getResource")\|\|e.hooks.helperMissing).call(null!=t?t:e.nullContext\|\|{},"DocuSign_NotarizeWarning",{name:"getResource",hash:{},data:o,loc:{start:{line:1,column:107},end:{line:1,column:149}}}))+" "},5:function(e,t,n,r,o

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32844)
Category:	downloaded
Size (bytes):	33015
Entropy (8bit):	5.379440412002838
Encrypted:	false
SSDEEP:	384:641Cso/Im0OlknR1UF6jdcln2PMvDoxzGJbXRm0PSa8H5hy1tj30vOwAmQQx4uMd:tFK0M82KZhy1tjmNAmQY4jd
MD5:	072146BBA6E4EB09461CFC1365FF1C6E
SHA1:	90765FB7072CDF6F9C945D723DFA3C4499AA0B88
SHA-256:	8BA950B78817B87D98FB3784B08434D1EC450F8D88EED1B5C5BBE2349B89614E
SHA-512:	84E7F2A831C231B1D9C23207F52346E16DBBE72D81B1D43788E4069E776B6A1E5AF5DCEC04344B94CF1D7112B3B0F3D9CE28446603B0F676D7147FC09DDB53E0
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing_iframeless_mobile.9350.js?cs=9fdffe9040abc60779d4
Preview:	/! For license information please see signing_iframeless_mobile.9350.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9350],{32627:function(e,t,n){"use strict";n.d(t,{k:function(){return i}});var o=n(96540),i=function(e){var t=(0,o.useRef)();return void 0===t.current&&(t.current={value:e()}),t.current.value}},44164:function(e,t,n){"use strict";n.d(t,{B:function(){return r}});var o=n(38008),i=n(96540);function r(e,t){var n=(0,i.useState)(!1),r=(0,o.A)(n,2),a=r[0],s=r[1];return(0,i.useEffect)((function(){var n=new IntersectionObserver((function(e){(0,o.A)(e,1)[0].intersectionRatio<1?s(!0):s(!1)}),{root:t,threshold:1});return e&&n.observe(e),function(){n.disconnect()}}),[t,e]),a}n(95127)},45268:function(e,t,n){"use strict";n.d(t,{p:function(){return i}});var o=n(96540);function i(){var e=(0,o.useRef)(!1),t={get mounted(){return!!e.current}};return(0,o.useLayoutEffect)((function(){return e.current=!0,function(){e.current=!1}}),[]),t}},9729:function(

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30012)
Category:	dropped
Size (bytes):	30211
Entropy (8bit):	5.3763749101014735
Encrypted:	false
SSDEEP:	768:hcUIZupaP+9Bfsc+CFsCjf8mBH8sspuM3Qyc:dxpaaXLBhmQl
MD5:	4011F6F95BA3B294E76FCFD7D3CF034D
SHA1:	C584E662B0C3C08BBEF2F92F19E13BF4770255F0
SHA-256:	822098BC9C4C8CC7DF2B904F07A3C806FA11EA13E3E7E8D881C6DDD7F89B25A9
SHA-512:	65F9DDB0CA9F3F4D39DA25586B7CCAED7AC7F784C279BAB7AA64B4B0C4A3843D00F505C46540E8CEA9DD29321FC6C6C1BE3D7740DAA54866C4147A74D2B12E9F
Malicious:	false
Reputation:	low
Preview:	/! For license information please see signing_iframeless_mobile.telemetry-recorder.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4043],{62247:function(e,t,r){r.r(t),r.d(t,{default:function(){return Z},registerTabLookup:function(){return Q}});var n={};r.r(n),r.d(n,{cleanUpTelemetryArr:function(){return A},getShouldUseSendBeaconForSave:function(){return k},isTelemetryFeatureEnabled:function(){return T},promiseToSwallowErrors:function(){return j},save:function(){return N},swallowErrors:function(){return x},telemetryRecorder:function(){return E}});var o=r(72398),i=(r(40590),r(27727),r(80115),r(17),r(15195),r(18665),r(59581),r(10557),r(14913),r(31586),r(96982),r(3101),r(69193),r(87136),r(6048),r(54989),r(44154),r(56639),r(2100),r(83725),r(35019),r(29838),r(51339),r(58379),r(14602),r(74692)),a=r.n(i),c=r(83973),u=r(23487),l=r(3574),f=r(28936),s=r(40010),p=r(46887);function d(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){va

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3728
Entropy (8bit):	4.718277261919778
Encrypted:	false
SSDEEP:	96:JvfEcg0UqvMcOAvXa4zwjo0HtedznCOpKpFWgot:5Ecg04cXvXa4f0Y4p0
MD5:	EC396047518A7FEF11D53D1B4F6BE65B
SHA1:	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F
SHA-256:	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
SHA-512:	34AD62B5CC5EE5C950F340D65800102AE1CD06D34D24A611E7AC2CB9F23308AC96AC669D3B226C258DC6F862D985030EC3D5BB29609ECFEDF34E14F8F48529EB
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.63.0/global-assets/ds-logo-default.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1200 241.4" style="enable-background:new 0 0 1200 241.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#4C00FF;}...st1{fill:#FF5252;}.</style>.<g>..<g>...<g>....<path d="M1169.2,109.7v78.7h-28.9v-73.5c0-17.9-7.7-27.9-22.7-27.9s-24.9,10.5-27.7,28.1c-0.8,4.2-1,10.7-1,24.4v48.8H1060v-125.....h25.6c0.1,1.1,0.7,12.3,0.7,13c0,0.9,1.1,1.4,1.8,0.8c10.6-8.4,22.3-16.2,38.6-16.2C1153.5,60.9,1169.2,79,1169.2,109.7z"/>....<path d="M1013.4,63.4l-0.9,14.3c-0.1,0.9-1.2,1.4-1.8,0.8c-3.5-3.3-16.4-17.5-38.3-17.5c-31.4,0-54.5,27.1-54.5,63.9l0,0.....c0,37.3,22.9,64.5,54.5,64.5c21.1,0,34-13.7,36.4-16.7c0.7-0.8,2-0.3,2,0.7c-0.3,3.8-0.8,13.3-4,21.4c-4,10.2-13,19.7-31.1,19.7.....c-14.9,0-28.1-5.7-40.6-17.9L920,217.3c13.7,15.5,35

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-31T16:30:57.931516+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.4	49784	TCP
2024-10-31T16:31:37.056566+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.4	61517	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 16:30:41.882844925 CET	49675	443	192.168.2.4	173.222.162.32
Oct 31, 2024 16:30:47.145891905 CET	49741	443	192.168.2.4	142.250.185.100
Oct 31, 2024 16:30:47.145939112 CET	443	49741	142.250.185.100	192.168.2.4
Oct 31, 2024 16:30:47.146053076 CET	49741	443	192.168.2.4	142.250.185.100
Oct 31, 2024 16:30:47.146483898 CET	49741	443	192.168.2.4	142.250.185.100
Oct 31, 2024 16:30:47.146502972 CET	443	49741	142.250.185.100	192.168.2.4
Oct 31, 2024 16:30:47.653131008 CET	49742	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:47.653232098 CET	443	49742	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:47.653323889 CET	49742	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:47.654908895 CET	49742	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:47.654941082 CET	443	49742	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:47.991328955 CET	443	49741	142.250.185.100	192.168.2.4
Oct 31, 2024 16:30:47.991831064 CET	49741	443	192.168.2.4	142.250.185.100
Oct 31, 2024 16:30:47.991852045 CET	443	49741	142.250.185.100	192.168.2.4
Oct 31, 2024 16:30:47.992733955 CET	443	49741	142.250.185.100	192.168.2.4
Oct 31, 2024 16:30:47.992932081 CET	49741	443	192.168.2.4	142.250.185.100
Oct 31, 2024 16:30:48.001679897 CET	49741	443	192.168.2.4	142.250.185.100
Oct 31, 2024 16:30:48.001760960 CET	443	49741	142.250.185.100	192.168.2.4
Oct 31, 2024 16:30:48.045634985 CET	49741	443	192.168.2.4	142.250.185.100
Oct 31, 2024 16:30:48.045655966 CET	443	49741	142.250.185.100	192.168.2.4
Oct 31, 2024 16:30:48.088500977 CET	49741	443	192.168.2.4	142.250.185.100
Oct 31, 2024 16:30:48.116578102 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:48.116621971 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:48.116694927 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:48.117597103 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:48.117609978 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:48.511327028 CET	443	49742	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:48.511425018 CET	49742	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:48.872853041 CET	49742	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:48.872893095 CET	443	49742	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:48.873223066 CET	443	49742	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:48.915335894 CET	49742	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:49.086426973 CET	49742	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:49.131341934 CET	443	49742	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:49.136424065 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:49.151798964 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.151825905 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:49.153019905 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:49.153084993 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.153098106 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:49.153156996 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.166801929 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.166964054 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:49.169610977 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.169625998 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:49.211159945 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.347925901 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:49.348005056 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:49.348061085 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.348923922 CET	49748	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.348942995 CET	443	49748	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:49.371721029 CET	443	49742	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:49.371782064 CET	443	49742	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:49.371926069 CET	49742	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:49.372159958 CET	49742	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:49.372211933 CET	443	49742	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:49.372241020 CET	49742	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:49.372258902 CET	443	49742	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:49.406681061 CET	49749	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:49.406744957 CET	443	49749	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:49.406827927 CET	49749	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:49.407085896 CET	49749	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:49.407114029 CET	443	49749	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:49.648089886 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.648113966 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:49.648166895 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.648670912 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:49.648684978 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:50.050857067 CET	49754	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.050877094 CET	443	49754	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.051110029 CET	49755	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.051134109 CET	443	49755	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.051140070 CET	49754	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.051278114 CET	49755	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.051510096 CET	49754	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.051523924 CET	443	49754	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.051990986 CET	49755	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.052007914 CET	443	49755	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.254091978 CET	443	49749	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:50.254208088 CET	49749	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:50.256437063 CET	49749	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:50.256453037 CET	443	49749	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:50.256669998 CET	443	49749	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:50.259352922 CET	49749	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:50.307327032 CET	443	49749	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:50.357918978 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:50.358366966 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:50.358391047 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:50.359318972 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:50.359390974 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:50.359396935 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:50.359437943 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:50.360137939 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:50.360449076 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:50.360881090 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:50.401312113 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:50.401323080 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:50.445202112 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:50.502445936 CET	443	49749	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:50.502511024 CET	443	49749	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:50.502589941 CET	49749	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:50.504129887 CET	49749	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:50.504129887 CET	49749	443	192.168.2.4	184.28.90.27
Oct 31, 2024 16:30:50.504165888 CET	443	49749	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:50.504188061 CET	443	49749	184.28.90.27	192.168.2.4
Oct 31, 2024 16:30:50.551045895 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:50.552123070 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:50.552200079 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:50.553374052 CET	49752	443	192.168.2.4	52.33.228.130
Oct 31, 2024 16:30:50.553391933 CET	443	49752	52.33.228.130	192.168.2.4
Oct 31, 2024 16:30:50.683990002 CET	443	49754	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.684439898 CET	49754	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.684464931 CET	443	49754	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.685507059 CET	443	49754	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.685565948 CET	49754	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.687386990 CET	49754	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.687462091 CET	443	49754	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.687618017 CET	443	49755	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.687814951 CET	49754	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.687824011 CET	443	49754	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.688034058 CET	49755	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.688095093 CET	443	49755	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.689008951 CET	443	49755	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.689089060 CET	49755	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.690143108 CET	49755	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.690207005 CET	443	49755	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.690519094 CET	49755	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.690540075 CET	443	49755	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.728972912 CET	49754	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.733081102 CET	49755	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.840718985 CET	443	49755	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.841042042 CET	443	49754	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.842530012 CET	443	49755	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.842585087 CET	49755	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.842730999 CET	49755	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.842749119 CET	443	49755	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.843298912 CET	443	49754	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:50.843343019 CET	49754	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.843456030 CET	49754	443	192.168.2.4	35.190.25.25
Oct 31, 2024 16:30:50.843478918 CET	443	49754	35.190.25.25	192.168.2.4
Oct 31, 2024 16:30:51.509002924 CET	49763	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:51.509103060 CET	443	49763	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:51.509183884 CET	49763	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:51.509217024 CET	49764	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:51.509260893 CET	443	49764	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:51.509325981 CET	49764	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:51.509442091 CET	49763	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:51.509480000 CET	443	49763	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:51.509581089 CET	49764	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:51.509594917 CET	443	49764	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.124705076 CET	443	49763	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.124950886 CET	49763	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.124979019 CET	443	49763	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.126332045 CET	443	49764	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.126524925 CET	49764	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.126538992 CET	443	49763	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.126543999 CET	443	49764	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.126612902 CET	49763	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.127048016 CET	49763	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.127140045 CET	443	49763	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.127222061 CET	49763	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.127230883 CET	443	49763	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.128005981 CET	443	49764	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.128068924 CET	49764	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.128453016 CET	49764	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.128523111 CET	443	49764	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.128603935 CET	49764	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.128612995 CET	443	49764	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.170372963 CET	49764	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.178944111 CET	49763	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.290184021 CET	443	49763	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.291363955 CET	443	49763	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.291440010 CET	49763	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.291721106 CET	49763	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.291763067 CET	443	49763	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.292768002 CET	443	49764	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.294328928 CET	443	49764	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:52.294646025 CET	49764	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.294773102 CET	49764	443	192.168.2.4	107.178.240.159
Oct 31, 2024 16:30:52.294786930 CET	443	49764	107.178.240.159	192.168.2.4
Oct 31, 2024 16:30:55.014323950 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:55.014353991 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:55.014647007 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:55.016788960 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:55.016807079 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:55.774007082 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:55.774075985 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:55.777864933 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:55.777874947 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:55.778129101 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:55.821285009 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:56.702594995 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:56.743366957 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:57.930702925 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:57.930758953 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:57.930778980 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:57.930811882 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:57.930833101 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:57.930849075 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:57.930855036 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:57.930938005 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:57.930952072 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:57.931082964 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:57.931155920 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:57.931168079 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:57.931278944 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:57.931330919 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:57.996018887 CET	443	49741	142.250.185.100	192.168.2.4
Oct 31, 2024 16:30:57.996089935 CET	443	49741	142.250.185.100	192.168.2.4
Oct 31, 2024 16:30:57.996134043 CET	49741	443	192.168.2.4	142.250.185.100
Oct 31, 2024 16:30:58.002680063 CET	49741	443	192.168.2.4	142.250.185.100
Oct 31, 2024 16:30:58.002690077 CET	443	49741	142.250.185.100	192.168.2.4
Oct 31, 2024 16:30:58.832480907 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:58.832519054 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:30:58.832537889 CET	49784	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:30:58.832544088 CET	443	49784	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:00.707174063 CET	49723	80	192.168.2.4	88.221.110.91
Oct 31, 2024 16:31:00.713061094 CET	80	49723	88.221.110.91	192.168.2.4
Oct 31, 2024 16:31:00.713109016 CET	49723	80	192.168.2.4	88.221.110.91
Oct 31, 2024 16:31:24.890865088 CET	61515	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:31:24.896033049 CET	53	61515	1.1.1.1	192.168.2.4
Oct 31, 2024 16:31:24.896114111 CET	61515	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:31:24.896182060 CET	61515	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:31:24.901082039 CET	53	61515	1.1.1.1	192.168.2.4
Oct 31, 2024 16:31:25.485560894 CET	53	61515	1.1.1.1	192.168.2.4
Oct 31, 2024 16:31:25.486246109 CET	61515	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:31:25.491519928 CET	53	61515	1.1.1.1	192.168.2.4
Oct 31, 2024 16:31:25.492711067 CET	61515	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:31:35.287709951 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:35.287755966 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:35.287827969 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:35.288801908 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:35.288815022 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:36.763063908 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:36.763180017 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:36.784919977 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:36.784940958 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:36.785296917 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:36.800910950 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:36.847326994 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:37.049815893 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:37.049860001 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:37.049880028 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:37.049936056 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:37.050020933 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:37.050062895 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:37.050108910 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:37.056282043 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:37.056323051 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:37.056377888 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:37.056401014 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:37.056433916 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:37.056457043 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:37.056484938 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:37.071911097 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:37.071966887 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:37.072021961 CET	61517	443	192.168.2.4	172.202.163.200
Oct 31, 2024 16:31:37.072037935 CET	443	61517	172.202.163.200	192.168.2.4
Oct 31, 2024 16:31:38.123389959 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:38.123437881 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:38.123497963 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:38.123841047 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:38.123853922 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:38.858649015 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:38.858719110 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:38.861665964 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:38.861675024 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:38.861913919 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:38.880928993 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:38.927334070 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.136585951 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.136609077 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.136642933 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.136692047 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.136706114 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.136750937 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.148154974 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.148171902 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.148263931 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.148272038 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.148313046 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.254097939 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.254116058 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.254188061 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.254194975 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.254239082 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.264997005 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.265014887 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.265081882 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.265088081 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.265125036 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.308228016 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.308249950 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.308296919 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.308303118 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.308350086 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.381134033 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.381165981 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.381206989 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.381220102 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.381253004 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.381263971 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.382494926 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.382514954 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.382564068 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.382569075 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.382601976 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.382617950 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.487277985 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.487301111 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.487349987 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.487359047 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.487401962 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.498542070 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.498559952 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.498624086 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.498630047 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.498671055 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.500098944 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.500116110 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.500170946 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.500183105 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.500226974 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.604599953 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.604620934 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.604692936 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.604707003 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.604756117 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.615807056 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.615823030 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.615884066 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.615890026 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.615937948 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.617225885 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.617242098 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.617336035 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.617341995 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.617410898 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.659470081 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.659539938 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.659547091 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.659610033 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.659811974 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.659822941 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.659833908 CET	61518	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.659838915 CET	443	61518	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.717078924 CET	61519	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.717113018 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.717221022 CET	61519	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.717978001 CET	61519	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.717991114 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.719785929 CET	61520	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.719849110 CET	443	61520	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.719929934 CET	61520	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.720143080 CET	61520	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.720187902 CET	443	61520	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.721174955 CET	61521	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.721225023 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.721271992 CET	61521	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.721997976 CET	61522	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.722023964 CET	443	61522	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.722136974 CET	61522	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.722457886 CET	61521	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.722471952 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.722697020 CET	61522	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.722723961 CET	443	61522	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.724770069 CET	61523	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.724780083 CET	443	61523	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:39.725104094 CET	61523	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.725244045 CET	61523	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:39.725256920 CET	443	61523	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.458205938 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.458717108 CET	61521	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.458745956 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.459177017 CET	443	61522	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.459201097 CET	61521	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.459206104 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.459542990 CET	61522	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.459595919 CET	443	61522	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.460161924 CET	61522	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.460175991 CET	443	61522	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.503051043 CET	443	61523	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.503148079 CET	443	61520	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.503560066 CET	61523	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.503583908 CET	443	61523	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.503869057 CET	61520	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.503882885 CET	443	61520	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.504045963 CET	61523	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.504050016 CET	443	61523	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.504432917 CET	61520	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.504439116 CET	443	61520	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.588615894 CET	443	61522	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.588638067 CET	443	61522	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.588706017 CET	61522	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.588707924 CET	443	61522	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.588814974 CET	61522	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.589057922 CET	61522	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.589072943 CET	443	61522	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.589083910 CET	61522	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.589090109 CET	443	61522	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.589597940 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.589627981 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.589692116 CET	61521	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.589711905 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.589787960 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.589833975 CET	61521	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.590998888 CET	61521	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.591011047 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.591021061 CET	61521	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.591027021 CET	443	61521	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.593130112 CET	61524	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.593173027 CET	443	61524	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.593324900 CET	61524	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.593763113 CET	61524	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.593776941 CET	443	61524	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.595129967 CET	61525	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.595156908 CET	443	61525	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.595232964 CET	61525	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.595370054 CET	61525	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.595381021 CET	443	61525	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.634396076 CET	443	61523	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.634483099 CET	443	61523	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.634624958 CET	61523	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.634871960 CET	443	61520	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.634876966 CET	61523	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.634886980 CET	443	61523	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.635200977 CET	443	61520	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.635246992 CET	61520	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.635803938 CET	61520	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.635811090 CET	443	61520	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.635834932 CET	61520	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.635839939 CET	443	61520	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.638672113 CET	61526	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.638695955 CET	443	61526	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.638854980 CET	61526	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.638921022 CET	61527	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.638931990 CET	443	61527	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.639029026 CET	61527	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.639210939 CET	61526	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.639223099 CET	443	61526	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:40.639316082 CET	61527	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:40.639322996 CET	443	61527	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.326201916 CET	443	61524	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.326657057 CET	61524	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.326682091 CET	443	61524	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.327116013 CET	61524	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.327121019 CET	443	61524	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.341305017 CET	443	61525	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.341690063 CET	61525	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.341718912 CET	443	61525	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.342084885 CET	61525	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.342089891 CET	443	61525	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.385117054 CET	443	61527	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.385490894 CET	61527	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.385500908 CET	443	61527	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.385946035 CET	61527	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.385951042 CET	443	61527	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.455775976 CET	443	61524	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.455842018 CET	443	61524	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.455892086 CET	61524	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.455993891 CET	61524	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.456011057 CET	443	61524	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.456022978 CET	61524	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.456029892 CET	443	61524	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.458581924 CET	61528	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.458622932 CET	443	61528	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.458678007 CET	61528	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.458897114 CET	61528	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.458910942 CET	443	61528	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.515433073 CET	443	61527	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.515809059 CET	443	61527	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.515868902 CET	61527	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.515902042 CET	61527	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.515919924 CET	443	61527	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.515932083 CET	61527	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.515937090 CET	443	61527	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.518485069 CET	61529	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.518517017 CET	443	61529	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.518678904 CET	61529	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.518779993 CET	61529	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.518793106 CET	443	61529	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.724097013 CET	443	61525	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.724168062 CET	443	61525	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.724230051 CET	61525	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.724347115 CET	61525	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.724364996 CET	443	61525	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.724375010 CET	61525	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.724380016 CET	443	61525	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.726766109 CET	61530	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.726809978 CET	443	61530	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.726957083 CET	61530	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.727113962 CET	61530	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.727128029 CET	443	61530	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.790157080 CET	443	61526	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.790498972 CET	61526	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.790512085 CET	443	61526	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.790925980 CET	61526	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.790930986 CET	443	61526	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.921752930 CET	443	61526	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.921842098 CET	443	61526	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.921895981 CET	61526	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.922127008 CET	61526	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.922142982 CET	443	61526	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.922152996 CET	61526	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.922158003 CET	443	61526	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.924906969 CET	61531	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.924943924 CET	443	61531	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.925137997 CET	61531	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.925290108 CET	61531	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.925304890 CET	443	61531	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.966603994 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.967047930 CET	61519	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.967070103 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:41.967605114 CET	61519	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:41.967611074 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.098759890 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.098786116 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.098848104 CET	61519	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.098864079 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.098917007 CET	61519	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.099077940 CET	61519	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.099081039 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.099090099 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.099103928 CET	61519	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.099133015 CET	443	61519	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.101655006 CET	61532	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.101682901 CET	443	61532	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.101747990 CET	61532	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.101886034 CET	61532	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.101891994 CET	443	61532	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.191010952 CET	443	61528	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.191365004 CET	61528	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.191395044 CET	443	61528	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.191797972 CET	61528	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.191803932 CET	443	61528	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.261804104 CET	443	61529	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.262123108 CET	61529	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.262135029 CET	443	61529	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.262512922 CET	61529	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.262516975 CET	443	61529	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.322489977 CET	443	61528	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.322868109 CET	443	61528	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.322932005 CET	61528	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.322964907 CET	61528	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.322987080 CET	443	61528	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.322997093 CET	61528	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.323003054 CET	443	61528	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.325485945 CET	61533	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.325530052 CET	443	61533	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.325591087 CET	61533	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.325723886 CET	61533	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.325737953 CET	443	61533	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.392776012 CET	443	61529	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.393073082 CET	443	61529	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.393131018 CET	61529	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.393172026 CET	61529	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.393184900 CET	443	61529	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.393196106 CET	61529	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.393203020 CET	443	61529	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.395231962 CET	61534	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.395266056 CET	443	61534	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.395365953 CET	61534	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.395525932 CET	61534	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.395539045 CET	443	61534	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.500464916 CET	443	61530	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.501235008 CET	61530	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.501235962 CET	61530	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.501264095 CET	443	61530	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.501308918 CET	443	61530	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.631812096 CET	443	61530	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.632150888 CET	443	61530	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.632257938 CET	61530	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.632320881 CET	61530	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.632335901 CET	443	61530	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.632369995 CET	61530	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.632375002 CET	443	61530	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.634891987 CET	61535	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.634936094 CET	443	61535	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.635356903 CET	61535	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.635356903 CET	61535	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.635394096 CET	443	61535	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.657325029 CET	443	61531	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.657681942 CET	61531	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.657710075 CET	443	61531	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.661233902 CET	61531	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.661240101 CET	443	61531	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.788619041 CET	443	61531	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.788805008 CET	443	61531	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.788992882 CET	61531	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.791248083 CET	61531	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.791248083 CET	61531	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.791266918 CET	443	61531	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.791275978 CET	443	61531	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.795068026 CET	61537	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.795109034 CET	443	61537	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.795176983 CET	61537	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.796036005 CET	61537	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.796051979 CET	443	61537	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.852219105 CET	443	61532	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.852972031 CET	61532	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.852984905 CET	443	61532	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.853914022 CET	61532	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.853918076 CET	443	61532	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.982274055 CET	443	61532	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.983653069 CET	443	61532	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.985282898 CET	61532	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.985443115 CET	61532	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.985459089 CET	443	61532	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.985490084 CET	61532	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.985496044 CET	443	61532	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.993238926 CET	61538	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.993263960 CET	443	61538	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:42.997390032 CET	61538	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.997795105 CET	61538	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:42.997802019 CET	443	61538	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.060853958 CET	443	61533	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.062128067 CET	61533	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.062154055 CET	443	61533	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.065234900 CET	61533	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.065239906 CET	443	61533	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.165534019 CET	443	61534	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.166744947 CET	61534	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.166744947 CET	61534	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.166759014 CET	443	61534	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.166773081 CET	443	61534	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.192001104 CET	443	61533	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.192173958 CET	443	61533	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.192352057 CET	61533	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.192584038 CET	61533	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.192584038 CET	61533	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.192603111 CET	443	61533	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.192612886 CET	443	61533	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.197236061 CET	61539	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.197274923 CET	443	61539	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.197341919 CET	61539	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.201237917 CET	61539	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.201252937 CET	443	61539	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.302197933 CET	443	61534	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.302717924 CET	443	61534	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.302938938 CET	61534	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.311177969 CET	61534	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.311177969 CET	61534	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.311196089 CET	443	61534	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.311206102 CET	443	61534	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.317238092 CET	61540	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.317274094 CET	443	61540	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.321321964 CET	61540	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.321526051 CET	61540	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.321538925 CET	443	61540	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.522883892 CET	443	61537	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.523935080 CET	61537	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.523951054 CET	443	61537	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.525479078 CET	61537	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.525485992 CET	443	61537	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.587110043 CET	443	61535	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.587857962 CET	61535	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.587881088 CET	443	61535	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.589025974 CET	61535	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.589030981 CET	443	61535	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.654658079 CET	443	61537	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.654949903 CET	443	61537	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.655019045 CET	61537	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.671993017 CET	61537	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.672020912 CET	443	61537	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.672029972 CET	61537	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.672036886 CET	443	61537	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.679017067 CET	61541	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.679052114 CET	443	61541	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.679126024 CET	61541	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.679282904 CET	61541	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.679296017 CET	443	61541	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.717808962 CET	443	61535	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.717891932 CET	443	61535	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.717940092 CET	61535	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.718146086 CET	61535	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.718163967 CET	443	61535	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.718174934 CET	61535	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.718182087 CET	443	61535	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.721342087 CET	61542	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.721366882 CET	443	61542	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.721426964 CET	61542	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.721621990 CET	61542	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.721631050 CET	443	61542	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.760041952 CET	443	61538	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.760513067 CET	61538	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.760525942 CET	443	61538	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.760966063 CET	61538	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.760971069 CET	443	61538	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.940618038 CET	443	61539	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.941087961 CET	61539	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.941117048 CET	443	61539	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.941696882 CET	61539	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.941701889 CET	443	61539	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.942313910 CET	443	61538	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.942466021 CET	443	61538	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.942512989 CET	61538	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.942626953 CET	61538	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.942641020 CET	443	61538	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.942651033 CET	61538	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.942656040 CET	443	61538	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.945445061 CET	61543	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.945487022 CET	443	61543	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:43.945549011 CET	61543	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.945733070 CET	61543	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:43.945744038 CET	443	61543	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.321737051 CET	443	61539	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.321803093 CET	443	61539	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.321852922 CET	61539	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.325817108 CET	61539	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.325836897 CET	443	61539	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.325846910 CET	61539	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.325853109 CET	443	61539	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.329112053 CET	61544	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.329145908 CET	443	61544	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.329241037 CET	61544	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.329446077 CET	61544	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.329459906 CET	443	61544	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.457161903 CET	443	61541	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.458165884 CET	61541	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.458194971 CET	443	61541	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.459667921 CET	61541	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.459671974 CET	443	61541	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.463288069 CET	443	61542	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.463711977 CET	61542	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.463732004 CET	443	61542	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.465028048 CET	61542	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.465033054 CET	443	61542	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.512975931 CET	443	61540	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.514854908 CET	61540	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.514854908 CET	61540	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.514868975 CET	443	61540	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.514885902 CET	443	61540	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.592166901 CET	443	61541	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.592283010 CET	443	61542	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.592344999 CET	443	61542	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.592612028 CET	61542	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.592936039 CET	61542	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.592936039 CET	61542	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.592950106 CET	443	61542	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.592957973 CET	443	61542	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.595065117 CET	443	61541	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.595237017 CET	61541	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.595531940 CET	61541	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.595545053 CET	443	61541	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.595577955 CET	61541	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.595582962 CET	443	61541	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.600979090 CET	61546	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.600980043 CET	61545	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.601012945 CET	443	61545	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.601015091 CET	443	61546	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.601283073 CET	61545	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.601283073 CET	61546	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.601690054 CET	61546	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.601701021 CET	443	61546	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.605242014 CET	61545	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.605257034 CET	443	61545	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.643717051 CET	443	61540	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.643794060 CET	443	61540	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.643949032 CET	61540	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.644319057 CET	61540	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.644329071 CET	443	61540	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.644387960 CET	61540	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.644392967 CET	443	61540	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.651267052 CET	61547	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.651307106 CET	443	61547	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.651560068 CET	61547	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.651560068 CET	61547	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.651591063 CET	443	61547	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.704648972 CET	443	61543	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.706085920 CET	61543	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.706101894 CET	443	61543	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.709259033 CET	61543	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.709264040 CET	443	61543	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.847815990 CET	443	61543	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.848300934 CET	443	61543	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.849319935 CET	61543	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.849320889 CET	61543	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.849399090 CET	61543	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.849406958 CET	443	61543	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.854108095 CET	61548	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.854151964 CET	443	61548	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:44.854350090 CET	61548	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.857239962 CET	61548	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:44.857256889 CET	443	61548	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.110999107 CET	443	61544	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.115283966 CET	61544	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.115283966 CET	61544	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.115326881 CET	443	61544	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.115346909 CET	443	61544	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.247994900 CET	443	61544	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.248066902 CET	443	61544	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.248307943 CET	61544	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.248307943 CET	61544	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.248395920 CET	61544	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.248411894 CET	443	61544	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.250883102 CET	61549	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.250926971 CET	443	61549	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.251003027 CET	61549	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.251157999 CET	61549	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.251174927 CET	443	61549	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.376420975 CET	443	61545	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.376981020 CET	61545	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.376997948 CET	443	61545	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.377477884 CET	61545	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.377482891 CET	443	61545	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.381606102 CET	443	61546	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.381968021 CET	61546	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.381990910 CET	443	61546	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.382527113 CET	61546	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.382533073 CET	443	61546	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.400921106 CET	443	61547	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.401328087 CET	61547	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.401338100 CET	443	61547	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.401683092 CET	61547	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.401686907 CET	443	61547	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.504359007 CET	443	61545	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.504429102 CET	443	61545	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.504475117 CET	61545	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.504663944 CET	61545	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.504679918 CET	443	61545	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.504688978 CET	61545	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.504694939 CET	443	61545	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.507524967 CET	61550	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.507565022 CET	443	61550	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.507633924 CET	61550	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.507787943 CET	61550	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.507811069 CET	443	61550	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.511327028 CET	443	61546	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.511472940 CET	443	61546	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.511548042 CET	61546	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.511578083 CET	61546	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.511594057 CET	443	61546	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.511607885 CET	61546	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.511615038 CET	443	61546	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.513848066 CET	61551	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.513885975 CET	443	61551	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.513947964 CET	61551	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.514170885 CET	61551	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.514189005 CET	443	61551	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.531272888 CET	443	61547	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.531359911 CET	443	61547	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.531403065 CET	61547	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.531445980 CET	61547	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.531450987 CET	443	61547	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.531460047 CET	61547	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.531464100 CET	443	61547	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.533390045 CET	61552	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.533405066 CET	443	61552	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.533488989 CET	61552	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.533638954 CET	61552	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.533652067 CET	443	61552	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.618660927 CET	443	61548	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.619100094 CET	61548	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.619113922 CET	443	61548	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.619640112 CET	61548	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.619647026 CET	443	61548	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.749150038 CET	443	61548	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.749541998 CET	443	61548	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.749612093 CET	61548	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.749705076 CET	61548	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.749723911 CET	443	61548	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.749738932 CET	61548	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.749744892 CET	443	61548	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.753504038 CET	61553	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.753547907 CET	443	61553	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:45.753617048 CET	61553	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.753959894 CET	61553	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:45.753977060 CET	443	61553	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.017143011 CET	443	61549	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.034735918 CET	61549	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.034758091 CET	443	61549	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.035639048 CET	61549	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.035644054 CET	443	61549	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.167102098 CET	443	61549	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.167352915 CET	443	61549	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.167408943 CET	61549	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.167495966 CET	61549	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.167515039 CET	443	61549	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.167526960 CET	61549	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.167535067 CET	443	61549	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.172492027 CET	61554	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.172523975 CET	443	61554	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.172595978 CET	61554	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.172920942 CET	61554	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.172935009 CET	443	61554	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.265130997 CET	443	61551	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.265331030 CET	443	61552	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.266182899 CET	61551	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.266204119 CET	443	61551	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.267311096 CET	61551	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.267330885 CET	443	61551	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.268095970 CET	61552	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.268111944 CET	443	61552	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.269229889 CET	61552	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.269234896 CET	443	61552	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.279366970 CET	443	61550	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.279858112 CET	61550	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.279881954 CET	443	61550	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.280647993 CET	61550	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.280654907 CET	443	61550	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.395639896 CET	443	61552	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.395692110 CET	443	61552	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.395734072 CET	61552	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.395955086 CET	61552	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.395972013 CET	443	61552	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.395982027 CET	61552	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.395988941 CET	443	61552	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.397478104 CET	443	61551	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.397696972 CET	443	61551	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.397746086 CET	61551	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.414758921 CET	443	61550	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.414988995 CET	443	61550	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.415040970 CET	61550	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.422822952 CET	61550	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.422840118 CET	443	61550	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.422849894 CET	61550	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.422857046 CET	443	61550	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.425765038 CET	61551	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.425796032 CET	443	61551	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.425811052 CET	61551	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.425818920 CET	443	61551	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.431966066 CET	61555	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.432008982 CET	443	61555	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.432068110 CET	61555	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.434391022 CET	61556	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.434427977 CET	443	61556	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.434480906 CET	61556	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.437320948 CET	61557	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.437339067 CET	443	61557	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.437395096 CET	61557	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.437604904 CET	61556	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.437628984 CET	443	61556	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.438035965 CET	61555	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.438064098 CET	443	61555	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.438337088 CET	61557	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.438349009 CET	443	61557	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.513225079 CET	443	61553	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.514312983 CET	61553	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.514312983 CET	61553	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.514327049 CET	443	61553	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.514343977 CET	443	61553	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.647972107 CET	443	61553	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.648330927 CET	443	61553	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.648595095 CET	61553	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.648708105 CET	61553	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.648708105 CET	61553	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.648725986 CET	443	61553	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.648739100 CET	443	61553	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.653510094 CET	61558	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.653549910 CET	443	61558	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.653732061 CET	61558	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.655360937 CET	61558	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.655375957 CET	443	61558	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.906735897 CET	443	61554	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.907474041 CET	61554	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.907490015 CET	443	61554	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:46.907804966 CET	61554	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:46.907818079 CET	443	61554	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.040162086 CET	443	61554	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.040242910 CET	443	61554	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.040477037 CET	61554	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.040510893 CET	61554	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.040510893 CET	61554	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.040529966 CET	443	61554	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.040539980 CET	443	61554	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.043127060 CET	61559	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.043155909 CET	443	61559	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.043289900 CET	61559	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.043463945 CET	61559	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.043476105 CET	443	61559	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.161238909 CET	443	61555	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.163072109 CET	61555	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.163073063 CET	61555	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.163110018 CET	443	61555	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.163122892 CET	443	61555	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.178241968 CET	443	61556	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.179336071 CET	61556	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.179353952 CET	443	61556	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.179739952 CET	61556	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.179744005 CET	443	61556	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.182471037 CET	443	61557	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.183994055 CET	61557	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.184016943 CET	443	61557	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.184613943 CET	61557	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.184618950 CET	443	61557	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.192477942 CET	61560	443	192.168.2.4	172.217.23.100
Oct 31, 2024 16:31:47.192495108 CET	443	61560	172.217.23.100	192.168.2.4
Oct 31, 2024 16:31:47.193006039 CET	61560	443	192.168.2.4	172.217.23.100
Oct 31, 2024 16:31:47.195333004 CET	61560	443	192.168.2.4	172.217.23.100
Oct 31, 2024 16:31:47.195343971 CET	443	61560	172.217.23.100	192.168.2.4
Oct 31, 2024 16:31:47.288274050 CET	443	61555	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.288338900 CET	443	61555	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.288585901 CET	61555	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.288585901 CET	61555	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.288651943 CET	61555	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.288666010 CET	443	61555	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.290958881 CET	61561	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.290986061 CET	443	61561	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.291152000 CET	61561	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.291234970 CET	61561	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.291251898 CET	443	61561	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.312386036 CET	443	61556	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.312549114 CET	443	61556	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.312707901 CET	61556	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.312707901 CET	61556	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.312743902 CET	61556	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.312760115 CET	443	61556	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.314688921 CET	61562	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.314733982 CET	443	61562	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.314876080 CET	443	61557	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.314877033 CET	61562	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.314935923 CET	61562	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.314946890 CET	443	61562	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.315181971 CET	443	61557	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.315259933 CET	61557	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.315259933 CET	61557	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.315310001 CET	61557	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.315324068 CET	443	61557	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.317184925 CET	61563	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.317200899 CET	443	61563	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.317368984 CET	61563	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.317368984 CET	61563	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.317388058 CET	443	61563	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.427992105 CET	443	61558	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.428406000 CET	61558	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.428435087 CET	443	61558	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.431360960 CET	61558	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.431366920 CET	443	61558	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.564991951 CET	443	61558	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.565047979 CET	443	61558	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.565263987 CET	61558	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.565332890 CET	61558	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.565347910 CET	443	61558	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.565359116 CET	61558	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.565363884 CET	443	61558	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.567976952 CET	61564	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.568007946 CET	443	61564	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.568207026 CET	61564	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.568372965 CET	61564	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.568384886 CET	443	61564	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.782735109 CET	443	61559	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.783348083 CET	61559	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.783364058 CET	443	61559	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.783840895 CET	61559	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.783848047 CET	443	61559	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.912868977 CET	443	61559	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.913592100 CET	443	61559	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.913638115 CET	61559	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.913686037 CET	61559	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.913702965 CET	443	61559	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.913718939 CET	61559	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.913726091 CET	443	61559	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.916304111 CET	61565	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.916330099 CET	443	61565	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:47.916435957 CET	61565	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.916588068 CET	61565	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:47.916603088 CET	443	61565	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.033571005 CET	443	61561	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.033953905 CET	61561	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.033970118 CET	443	61561	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.034382105 CET	61561	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.034387112 CET	443	61561	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.051872969 CET	443	61562	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.052217007 CET	61562	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.052234888 CET	443	61562	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.052685022 CET	61562	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.052690029 CET	443	61562	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.054980993 CET	443	61563	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.055372000 CET	61563	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.055381060 CET	443	61563	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.055821896 CET	61563	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.055825949 CET	443	61563	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.064590931 CET	443	61560	172.217.23.100	192.168.2.4
Oct 31, 2024 16:31:48.064857006 CET	61560	443	192.168.2.4	172.217.23.100
Oct 31, 2024 16:31:48.064876080 CET	443	61560	172.217.23.100	192.168.2.4
Oct 31, 2024 16:31:48.065336943 CET	443	61560	172.217.23.100	192.168.2.4
Oct 31, 2024 16:31:48.065860033 CET	61560	443	192.168.2.4	172.217.23.100
Oct 31, 2024 16:31:48.065943956 CET	443	61560	172.217.23.100	192.168.2.4
Oct 31, 2024 16:31:48.116352081 CET	61560	443	192.168.2.4	172.217.23.100
Oct 31, 2024 16:31:48.166799068 CET	443	61561	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.166852951 CET	443	61561	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.166906118 CET	61561	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.167094946 CET	61561	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.167105913 CET	443	61561	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.167119980 CET	61561	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.167124987 CET	443	61561	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.169701099 CET	61566	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.169744968 CET	443	61566	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.169809103 CET	61566	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.169949055 CET	61566	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.169965982 CET	443	61566	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.183765888 CET	443	61562	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.183954954 CET	443	61562	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.184154034 CET	61562	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.184190989 CET	61562	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.184205055 CET	443	61562	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.184214115 CET	61562	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.184218884 CET	443	61562	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.184670925 CET	443	61563	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.184937954 CET	443	61563	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.184986115 CET	61563	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.185008049 CET	61563	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.185014009 CET	443	61563	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.185029984 CET	61563	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.185034037 CET	443	61563	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.186630011 CET	61567	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.186652899 CET	443	61567	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.186769009 CET	61568	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.186770916 CET	61567	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.186788082 CET	443	61568	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.186836958 CET	61568	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.186894894 CET	61567	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.186908007 CET	443	61567	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.186996937 CET	61568	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.187010050 CET	443	61568	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.286178112 CET	443	61564	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.286567926 CET	61564	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.286587000 CET	443	61564	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.286947966 CET	61564	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.286952972 CET	443	61564	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.415911913 CET	443	61564	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.416248083 CET	443	61564	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.416307926 CET	61564	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.416351080 CET	61564	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.416351080 CET	61564	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.416374922 CET	443	61564	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.416387081 CET	443	61564	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.418661118 CET	61569	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.418698072 CET	443	61569	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.418827057 CET	61569	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.418972969 CET	61569	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.418978930 CET	443	61569	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.656408072 CET	443	61565	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.657243013 CET	61565	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.657265902 CET	443	61565	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.657300949 CET	61565	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.657306910 CET	443	61565	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.784545898 CET	443	61565	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.784699917 CET	443	61565	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.784852982 CET	61565	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.784852982 CET	61565	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.784957886 CET	61565	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.784975052 CET	443	61565	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.787575960 CET	61570	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.787627935 CET	443	61570	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.787750959 CET	61570	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.787949085 CET	61570	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.787970066 CET	443	61570	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.927954912 CET	443	61568	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.928450108 CET	443	61567	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.928488970 CET	61568	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.928518057 CET	443	61568	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.928828001 CET	61568	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.928843021 CET	443	61568	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.928908110 CET	61567	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.928953886 CET	443	61567	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.929177999 CET	61567	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.929183960 CET	443	61567	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.946710110 CET	443	61566	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.947357893 CET	61566	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.947398901 CET	443	61566	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:48.947436094 CET	61566	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:48.947442055 CET	443	61566	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.063196898 CET	443	61568	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.063246965 CET	443	61568	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.063342094 CET	61568	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.063451052 CET	61568	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.063452005 CET	61568	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.063476086 CET	443	61568	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.063486099 CET	443	61568	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.065897942 CET	61571	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.065938950 CET	443	61571	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.066164017 CET	61571	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.066164017 CET	61571	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.066199064 CET	443	61571	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.067465067 CET	443	61567	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.067605972 CET	443	61567	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.067688942 CET	61567	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.067688942 CET	61567	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.067735910 CET	61567	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.067749023 CET	443	61567	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.069655895 CET	61572	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.069701910 CET	443	61572	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.069852114 CET	61572	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.069983006 CET	61572	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.070000887 CET	443	61572	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.083969116 CET	443	61566	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.084028959 CET	443	61566	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.084124088 CET	61566	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.084228039 CET	61566	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.084238052 CET	443	61566	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.084273100 CET	61566	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.084279060 CET	443	61566	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.086004972 CET	61573	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.086025000 CET	443	61573	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.086169004 CET	61573	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.086250067 CET	61573	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.086256981 CET	443	61573	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.166371107 CET	443	61569	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.167206049 CET	61569	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.167206049 CET	61569	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.167227030 CET	443	61569	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.167242050 CET	443	61569	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.257106066 CET	49724	80	192.168.2.4	88.221.110.91
Oct 31, 2024 16:31:49.263823986 CET	80	49724	88.221.110.91	192.168.2.4
Oct 31, 2024 16:31:49.263947964 CET	49724	80	192.168.2.4	88.221.110.91
Oct 31, 2024 16:31:49.363811016 CET	443	61569	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.363948107 CET	443	61569	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.364198923 CET	61569	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.364198923 CET	61569	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.364198923 CET	61569	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.366746902 CET	61574	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.366790056 CET	443	61574	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.367007971 CET	61574	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.367007971 CET	61574	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.367052078 CET	443	61574	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.678869963 CET	61569	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.678905964 CET	443	61569	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.715043068 CET	443	61570	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.715595007 CET	61570	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.715621948 CET	443	61570	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.716186047 CET	61570	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.716192961 CET	443	61570	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.804995060 CET	443	61572	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.807394028 CET	61572	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.807430983 CET	443	61572	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.808104992 CET	61572	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.808111906 CET	443	61572	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.851408958 CET	443	61570	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.851475954 CET	443	61570	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.851551056 CET	61570	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.851927042 CET	61570	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.851957083 CET	443	61570	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.851969957 CET	61570	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.851979971 CET	443	61570	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.854846954 CET	61575	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.854881048 CET	443	61575	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.855020046 CET	61575	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.855175018 CET	61575	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.855185986 CET	443	61575	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.861782074 CET	443	61573	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.862431049 CET	61573	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.862443924 CET	443	61573	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.863503933 CET	61573	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.863507986 CET	443	61573	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.937717915 CET	443	61572	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.937865019 CET	443	61572	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.937927008 CET	61572	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.937972069 CET	61572	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.937989950 CET	443	61572	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.938024044 CET	61572	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.938030958 CET	443	61572	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.940994978 CET	61576	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.941023111 CET	443	61576	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.941082001 CET	61576	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.941236973 CET	61576	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.941251040 CET	443	61576	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.995722055 CET	443	61573	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.995779991 CET	443	61573	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.995841026 CET	61573	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.995938063 CET	61573	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.995948076 CET	443	61573	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.995959997 CET	61573	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.995965958 CET	443	61573	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.998730898 CET	61577	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.998765945 CET	443	61577	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:49.998970032 CET	61577	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.999119043 CET	61577	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:49.999134064 CET	443	61577	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.071887016 CET	443	61571	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.072278023 CET	61571	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.072309971 CET	443	61571	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.072856903 CET	61571	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.072864056 CET	443	61571	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.097774029 CET	443	61574	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.098134041 CET	61574	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.098161936 CET	443	61574	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.098663092 CET	61574	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.098670959 CET	443	61574	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.214509964 CET	443	61571	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.214569092 CET	443	61571	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.214728117 CET	61571	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.214905024 CET	61571	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.214930058 CET	443	61571	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.214946032 CET	61571	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.214953899 CET	443	61571	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.217935085 CET	61578	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.217969894 CET	443	61578	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.218178988 CET	61578	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.218359947 CET	61578	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.218373060 CET	443	61578	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.244143009 CET	443	61574	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.244225025 CET	443	61574	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.244364977 CET	61574	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.244411945 CET	61574	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.244432926 CET	443	61574	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.244451046 CET	61574	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.244457960 CET	443	61574	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.247039080 CET	61579	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.247066021 CET	443	61579	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.247206926 CET	61579	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.247389078 CET	61579	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.247400999 CET	443	61579	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.591871023 CET	443	61575	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.592686892 CET	61575	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.592710972 CET	443	61575	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.595248938 CET	61575	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.595259905 CET	443	61575	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.717937946 CET	443	61576	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.720036030 CET	61576	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.720066071 CET	443	61576	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.720925093 CET	61576	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.720951080 CET	443	61576	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.731072903 CET	443	61575	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.731559038 CET	443	61575	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.731723070 CET	61575	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.731760979 CET	61575	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.731760979 CET	61575	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.731781006 CET	443	61575	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.731791019 CET	443	61575	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.739288092 CET	61580	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.739346027 CET	443	61580	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.743468046 CET	61580	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.747347116 CET	61580	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.747379065 CET	443	61580	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.854415894 CET	443	61576	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.854811907 CET	443	61576	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.855415106 CET	61576	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.855415106 CET	61576	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.855542898 CET	61576	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.855561972 CET	443	61576	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.858345032 CET	61581	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.858371973 CET	443	61581	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.858540058 CET	61581	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.859363079 CET	61581	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.859380960 CET	443	61581	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.862551928 CET	443	61577	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.863356113 CET	61577	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.863375902 CET	443	61577	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.863672018 CET	61577	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.863677025 CET	443	61577	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.983793020 CET	443	61578	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.984543085 CET	61578	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.984560013 CET	443	61578	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.985306978 CET	61578	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.985317945 CET	443	61578	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.991195917 CET	443	61579	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.991930008 CET	61579	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.991946936 CET	443	61579	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.994899988 CET	443	61577	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.994934082 CET	61579	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.994939089 CET	443	61579	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.994999886 CET	443	61577	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:50.995438099 CET	61577	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.995438099 CET	61577	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:50.995438099 CET	61577	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.003300905 CET	61582	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.003350973 CET	443	61582	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.003524065 CET	61582	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.007354021 CET	61582	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.007384062 CET	443	61582	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.124731064 CET	443	61579	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.124814034 CET	443	61579	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.124923944 CET	61579	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.125170946 CET	61579	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.125170946 CET	61579	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.125189066 CET	443	61579	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.125199080 CET	443	61579	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.131303072 CET	61583	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.131347895 CET	443	61583	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.131874084 CET	443	61578	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.131994963 CET	443	61578	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.132023096 CET	61583	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.132190943 CET	61578	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.132745981 CET	61583	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.132761955 CET	443	61583	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.133199930 CET	61578	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.133199930 CET	61578	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.133212090 CET	443	61578	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.133219957 CET	443	61578	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.139302969 CET	61584	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.139328003 CET	443	61584	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.139475107 CET	61584	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.139604092 CET	61584	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.139616013 CET	443	61584	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.304037094 CET	61577	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.304054976 CET	443	61577	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.504484892 CET	443	61580	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.505004883 CET	61580	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.505034924 CET	443	61580	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.505434990 CET	61580	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.505439997 CET	443	61580	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.613488913 CET	443	61581	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.614012957 CET	61581	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.614032984 CET	443	61581	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.614483118 CET	61581	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.614489079 CET	443	61581	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.639503002 CET	443	61580	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.639658928 CET	443	61580	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.639710903 CET	61580	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.639812946 CET	61580	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.639832020 CET	443	61580	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.639841080 CET	61580	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.639847040 CET	443	61580	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.642694950 CET	61585	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.642733097 CET	443	61585	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.642801046 CET	61585	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.642993927 CET	61585	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.643012047 CET	443	61585	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.737360001 CET	443	61582	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.737689972 CET	61582	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.737706900 CET	443	61582	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.738240004 CET	61582	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.738245010 CET	443	61582	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.743601084 CET	443	61581	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.743820906 CET	443	61581	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.743870974 CET	61581	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.743907928 CET	61581	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.743925095 CET	443	61581	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.743937016 CET	61581	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.743942976 CET	443	61581	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.745935917 CET	61586	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.745974064 CET	443	61586	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.746033907 CET	61586	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.746184111 CET	61586	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.746198893 CET	443	61586	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.866252899 CET	443	61584	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.867691040 CET	443	61582	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.867762089 CET	443	61582	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.867809057 CET	61582	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.869678020 CET	443	61583	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.869993925 CET	61584	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.870024920 CET	443	61584	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.871124983 CET	61584	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.871130943 CET	443	61584	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.871687889 CET	61582	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.871706009 CET	443	61582	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.871716022 CET	61582	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.871721983 CET	443	61582	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.873874903 CET	61583	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.873899937 CET	443	61583	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.874635935 CET	61583	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.874641895 CET	443	61583	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.877464056 CET	61587	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.877504110 CET	443	61587	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.877557993 CET	61587	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.877938986 CET	61587	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.877955914 CET	443	61587	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.995783091 CET	443	61584	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.995857954 CET	443	61584	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.995903969 CET	61584	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.996555090 CET	61584	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.996572971 CET	443	61584	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.996583939 CET	61584	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:51.996589899 CET	443	61584	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.999068022 CET	443	61583	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.999139071 CET	443	61583	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:51.999187946 CET	61583	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.002255917 CET	61588	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.002281904 CET	443	61588	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.002341032 CET	61588	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.002686024 CET	61583	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.002695084 CET	443	61583	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.002711058 CET	61583	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.002715111 CET	443	61583	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.005537987 CET	61588	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.005548954 CET	443	61588	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.009072065 CET	61589	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.009111881 CET	443	61589	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.009166956 CET	61589	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.009670019 CET	61589	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.009682894 CET	443	61589	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.385062933 CET	443	61585	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.385926008 CET	61585	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.385940075 CET	443	61585	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.386982918 CET	61585	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.386989117 CET	443	61585	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.513041019 CET	443	61586	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.514178991 CET	61586	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.514178991 CET	61586	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.514194965 CET	443	61586	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.514213085 CET	443	61586	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.516321898 CET	443	61585	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.516450882 CET	443	61585	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.516585112 CET	61585	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.516755104 CET	61585	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.516769886 CET	443	61585	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.516798019 CET	61585	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.516803980 CET	443	61585	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.525249958 CET	61590	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.525279045 CET	443	61590	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.528417110 CET	61590	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.528417110 CET	61590	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.528443098 CET	443	61590	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.648524046 CET	443	61587	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.648588896 CET	443	61586	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.648777008 CET	443	61586	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.648849010 CET	61586	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.657413006 CET	61587	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.657434940 CET	443	61587	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.658687115 CET	61587	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.658699036 CET	443	61587	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.659241915 CET	61586	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.659259081 CET	443	61586	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.659584045 CET	61586	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.659589052 CET	443	61586	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.671709061 CET	61591	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.671758890 CET	443	61591	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.671883106 CET	61591	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.672497988 CET	61591	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.672514915 CET	443	61591	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.723360062 CET	443	61588	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.723712921 CET	61588	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.723727942 CET	443	61588	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.724244118 CET	61588	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.724247932 CET	443	61588	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.750986099 CET	443	61589	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.758240938 CET	61589	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.758259058 CET	443	61589	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.761250973 CET	61589	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.761256933 CET	443	61589	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.791763067 CET	443	61587	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.791845083 CET	443	61587	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.792779922 CET	61587	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.793164015 CET	61587	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.793164015 CET	61587	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.793180943 CET	443	61587	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.793191910 CET	443	61587	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.800626993 CET	61592	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.800648928 CET	443	61592	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.801033020 CET	61592	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.801326990 CET	61592	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.801337004 CET	443	61592	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.851739883 CET	443	61588	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.851943016 CET	443	61588	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.852020979 CET	61588	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.852020979 CET	61588	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.852080107 CET	61588	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.852087975 CET	443	61588	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.853957891 CET	61593	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.853996038 CET	443	61593	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.854157925 CET	61593	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.854207993 CET	61593	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.854218006 CET	443	61593	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.890254974 CET	443	61589	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.890304089 CET	443	61589	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.890453100 CET	61589	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.890453100 CET	61589	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.890604019 CET	61589	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.890616894 CET	443	61589	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.892277956 CET	61594	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.892298937 CET	443	61594	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:52.892436981 CET	61594	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.892537117 CET	61594	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:52.892548084 CET	443	61594	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.323472977 CET	443	61590	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.326371908 CET	61590	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.326371908 CET	61590	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.326404095 CET	443	61590	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.326426029 CET	443	61590	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.405241966 CET	443	61591	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.405909061 CET	61591	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.405939102 CET	443	61591	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.409265041 CET	61591	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.409271955 CET	443	61591	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.467166901 CET	443	61590	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.467299938 CET	443	61590	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.467914104 CET	61590	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.468009949 CET	61590	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.468009949 CET	61590	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.468031883 CET	443	61590	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.468046904 CET	443	61590	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.472259998 CET	61595	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.472301006 CET	443	61595	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.475433111 CET	61595	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.475575924 CET	61595	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.475590944 CET	443	61595	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.522088051 CET	443	61592	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.522916079 CET	61592	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.522944927 CET	443	61592	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.524000883 CET	61592	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.524005890 CET	443	61592	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.535393000 CET	443	61591	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.535603046 CET	443	61591	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.535662889 CET	61591	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.535828114 CET	61591	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.535851955 CET	443	61591	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.535866976 CET	61591	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.535873890 CET	443	61591	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.541547060 CET	61596	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.541590929 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.541655064 CET	61596	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.541893959 CET	61596	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.541913986 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.615773916 CET	443	61593	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.624234915 CET	61593	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.624258041 CET	443	61593	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.625193119 CET	61593	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.625197887 CET	443	61593	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.631165981 CET	443	61594	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.631721973 CET	61594	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.631736994 CET	443	61594	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.632807970 CET	61594	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.632813931 CET	443	61594	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.650971889 CET	443	61592	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.651043892 CET	443	61592	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.651092052 CET	61592	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.651218891 CET	61592	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.651228905 CET	443	61592	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.656833887 CET	61597	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.656861067 CET	443	61597	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.656923056 CET	61597	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.657380104 CET	61597	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.657393932 CET	443	61597	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.751194000 CET	443	61593	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.751317024 CET	443	61593	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.751370907 CET	61593	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.751420021 CET	61593	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.751430988 CET	443	61593	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.751446962 CET	61593	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.751451969 CET	443	61593	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.756439924 CET	61598	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.756464005 CET	443	61598	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.756520987 CET	61598	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.756733894 CET	61598	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.756747961 CET	443	61598	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.760322094 CET	443	61594	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.760437012 CET	443	61594	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.760490894 CET	61594	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.760783911 CET	61594	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.760793924 CET	443	61594	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.760811090 CET	61594	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.760816097 CET	443	61594	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.765230894 CET	61599	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.765247107 CET	443	61599	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:53.765314102 CET	61599	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.765700102 CET	61599	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:53.765711069 CET	443	61599	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.202616930 CET	443	61595	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.203727007 CET	61595	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.203743935 CET	443	61595	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.204951048 CET	61595	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.204957962 CET	443	61595	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.262746096 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.264565945 CET	61596	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.264595985 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.267560005 CET	61596	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.267568111 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.331516981 CET	443	61595	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.331676006 CET	443	61595	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.331734896 CET	61595	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.331815958 CET	61595	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.331831932 CET	443	61595	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.334636927 CET	61600	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.334677935 CET	443	61600	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.334748983 CET	61600	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.334897995 CET	61600	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.334912062 CET	443	61600	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.390950918 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.390969038 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.391021967 CET	61596	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.391037941 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.391083002 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.391129017 CET	61596	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.391257048 CET	61596	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.391271114 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.391283989 CET	61596	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.391289949 CET	443	61596	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.393717051 CET	61601	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.393749952 CET	443	61601	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.393810987 CET	61601	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.394001007 CET	61601	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.394015074 CET	443	61601	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.400726080 CET	443	61597	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.401061058 CET	61597	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.401077986 CET	443	61597	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.401547909 CET	61597	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.401559114 CET	443	61597	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.498235941 CET	443	61598	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.498554945 CET	61598	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.498573065 CET	443	61598	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.498936892 CET	61598	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.498943090 CET	443	61598	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.501377106 CET	443	61599	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.501683950 CET	61599	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.501701117 CET	443	61599	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.502120972 CET	61599	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.502126932 CET	443	61599	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.541990042 CET	443	61597	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.542418957 CET	443	61597	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.542484045 CET	61597	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.542511940 CET	61597	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.542511940 CET	61597	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.542525053 CET	443	61597	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.542534113 CET	443	61597	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.544534922 CET	61602	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.544560909 CET	443	61602	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.544753075 CET	61602	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.544753075 CET	61602	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.544781923 CET	443	61602	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.639394045 CET	443	61599	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.639425993 CET	443	61599	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.639488935 CET	443	61599	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.639586926 CET	61599	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.640018940 CET	61599	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.640028954 CET	443	61599	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.640064001 CET	61599	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.640069008 CET	443	61599	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.642539024 CET	61603	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.642580986 CET	443	61603	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.642743111 CET	61603	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.642894983 CET	61603	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.642915010 CET	443	61603	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.801593065 CET	443	61598	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.802794933 CET	443	61598	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.802953005 CET	61598	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.802953005 CET	61598	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.803026915 CET	61598	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.803039074 CET	443	61598	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.805366039 CET	61604	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.805402040 CET	443	61604	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:54.805663109 CET	61604	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.805663109 CET	61604	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:54.805696964 CET	443	61604	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.075994968 CET	443	61600	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.076932907 CET	61600	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.076934099 CET	61600	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.076958895 CET	443	61600	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.076971054 CET	443	61600	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.152815104 CET	443	61601	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.153466940 CET	61601	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.153480053 CET	443	61601	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.153765917 CET	61601	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.153776884 CET	443	61601	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.208477974 CET	443	61600	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.208499908 CET	443	61600	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.208548069 CET	443	61600	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.208585024 CET	61600	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.208705902 CET	61600	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.208817005 CET	61600	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.208817005 CET	61600	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.208832026 CET	443	61600	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.208839893 CET	443	61600	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.211453915 CET	61605	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.211491108 CET	443	61605	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.211584091 CET	61605	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.211713076 CET	61605	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.211728096 CET	443	61605	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.274029016 CET	443	61602	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.274907112 CET	61602	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.274907112 CET	61602	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.274919033 CET	443	61602	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.274929047 CET	443	61602	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.289174080 CET	443	61601	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.289196014 CET	443	61601	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.289252996 CET	443	61601	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.289271116 CET	61601	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.289489985 CET	61601	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.289489985 CET	61601	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.289582014 CET	61601	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.289598942 CET	443	61601	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.292072058 CET	61606	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.292109966 CET	443	61606	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.292270899 CET	61606	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.292310953 CET	61606	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.292321920 CET	443	61606	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.376831055 CET	443	61603	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.377789974 CET	61603	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.377789974 CET	61603	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.377805948 CET	443	61603	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.377821922 CET	443	61603	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.407195091 CET	443	61602	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.407253027 CET	443	61602	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.407545090 CET	61602	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.407545090 CET	61602	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.407593012 CET	61602	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.407610893 CET	443	61602	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.410351038 CET	61607	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.410392046 CET	443	61607	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.410675049 CET	61607	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.410756111 CET	61607	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.410764933 CET	443	61607	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.509392977 CET	443	61603	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.509453058 CET	443	61603	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.509701967 CET	61603	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.509701967 CET	61603	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.509758949 CET	61603	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.509780884 CET	443	61603	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.512197018 CET	61608	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.512233019 CET	443	61608	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.512303114 CET	61608	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.512484074 CET	61608	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.512495995 CET	443	61608	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.544115067 CET	443	61604	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.544516087 CET	61604	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.544543028 CET	443	61604	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.545027018 CET	61604	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.545032978 CET	443	61604	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.685455084 CET	443	61604	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.686769962 CET	443	61604	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.686863899 CET	61604	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.686997890 CET	61604	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.687019110 CET	443	61604	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.687032938 CET	61604	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.687040091 CET	443	61604	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.691334009 CET	61609	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.691399097 CET	443	61609	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.691464901 CET	61609	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.691644907 CET	61609	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.691675901 CET	443	61609	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.974776983 CET	443	61605	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.975374937 CET	61605	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.975408077 CET	443	61605	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:55.975888968 CET	61605	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:55.975895882 CET	443	61605	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.033813000 CET	443	61606	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.034439087 CET	61606	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.034465075 CET	443	61606	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.035177946 CET	61606	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.035186052 CET	443	61606	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.105868101 CET	443	61605	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.105932951 CET	443	61605	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.105990887 CET	61605	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.106201887 CET	61605	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.106220007 CET	443	61605	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.106250048 CET	61605	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.106259108 CET	443	61605	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.109252930 CET	61610	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.109287977 CET	443	61610	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.109380960 CET	61610	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.109534979 CET	61610	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.109549046 CET	443	61610	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.141561031 CET	443	61607	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.142005920 CET	61607	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.142021894 CET	443	61607	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.142416000 CET	61607	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.142421961 CET	443	61607	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.167330980 CET	443	61606	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.167424917 CET	443	61606	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.167488098 CET	61606	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.167658091 CET	61606	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.167682886 CET	443	61606	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.167699099 CET	61606	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.167706966 CET	443	61606	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.170110941 CET	61611	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.170149088 CET	443	61611	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.170218945 CET	61611	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.170335054 CET	61611	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.170350075 CET	443	61611	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.247776031 CET	443	61608	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.248112917 CET	61608	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.248128891 CET	443	61608	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.248509884 CET	61608	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.248514891 CET	443	61608	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.271446943 CET	443	61607	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.271509886 CET	443	61607	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.271604061 CET	61607	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.271642923 CET	61607	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.271656036 CET	443	61607	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.271667004 CET	61607	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.271672964 CET	443	61607	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.274058104 CET	61612	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.274110079 CET	443	61612	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.274171114 CET	61612	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.274308920 CET	61612	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.274327040 CET	443	61612	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.376166105 CET	443	61608	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.376348972 CET	443	61608	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.376393080 CET	61608	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.376652956 CET	61608	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.376666069 CET	443	61608	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.376677036 CET	61608	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.376682997 CET	443	61608	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.378757954 CET	61613	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.378787994 CET	443	61613	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.378927946 CET	61613	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.379231930 CET	61613	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.379245996 CET	443	61613	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.419310093 CET	443	61609	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.419743061 CET	61609	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.419770002 CET	443	61609	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.420172930 CET	61609	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.420178890 CET	443	61609	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.548661947 CET	443	61609	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.548794985 CET	443	61609	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.548892021 CET	61609	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.548932076 CET	61609	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.548945904 CET	443	61609	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.548957109 CET	61609	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.548962116 CET	443	61609	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.551460028 CET	61614	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.551481962 CET	443	61614	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.551662922 CET	61614	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.551832914 CET	61614	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.551842928 CET	443	61614	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.848870993 CET	443	61610	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.849395037 CET	61610	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.849414110 CET	443	61610	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.849823952 CET	61610	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.849829912 CET	443	61610	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.899370909 CET	443	61611	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.899775982 CET	61611	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.899812937 CET	443	61611	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.900172949 CET	61611	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.900190115 CET	443	61611	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.978972912 CET	443	61610	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.979032993 CET	443	61610	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.979116917 CET	61610	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.979322910 CET	61610	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.979340076 CET	443	61610	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.979353905 CET	61610	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.979358912 CET	443	61610	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.982084036 CET	61615	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.982134104 CET	443	61615	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.982229948 CET	61615	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.982398987 CET	61615	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.982414961 CET	443	61615	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.993702888 CET	443	61612	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.994077921 CET	61612	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.994107008 CET	443	61612	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:56.994570017 CET	61612	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:56.994576931 CET	443	61612	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.031898022 CET	443	61611	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.031964064 CET	443	61611	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.032036066 CET	61611	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.032305956 CET	61611	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.032336950 CET	443	61611	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.032354116 CET	61611	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.032365084 CET	443	61611	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.035057068 CET	61616	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.035104036 CET	443	61616	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.035198927 CET	61616	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.035350084 CET	61616	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.035372019 CET	443	61616	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.144399881 CET	443	61613	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.144896984 CET	61613	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.144917011 CET	443	61613	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.145351887 CET	61613	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.145359039 CET	443	61613	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.202100039 CET	443	61612	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.202147007 CET	443	61612	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.202199936 CET	443	61612	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.202222109 CET	61612	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.202263117 CET	61612	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.202462912 CET	61612	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.202480078 CET	443	61612	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.202496052 CET	61612	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.202502966 CET	443	61612	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.205207109 CET	61617	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.205234051 CET	443	61617	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.205312967 CET	61617	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.205459118 CET	61617	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.205471992 CET	443	61617	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.282109976 CET	443	61614	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.282497883 CET	61614	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.282510996 CET	443	61614	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.282953024 CET	61614	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.282958984 CET	443	61614	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.286055088 CET	443	61613	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.286113024 CET	443	61613	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.286218882 CET	61613	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.286258936 CET	61613	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.286276102 CET	443	61613	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.286292076 CET	61613	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.286298037 CET	443	61613	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.288558006 CET	61618	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.288599014 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.288741112 CET	61618	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.288906097 CET	61618	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.288921118 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.412586927 CET	443	61614	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.412734985 CET	443	61614	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.412786961 CET	443	61614	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.412811995 CET	61614	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.412868023 CET	61614	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.413219929 CET	61614	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.413232088 CET	443	61614	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.413260937 CET	61614	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.413268089 CET	443	61614	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.418826103 CET	61619	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.418857098 CET	443	61619	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.418961048 CET	61619	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.425239086 CET	61619	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.425249100 CET	443	61619	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.742300987 CET	443	61615	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.743077993 CET	61615	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.743105888 CET	443	61615	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.743741035 CET	61615	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.743746996 CET	443	61615	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.766638041 CET	443	61616	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.767076015 CET	61616	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.767105103 CET	443	61616	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.767636061 CET	61616	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.767641068 CET	443	61616	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.876385927 CET	443	61615	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.876450062 CET	443	61615	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.876529932 CET	61615	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.876811028 CET	61615	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.876830101 CET	443	61615	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.876842022 CET	61615	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.876846075 CET	443	61615	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.879179955 CET	61620	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.879195929 CET	443	61620	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.879462957 CET	61620	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.879621029 CET	61620	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.879631996 CET	443	61620	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.895672083 CET	443	61616	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.895741940 CET	443	61616	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.895787954 CET	61616	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.895989895 CET	61616	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.896003962 CET	443	61616	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.896013975 CET	61616	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.896018982 CET	443	61616	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.899528027 CET	61621	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.899558067 CET	443	61621	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.899625063 CET	61621	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.899790049 CET	61621	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.899805069 CET	443	61621	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.963109016 CET	443	61617	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.964178085 CET	61617	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.964229107 CET	443	61617	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:57.965603113 CET	61617	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:57.965615034 CET	443	61617	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.062736988 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.063394070 CET	61618	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.063419104 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.064038992 CET	61618	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.064043999 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.092538118 CET	443	61617	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.092611074 CET	443	61617	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.092679977 CET	61617	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.096599102 CET	443	61560	172.217.23.100	192.168.2.4
Oct 31, 2024 16:31:58.096637964 CET	443	61560	172.217.23.100	192.168.2.4
Oct 31, 2024 16:31:58.096715927 CET	61560	443	192.168.2.4	172.217.23.100
Oct 31, 2024 16:31:58.117119074 CET	61617	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.117140055 CET	443	61617	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.117152929 CET	61617	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.117158890 CET	443	61617	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.135278940 CET	61622	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.135320902 CET	443	61622	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.135409117 CET	61622	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.135829926 CET	61622	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.135843992 CET	443	61622	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.143470049 CET	443	61619	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.143970013 CET	61619	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.143981934 CET	443	61619	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.145164967 CET	61619	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.145169020 CET	443	61619	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.197949886 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.198410988 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.198461056 CET	61618	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.198477030 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.198546886 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.198570013 CET	61618	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.198570013 CET	61618	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.198596001 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.198610067 CET	61618	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.198615074 CET	443	61618	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.206188917 CET	61623	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.206228971 CET	443	61623	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.206301928 CET	61623	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.206811905 CET	61623	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.206830025 CET	443	61623	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.272353888 CET	443	61619	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.272417068 CET	443	61619	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.272466898 CET	61619	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.272835970 CET	61619	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.272849083 CET	443	61619	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.272865057 CET	61619	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.272870064 CET	443	61619	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.278239965 CET	61624	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.278266907 CET	443	61624	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.278317928 CET	61624	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.278639078 CET	61624	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.278651953 CET	443	61624	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.622495890 CET	443	61620	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.622903109 CET	61620	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.622930050 CET	443	61620	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.623591900 CET	61620	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.623599052 CET	443	61620	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.636913061 CET	443	61621	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.637520075 CET	61621	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.637553930 CET	443	61621	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.638443947 CET	61621	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.638453007 CET	443	61621	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.751066923 CET	443	61620	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.751133919 CET	443	61620	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.751244068 CET	61620	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.752051115 CET	61620	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.752068996 CET	443	61620	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.752099991 CET	61620	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.752104998 CET	443	61620	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.759586096 CET	61625	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.759622097 CET	443	61625	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.759720087 CET	61625	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.760075092 CET	61625	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.760087967 CET	443	61625	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.767122984 CET	443	61621	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.767188072 CET	443	61621	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.767627001 CET	61621	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.767729044 CET	61621	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.767746925 CET	443	61621	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.767784119 CET	61621	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.767790079 CET	443	61621	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.771967888 CET	61626	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.772006035 CET	443	61626	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.772247076 CET	61626	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.772490978 CET	61626	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.772510052 CET	443	61626	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.872311115 CET	443	61622	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.872942924 CET	61622	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.872966051 CET	443	61622	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.873368025 CET	61622	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.873373032 CET	443	61622	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.973056078 CET	443	61623	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.973422050 CET	61623	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.973438978 CET	443	61623	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:58.973851919 CET	61623	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:58.973858118 CET	443	61623	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.003650904 CET	443	61622	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.003698111 CET	443	61622	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.003741980 CET	443	61622	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.003808022 CET	61622	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.003962994 CET	61622	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.003988981 CET	443	61622	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.004004955 CET	61622	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.004012108 CET	443	61622	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.006675959 CET	61627	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.006701946 CET	443	61627	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.006813049 CET	61627	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.006923914 CET	61627	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.006936073 CET	443	61627	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.048239946 CET	443	61624	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.048693895 CET	61624	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.048710108 CET	443	61624	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.049097061 CET	61624	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.049103022 CET	443	61624	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.108185053 CET	443	61623	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.108411074 CET	443	61623	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.108472109 CET	61623	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.108552933 CET	61623	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.108572006 CET	443	61623	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.108578920 CET	61623	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.108582973 CET	443	61623	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.111139059 CET	61628	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.111183882 CET	443	61628	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.111341953 CET	61628	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.111495972 CET	61628	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.111510992 CET	443	61628	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.179476976 CET	443	61624	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.179512978 CET	443	61624	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.179560900 CET	443	61624	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.179560900 CET	61624	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.179600954 CET	61624	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.179795027 CET	61624	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.179795027 CET	61624	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.179809093 CET	443	61624	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.179817915 CET	443	61624	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.182367086 CET	61629	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.182398081 CET	443	61629	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.182523966 CET	61629	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.182650089 CET	61629	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.182662010 CET	443	61629	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.384947062 CET	61560	443	192.168.2.4	172.217.23.100
Oct 31, 2024 16:31:59.384963036 CET	443	61560	172.217.23.100	192.168.2.4
Oct 31, 2024 16:31:59.497332096 CET	443	61625	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.497996092 CET	61625	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.498019934 CET	443	61625	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.498826027 CET	61625	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.498831034 CET	443	61625	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.501079082 CET	443	61626	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.502052069 CET	61626	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.502059937 CET	443	61626	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.502774954 CET	61626	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.502779007 CET	443	61626	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.628107071 CET	443	61625	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.628184080 CET	443	61625	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.628340006 CET	61625	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.635530949 CET	443	61626	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.635592937 CET	443	61626	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.635760069 CET	61626	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.639961004 CET	61625	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.639977932 CET	443	61625	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.639988899 CET	61625	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.639993906 CET	443	61625	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.642385006 CET	61626	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.642385960 CET	61626	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.642399073 CET	443	61626	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.642407894 CET	443	61626	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.700000048 CET	61630	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.700041056 CET	443	61630	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.700125933 CET	61630	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.701042891 CET	61631	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.701071024 CET	443	61631	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.701170921 CET	61631	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.701688051 CET	61630	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.701704025 CET	443	61630	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.702119112 CET	61631	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.702132940 CET	443	61631	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.741710901 CET	443	61627	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.760365963 CET	61627	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.760384083 CET	443	61627	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.761320114 CET	61627	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.761324883 CET	443	61627	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.864490032 CET	443	61628	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.878979921 CET	61628	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.878994942 CET	443	61628	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.879827023 CET	61628	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.879836082 CET	443	61628	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.886617899 CET	443	61627	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.886693954 CET	443	61627	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.886847973 CET	61627	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.887170076 CET	61627	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.887181997 CET	443	61627	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.887254000 CET	61627	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.887259960 CET	443	61627	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.903172970 CET	61632	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.903188944 CET	443	61632	13.107.246.45	192.168.2.4
Oct 31, 2024 16:31:59.903254032 CET	61632	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.904658079 CET	61632	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:31:59.904670954 CET	443	61632	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.007585049 CET	443	61628	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.007611990 CET	443	61628	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.007654905 CET	443	61628	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.007662058 CET	61628	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.007693052 CET	61628	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.008200884 CET	61628	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.008222103 CET	443	61628	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.012862921 CET	61633	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.012885094 CET	443	61633	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.012988091 CET	61633	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.013377905 CET	61633	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.013392925 CET	443	61633	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.442802906 CET	443	61631	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.443332911 CET	61631	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.443356991 CET	443	61631	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.443790913 CET	61631	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.443797112 CET	443	61631	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.483248949 CET	443	61630	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.483589888 CET	61630	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.483613968 CET	443	61630	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.483963966 CET	61630	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.483968973 CET	443	61630	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.573991060 CET	443	61631	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.574054956 CET	443	61631	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.574150085 CET	61631	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.574584007 CET	61631	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.574604034 CET	443	61631	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.574615955 CET	61631	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.574620962 CET	443	61631	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.579319000 CET	61634	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.579339981 CET	443	61634	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.579521894 CET	61634	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.579739094 CET	61634	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.579751015 CET	443	61634	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.614928007 CET	443	61630	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.615153074 CET	443	61630	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.615211964 CET	61630	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.615421057 CET	61630	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.615438938 CET	443	61630	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.615447998 CET	61630	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.615453959 CET	443	61630	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.621634007 CET	61635	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.621655941 CET	443	61635	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.621769905 CET	61635	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.622498989 CET	61635	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.622510910 CET	443	61635	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.648210049 CET	443	61632	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.648840904 CET	61632	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.648857117 CET	443	61632	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.649779081 CET	61632	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.649784088 CET	443	61632	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.779445887 CET	443	61632	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.779470921 CET	443	61632	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.779521942 CET	443	61632	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.779531002 CET	61632	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.779578924 CET	61632	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.780126095 CET	61632	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.780139923 CET	443	61632	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.786494970 CET	61636	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.786545992 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.786732912 CET	61636	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.787127972 CET	61636	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.787137985 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.787409067 CET	443	61633	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.787848949 CET	61633	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.787873983 CET	443	61633	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.788638115 CET	61633	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.788645983 CET	443	61633	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.922794104 CET	443	61633	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.922987938 CET	443	61633	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.923144102 CET	61633	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.923980951 CET	61633	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.923998117 CET	443	61633	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.924016953 CET	61633	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.924022913 CET	443	61633	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.931013107 CET	61637	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.931054115 CET	443	61637	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:00.931108952 CET	61637	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.931397915 CET	61637	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:00.931421041 CET	443	61637	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.311141968 CET	443	61634	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.312350988 CET	61634	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.312376976 CET	443	61634	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.313079119 CET	61634	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.313086033 CET	443	61634	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.385160923 CET	443	61635	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.386066914 CET	61635	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.386096954 CET	443	61635	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.386502028 CET	61635	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.386507034 CET	443	61635	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.452824116 CET	443	61634	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.452939034 CET	443	61634	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.452996016 CET	61634	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.458359003 CET	61634	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.458374977 CET	443	61634	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.458403111 CET	61634	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.458409071 CET	443	61634	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.481914997 CET	61638	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.481939077 CET	443	61638	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.482112885 CET	61638	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.482614040 CET	61638	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.482628107 CET	443	61638	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.516168118 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.517185926 CET	61636	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.517198086 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.517697096 CET	61636	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.517702103 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.518712997 CET	443	61635	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.518779039 CET	443	61635	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.518903971 CET	61635	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.518929958 CET	61635	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.518944025 CET	443	61635	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.518953085 CET	61635	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.518959045 CET	443	61635	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.521061897 CET	61639	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.521095991 CET	443	61639	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.521167994 CET	61639	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.521297932 CET	61639	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.521312952 CET	443	61639	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.676995993 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.677040100 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.677109003 CET	61636	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.677125931 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.677139044 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.677180052 CET	61636	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.677361012 CET	61636	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.677372932 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.677383900 CET	61636	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.677388906 CET	443	61636	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.680506945 CET	61640	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.680547953 CET	443	61640	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.680608034 CET	61640	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.680782080 CET	61640	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.680797100 CET	443	61640	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.684350014 CET	443	61637	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.684751034 CET	61637	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.684762955 CET	443	61637	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:01.685185909 CET	61637	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:01.685190916 CET	443	61637	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.044748068 CET	443	61637	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.044925928 CET	443	61637	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.045093060 CET	61637	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.045093060 CET	61637	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.045124054 CET	61637	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.045140028 CET	443	61637	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.047496080 CET	61641	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.047534943 CET	443	61641	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.047638893 CET	61641	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.047825098 CET	61641	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.047841072 CET	443	61641	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.218457937 CET	443	61638	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.218875885 CET	61638	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.218893051 CET	443	61638	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.219376087 CET	61638	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.219382048 CET	443	61638	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.366408110 CET	443	61638	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.366942883 CET	443	61638	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.367042065 CET	61638	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.367116928 CET	61638	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.367134094 CET	443	61638	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.367145061 CET	61638	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.367151022 CET	443	61638	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.369668961 CET	61642	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.369707108 CET	443	61642	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.369784117 CET	61642	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.369954109 CET	61642	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.369966984 CET	443	61642	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.410048008 CET	443	61640	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.410438061 CET	61640	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.410454035 CET	443	61640	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.410867929 CET	61640	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.410872936 CET	443	61640	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.496850967 CET	443	61639	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.497261047 CET	61639	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.497277021 CET	443	61639	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.497659922 CET	61639	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.497663975 CET	443	61639	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.543463945 CET	443	61640	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.543514967 CET	443	61640	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.543589115 CET	443	61640	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.543749094 CET	61640	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.543749094 CET	61640	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.543912888 CET	61640	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.543925047 CET	443	61640	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.546191931 CET	61643	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.546247959 CET	443	61643	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.546379089 CET	61643	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.546478033 CET	61643	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.546495914 CET	443	61643	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.629823923 CET	443	61639	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.630021095 CET	443	61639	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.630120993 CET	61639	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.630120993 CET	61639	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.630151033 CET	61639	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.630166054 CET	443	61639	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.632340908 CET	61644	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.632375956 CET	443	61644	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.632759094 CET	61644	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.632872105 CET	61644	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.632884979 CET	443	61644	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.795957088 CET	443	61641	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.796869993 CET	61641	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.796869993 CET	61641	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.796900034 CET	443	61641	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.796921015 CET	443	61641	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.927894115 CET	443	61641	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.928152084 CET	443	61641	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.928282976 CET	61641	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.928282976 CET	61641	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.928340912 CET	61641	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.928355932 CET	443	61641	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.930908918 CET	61645	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.930954933 CET	443	61645	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:02.931160927 CET	61645	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.931401968 CET	61645	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:02.931417942 CET	443	61645	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.102103949 CET	443	61642	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.103013039 CET	61642	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.103013039 CET	61642	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.103040934 CET	443	61642	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.103058100 CET	443	61642	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.249560118 CET	443	61642	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.249623060 CET	443	61642	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.249731064 CET	443	61642	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.249840021 CET	61642	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.249942064 CET	61642	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.249958038 CET	443	61642	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.252959013 CET	61646	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.253041983 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.253278017 CET	61646	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.253449917 CET	61646	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.253477097 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.296341896 CET	443	61643	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.297235012 CET	61643	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.297235966 CET	61643	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.297311068 CET	443	61643	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.297324896 CET	443	61643	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.393125057 CET	443	61644	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.394100904 CET	61644	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.394100904 CET	61644	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.394136906 CET	443	61644	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.394164085 CET	443	61644	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.427556992 CET	443	61643	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.427715063 CET	443	61643	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.427987099 CET	61643	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.428201914 CET	61643	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.428201914 CET	61643	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.428221941 CET	443	61643	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.428235054 CET	443	61643	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.431117058 CET	61647	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.431164980 CET	443	61647	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.432334900 CET	61647	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.432547092 CET	61647	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.432563066 CET	443	61647	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.528417110 CET	443	61644	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.528446913 CET	443	61644	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.528492928 CET	443	61644	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.528558016 CET	61644	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.528796911 CET	61644	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.528841019 CET	61644	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.528841019 CET	61644	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.528875113 CET	443	61644	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.528899908 CET	443	61644	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.531867027 CET	61648	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.531898022 CET	443	61648	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.532042980 CET	61648	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.532254934 CET	61648	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.532270908 CET	443	61648	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.676104069 CET	443	61645	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.676626921 CET	61645	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.676660061 CET	443	61645	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.677076101 CET	61645	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.677081108 CET	443	61645	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.806900978 CET	443	61645	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.807111025 CET	443	61645	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.807230949 CET	61645	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.807334900 CET	61645	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.807334900 CET	61645	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.807353020 CET	443	61645	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.807363033 CET	443	61645	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.810894012 CET	61649	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.810946941 CET	443	61649	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:03.811019897 CET	61649	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.811444044 CET	61649	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:03.811459064 CET	443	61649	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.247503996 CET	443	61647	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.248159885 CET	61647	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.248178959 CET	443	61647	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.248816013 CET	61647	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.248821020 CET	443	61647	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.251121044 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.253371954 CET	61646	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.253406048 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.253778934 CET	61646	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.253786087 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.378407001 CET	443	61647	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.378465891 CET	443	61647	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.378608942 CET	61647	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.378742933 CET	61647	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.378760099 CET	443	61647	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.378796101 CET	61647	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.378803968 CET	443	61647	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.380934000 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.381009102 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.381078005 CET	61646	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.381108046 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.381135941 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.381198883 CET	61646	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.381223917 CET	61646	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.381223917 CET	61646	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.381243944 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.381258011 CET	443	61646	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.382884026 CET	61650	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.382977009 CET	443	61650	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.383265972 CET	61650	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.383471012 CET	61650	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.383491039 CET	443	61650	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.384340048 CET	61651	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.384380102 CET	443	61651	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.384449005 CET	61651	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.384624004 CET	61651	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.384639978 CET	443	61651	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.568859100 CET	443	61649	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.570192099 CET	61649	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.570192099 CET	61649	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.570225000 CET	443	61649	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.570249081 CET	443	61649	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.581274986 CET	443	61648	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.581660032 CET	61648	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.581711054 CET	443	61648	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.582039118 CET	61648	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.582055092 CET	443	61648	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.702161074 CET	443	61649	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.702317953 CET	443	61649	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.702384949 CET	61649	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.702539921 CET	61649	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.702539921 CET	61649	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.702569008 CET	443	61649	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.702588081 CET	443	61649	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.704982996 CET	61652	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.705022097 CET	443	61652	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.705116987 CET	61652	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.705332041 CET	61652	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.705349922 CET	443	61652	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.721010923 CET	443	61648	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.721399069 CET	443	61648	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.721453905 CET	443	61648	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.721482992 CET	61648	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.721519947 CET	61648	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.721596003 CET	61648	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.721613884 CET	443	61648	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.721659899 CET	61648	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.721668005 CET	443	61648	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.723606110 CET	61653	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.723645926 CET	443	61653	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:04.723829031 CET	61653	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.723829031 CET	61653	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:04.723860025 CET	443	61653	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.116522074 CET	443	61651	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.117490053 CET	61651	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.117532015 CET	443	61651	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.118026972 CET	61651	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.118033886 CET	443	61651	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.126904011 CET	443	61650	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.129985094 CET	61650	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.129985094 CET	61650	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.130017996 CET	443	61650	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.130033970 CET	443	61650	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.254633904 CET	443	61651	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.254703999 CET	443	61651	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.254920006 CET	61651	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.254976034 CET	61651	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.254976034 CET	61651	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.254997015 CET	443	61651	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.255008936 CET	443	61651	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.258042097 CET	61654	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.258081913 CET	443	61654	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.258158922 CET	61654	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.258305073 CET	61654	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.258322001 CET	443	61654	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.258990049 CET	443	61650	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.259056091 CET	443	61650	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.259202957 CET	61650	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.259202957 CET	61650	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.259238005 CET	61650	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.259255886 CET	443	61650	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.261190891 CET	61655	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.261224031 CET	443	61655	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.261351109 CET	61655	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.265276909 CET	61655	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.265290022 CET	443	61655	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.452337980 CET	443	61652	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.453259945 CET	61652	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.453259945 CET	61652	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.453273058 CET	443	61652	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.453285933 CET	443	61652	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.466881037 CET	443	61653	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.467199087 CET	61653	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.467223883 CET	443	61653	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.469274998 CET	61653	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.469280958 CET	443	61653	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.586215019 CET	443	61652	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.586266994 CET	443	61652	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.586318970 CET	443	61652	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.586374998 CET	61652	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.586591959 CET	61652	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.586604118 CET	443	61652	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.586618900 CET	61652	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.586623907 CET	443	61652	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.588957071 CET	61656	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.588995934 CET	443	61656	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.589242935 CET	61656	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.589390039 CET	61656	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.589404106 CET	443	61656	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.599710941 CET	443	61653	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.599765062 CET	443	61653	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.599821091 CET	61653	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.599937916 CET	61653	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.599937916 CET	61653	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.599951029 CET	443	61653	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.599958897 CET	443	61653	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.601876974 CET	61657	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.601902962 CET	443	61657	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.602060080 CET	61657	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.602195024 CET	61657	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.602210045 CET	443	61657	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.980144024 CET	443	61654	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.980556011 CET	61654	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.980587006 CET	443	61654	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:05.981033087 CET	61654	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:05.981039047 CET	443	61654	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.004790068 CET	443	61655	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.005177021 CET	61655	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.005191088 CET	443	61655	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.005592108 CET	61655	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.005598068 CET	443	61655	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.114531040 CET	443	61654	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.115291119 CET	443	61654	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.115349054 CET	443	61654	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.115346909 CET	61654	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.115400076 CET	61654	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.115447044 CET	61654	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.115468979 CET	443	61654	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.115478992 CET	61654	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.115485907 CET	443	61654	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.118190050 CET	61658	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.118236065 CET	443	61658	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.118299961 CET	61658	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.118522882 CET	61658	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.118540049 CET	443	61658	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.137411118 CET	443	61655	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.137481928 CET	443	61655	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.137603045 CET	61655	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.137651920 CET	61655	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.137672901 CET	443	61655	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.137706041 CET	61655	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.137712002 CET	443	61655	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.140297890 CET	61659	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.140335083 CET	443	61659	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.140400887 CET	61659	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.140537024 CET	61659	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.140553951 CET	443	61659	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.336888075 CET	443	61656	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.337368965 CET	61656	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.337388992 CET	443	61656	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.338087082 CET	61656	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.338092089 CET	443	61656	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.372494936 CET	443	61657	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.372931957 CET	61657	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.372956991 CET	443	61657	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.373409033 CET	61657	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.373414993 CET	443	61657	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.469073057 CET	443	61656	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.469156981 CET	443	61656	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.469297886 CET	61656	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.469382048 CET	61656	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.469398022 CET	443	61656	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.469408035 CET	61656	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.469413042 CET	443	61656	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.472783089 CET	61660	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.472831964 CET	443	61660	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.472989082 CET	61660	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.473138094 CET	61660	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.473174095 CET	443	61660	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.504802942 CET	443	61657	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.504867077 CET	443	61657	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.504991055 CET	61657	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.505027056 CET	61657	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.505027056 CET	61657	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.505052090 CET	443	61657	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.505063057 CET	443	61657	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.507757902 CET	61661	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.507798910 CET	443	61661	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.507874966 CET	61661	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.508106947 CET	61661	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.508125067 CET	443	61661	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.869158030 CET	443	61658	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.870079994 CET	61658	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.870079994 CET	61658	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.870100975 CET	443	61658	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.870116949 CET	443	61658	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.883202076 CET	443	61659	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.883629084 CET	61659	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.883650064 CET	443	61659	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:06.884304047 CET	61659	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:06.884311914 CET	443	61659	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.000741005 CET	443	61658	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.000838995 CET	443	61658	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.000921011 CET	443	61658	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.000943899 CET	61658	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.001044035 CET	61658	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.001209974 CET	61658	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.001209974 CET	61658	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.001229048 CET	443	61658	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.001238108 CET	443	61658	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.004177094 CET	61662	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.004232883 CET	443	61662	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.004623890 CET	61662	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.004623890 CET	61662	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.004662991 CET	443	61662	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.138341904 CET	443	61659	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.138410091 CET	443	61659	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.138647079 CET	61659	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.138647079 CET	61659	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.138766050 CET	61659	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.138793945 CET	443	61659	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.141495943 CET	61663	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.141542912 CET	443	61663	13.107.246.45	192.168.2.4
Oct 31, 2024 16:32:07.141716003 CET	61663	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.141788960 CET	61663	443	192.168.2.4	13.107.246.45
Oct 31, 2024 16:32:07.141798019 CET	443	61663	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 16:30:43.121838093 CET	53	62554	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:43.124123096 CET	53	55249	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:44.433936119 CET	53	62958	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:44.673561096 CET	61963	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:44.673825026 CET	52336	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:47.136691093 CET	62870	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:47.137008905 CET	50620	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:47.143773079 CET	53	62870	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:47.143876076 CET	53	50620	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:48.097094059 CET	52678	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:48.097565889 CET	62485	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:48.102880955 CET	63438	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:48.103221893 CET	65170	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:48.110409021 CET	53	63438	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:48.135762930 CET	53	65170	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:49.634602070 CET	54925	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:49.634951115 CET	62610	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:49.637501001 CET	61890	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:49.638012886 CET	58737	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:49.642024040 CET	53	54925	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:49.666393995 CET	53	62610	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:50.042985916 CET	50445	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:50.043199062 CET	56678	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:50.050024986 CET	53	56678	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:50.050041914 CET	53	50445	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:51.500739098 CET	50075	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:51.500894070 CET	57777	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:30:51.507575035 CET	53	50075	1.1.1.1	192.168.2.4
Oct 31, 2024 16:30:51.507735968 CET	53	57777	1.1.1.1	192.168.2.4
Oct 31, 2024 16:31:00.848766088 CET	138	138	192.168.2.4	192.168.2.255
Oct 31, 2024 16:31:01.741972923 CET	53	50328	1.1.1.1	192.168.2.4
Oct 31, 2024 16:31:20.844129086 CET	53	64931	1.1.1.1	192.168.2.4
Oct 31, 2024 16:31:24.890494108 CET	53	50884	1.1.1.1	192.168.2.4
Oct 31, 2024 16:31:42.704282045 CET	53	55581	1.1.1.1	192.168.2.4
Oct 31, 2024 16:31:47.183633089 CET	63794	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:31:47.183995008 CET	63873	53	192.168.2.4	1.1.1.1
Oct 31, 2024 16:31:47.190601110 CET	53	63794	1.1.1.1	192.168.2.4
Oct 31, 2024 16:31:47.191124916 CET	53	63873	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 31, 2024 16:30:44.697293043 CET	192.168.2.4	1.1.1.1	c263	(Port unreachable)	Destination Unreachable
Oct 31, 2024 16:30:48.135824919 CET	192.168.2.4	1.1.1.1	c268	(Port unreachable)	Destination Unreachable
Oct 31, 2024 16:30:49.666449070 CET	192.168.2.4	1.1.1.1	c268	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 16:30:44.673561096 CET	192.168.2.4	1.1.1.1	0xd79d	Standard query (0)	na4.docusign.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:44.673825026 CET	192.168.2.4	1.1.1.1	0xfd77	Standard query (0)	na4.docusign.net	65	IN (0x0001)	false
Oct 31, 2024 16:30:47.136691093 CET	192.168.2.4	1.1.1.1	0x87b1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:47.137008905 CET	192.168.2.4	1.1.1.1	0x367	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 16:30:48.097094059 CET	192.168.2.4	1.1.1.1	0xcffe	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:48.097565889 CET	192.168.2.4	1.1.1.1	0xee06	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false
Oct 31, 2024 16:30:48.102880955 CET	192.168.2.4	1.1.1.1	0xcb25	Standard query (0)	a.docusign.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:48.103221893 CET	192.168.2.4	1.1.1.1	0x8af	Standard query (0)	a.docusign.com	65	IN (0x0001)	false
Oct 31, 2024 16:30:49.634602070 CET	192.168.2.4	1.1.1.1	0x3213	Standard query (0)	a.docusign.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:49.634951115 CET	192.168.2.4	1.1.1.1	0xd57a	Standard query (0)	a.docusign.com	65	IN (0x0001)	false
Oct 31, 2024 16:30:49.637501001 CET	192.168.2.4	1.1.1.1	0x5883	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:49.638012886 CET	192.168.2.4	1.1.1.1	0xaf03	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false
Oct 31, 2024 16:30:50.042985916 CET	192.168.2.4	1.1.1.1	0xf36f	Standard query (0)	api.mixpanel.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:50.043199062 CET	192.168.2.4	1.1.1.1	0x1fef	Standard query (0)	api.mixpanel.com	65	IN (0x0001)	false
Oct 31, 2024 16:30:51.500739098 CET	192.168.2.4	1.1.1.1	0x6335	Standard query (0)	api.mixpanel.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:51.500894070 CET	192.168.2.4	1.1.1.1	0xc9de	Standard query (0)	api.mixpanel.com	65	IN (0x0001)	false
Oct 31, 2024 16:31:47.183633089 CET	192.168.2.4	1.1.1.1	0xf0ea	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:31:47.183995008 CET	192.168.2.4	1.1.1.1	0x8c35	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 16:30:44.680608034 CET	1.1.1.1	192.168.2.4	0xd79d	No error (0)	na4.docusign.net	na4.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:44.697206974 CET	1.1.1.1	192.168.2.4	0xfd77	No error (0)	na4.docusign.net	na4.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:47.143773079 CET	1.1.1.1	192.168.2.4	0x87b1	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:47.143876076 CET	1.1.1.1	192.168.2.4	0x367	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 16:30:48.105074883 CET	1.1.1.1	192.168.2.4	0xee06	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:48.105484962 CET	1.1.1.1	192.168.2.4	0xcffe	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:48.110409021 CET	1.1.1.1	192.168.2.4	0xcb25	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:48.110409021 CET	1.1.1.1	192.168.2.4	0xcb25	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		52.33.228.130	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:48.110409021 CET	1.1.1.1	192.168.2.4	0xcb25	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		44.239.225.250	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:48.110409021 CET	1.1.1.1	192.168.2.4	0xcb25	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.187.212.170	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:48.135762930 CET	1.1.1.1	192.168.2.4	0x8af	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:49.642024040 CET	1.1.1.1	192.168.2.4	0x3213	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:49.642024040 CET	1.1.1.1	192.168.2.4	0x3213	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		52.33.228.130	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:49.642024040 CET	1.1.1.1	192.168.2.4	0x3213	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.187.212.170	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:49.642024040 CET	1.1.1.1	192.168.2.4	0x3213	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		44.239.225.250	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:49.644543886 CET	1.1.1.1	192.168.2.4	0x5883	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:49.646589041 CET	1.1.1.1	192.168.2.4	0xaf03	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:49.666393995 CET	1.1.1.1	192.168.2.4	0xd57a	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:50.050041914 CET	1.1.1.1	192.168.2.4	0xf36f	No error (0)	api.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:50.050041914 CET	1.1.1.1	192.168.2.4	0xf36f	No error (0)	api.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:50.050041914 CET	1.1.1.1	192.168.2.4	0xf36f	No error (0)	api.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:50.050041914 CET	1.1.1.1	192.168.2.4	0xf36f	No error (0)	api.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:51.507575035 CET	1.1.1.1	192.168.2.4	0x6335	No error (0)	api.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:51.507575035 CET	1.1.1.1	192.168.2.4	0x6335	No error (0)	api.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:51.507575035 CET	1.1.1.1	192.168.2.4	0x6335	No error (0)	api.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:51.507575035 CET	1.1.1.1	192.168.2.4	0x6335	No error (0)	api.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:30:56.726593971 CET	1.1.1.1	192.168.2.4	0x745c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:30:56.726593971 CET	1.1.1.1	192.168.2.4	0x745c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:31:11.091504097 CET	1.1.1.1	192.168.2.4	0x76e0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:31:11.091504097 CET	1.1.1.1	192.168.2.4	0x76e0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:31:38.122652054 CET	1.1.1.1	192.168.2.4	0x73a4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:31:38.122652054 CET	1.1.1.1	192.168.2.4	0x73a4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:31:47.190601110 CET	1.1.1.1	192.168.2.4	0xf0ea	No error (0)	www.google.com		172.217.23.100	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:31:47.191124916 CET	1.1.1.1	192.168.2.4	0x8c35	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 16:31:56.343367100 CET	1.1.1.1	192.168.2.4	0xbfb8	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:31:56.343367100 CET	1.1.1.1	192.168.2.4	0xbfb8	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

a.docusign.com

api.mixpanel.com

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:30:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 15:30:49 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=177293 Date: Thu, 31 Oct 2024 15:30:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49748	52.33.228.130	443	916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:30:49 UTC	540	OUT	GET /ds_arya_wrapper.min.js?f=1 HTTP/1.1 Host: a.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://na4.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:30:49 UTC	313	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:30:49 GMT Content-Length: 631 Connection: close Server: DS-Arya Expires: Fri, 01 Nov 2024 15:30:49 GMT Cache-Control: max-age=86400 Set-Cookie: ds_a=f24f9305-dbfe-46b9-b5ab-fac99f0c2ef1;Domain=.docusign.com;Max-Age=63072000;SameSite=None;Secure;Path=/;HttpOnly
2024-10-31 15:30:49 UTC	631	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 3b 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 66 2c 72 2c 65 2c 6f 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 72 65 74 75 72 6e 20 64 65 66 69 6e 65 28 6f 29 3b 66 26 26 66 5b 72 5d 3f 66 5b 72 5d 3d 6f 28 6e 2c 30 2c 21 30 2c 66 2c 72 2c 65 29 3a 75 5b 6e 5d 3d 6f 28 6e 2c 30 2c 21 30 2c 66 2c 72 2c 65 29 7d 28 22 44 53 5f 41 72 79 61 22 2c 30 2c 30 2c 75 2e 6d 6f 64 75 6c 65 2c 22 65 78 70 6f 72 74 73 22 2c 22 6c 65 6e 67 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 66 2c 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3d 7b 7d 2c 63 3d 28 73 28 66 75 6e 63 74 Data Ascii: (function(){var u=this;!function(n,t,i,f,r,e,o){if("function"==typeof define&&define.amd)return define(o);f&&f[r]?f[r]=o(n,0,!0,f,r,e):u[n]=o(n,0,!0,f,r,e)}("DS_Arya",0,0,u.module,"exports","length",function(t,i,n,f,r,e,o){"use strict";var u={},c=(s(funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:30:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 15:30:50 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=177349 Date: Thu, 31 Oct 2024 15:30:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 15:30:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49752	52.33.228.130	443	916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:30:50 UTC	415	OUT	GET /ds_arya_wrapper.min.js?f=1 HTTP/1.1 Host: a.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=f24f9305-dbfe-46b9-b5ab-fac99f0c2ef1
2024-10-31 15:30:50 UTC	313	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:30:50 GMT Content-Length: 631 Connection: close Server: DS-Arya Expires: Fri, 01 Nov 2024 15:30:50 GMT Cache-Control: max-age=86400 Set-Cookie: ds_a=f24f9305-dbfe-46b9-b5ab-fac99f0c2ef1;Domain=.docusign.com;Max-Age=63072000;SameSite=None;Secure;Path=/;HttpOnly
2024-10-31 15:30:50 UTC	631	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 3b 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 66 2c 72 2c 65 2c 6f 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 72 65 74 75 72 6e 20 64 65 66 69 6e 65 28 6f 29 3b 66 26 26 66 5b 72 5d 3f 66 5b 72 5d 3d 6f 28 6e 2c 30 2c 21 30 2c 66 2c 72 2c 65 29 3a 75 5b 6e 5d 3d 6f 28 6e 2c 30 2c 21 30 2c 66 2c 72 2c 65 29 7d 28 22 44 53 5f 41 72 79 61 22 2c 30 2c 30 2c 75 2e 6d 6f 64 75 6c 65 2c 22 65 78 70 6f 72 74 73 22 2c 22 6c 65 6e 67 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 66 2c 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3d 7b 7d 2c 63 3d 28 73 28 66 75 6e 63 74 Data Ascii: (function(){var u=this;!function(n,t,i,f,r,e,o){if("function"==typeof define&&define.amd)return define(o);f&&f[r]?f[r]=o(n,0,!0,f,r,e):u[n]=o(n,0,!0,f,r,e)}("DS_Arya",0,0,u.module,"exports","length",function(t,i,n,f,r,e,o){"use strict";var u={},c=(s(funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49754	35.190.25.25	443	916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:30:50 UTC	1195	OUT	GET /track/?data=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&ip=1&_=1730388649544 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://na4.docusign.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://na4.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:30:50 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https://na4.docusign.net Access-Control-Expose-Headers: X-MP-CE-Backoff Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store Content-Type: application/json Strict-Transport-Security: max-age=604800; includeSubDomains Date: Thu, 31 Oct 2024 15:30:50 GMT Content-Length: 1 Via: 1.1 google Alt-Svc: clear Connection: close
2024-10-31 15:30:50 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49755	35.190.25.25	443	916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:30:50 UTC	1197	OUT	GET /track/?data=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%3D&ip=1&_=1730388649547 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://na4.docusign.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://na4.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:30:50 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https://na4.docusign.net Access-Control-Expose-Headers: X-MP-CE-Backoff Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store Content-Type: application/json Strict-Transport-Security: max-age=604800; includeSubDomains Date: Thu, 31 Oct 2024 15:30:50 GMT Content-Length: 1 Via: 1.1 google Alt-Svc: clear Connection: close
2024-10-31 15:30:50 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49763	107.178.240.159	443	916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:30:52 UTC	991	OUT	GET /track/?data=eyJldmVudCI6ICJtcF9wYWdlX3ZpZXciLCJwcm9wZXJ0aWVzIjogeyIkb3MiOiAiV2luZG93cyIsIiRicm93c2VyIjogIkNocm9tZSIsIiRyZWZlcnJpbmdfZG9tYWluIjogIm5hNC5kb2N1c2lnbi5uZXQiLCIkc2NyZWVuX2hlaWdodCI6IDEwMjQsIiRzY3JlZW5fd2lkdGgiOiAxMjgwLCJtcF9saWIiOiAid2ViIiwiZGlzdGluY3RfaWQiOiAiMTkyZTMzMzY2NDIyZC0wYjZhNTJjMDkwMGYwNy0yNjAzMWU1MS0xNDAwMDAtMTkyZTMzMzY2NDMzMGQiLCIkaW5pdGlhbF9yZWZlcnJpbmdfZG9tYWluIjogIm5hNC5kb2N1c2lnbi5uZXQiLCJtcF9wYWdlIjogIm5hNC5kb2N1c2lnbi5uZXQiLCJtcF9yZWZlcnJlciI6ICJuYTQuZG9jdXNpZ24ubmV0IiwibXBfYnJvd3NlciI6ICJDaHJvbWUiLCJtcF9wbGF0Zm9ybSI6ICJXaW5kb3dzIiwidG9rZW4iOiAiNjI0NGJiOWUzMWRmNmQ4ZGNmOGM0MTM1ZGVmZTY0NjAifX0%3D&ip=1&_=1730388649547 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:30:52 UTC	507	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-MP-CE-Backoff Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store Content-Type: application/json Strict-Transport-Security: max-age=604800; includeSubDomains Date: Thu, 31 Oct 2024 15:30:52 GMT Content-Length: 1 Via: 1.1 google Alt-Svc: clear Connection: close
2024-10-31 15:30:52 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49764	107.178.240.159	443	916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:30:52 UTC	989	OUT	GET /track/?data=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&ip=1&_=1730388649544 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:30:52 UTC	507	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-MP-CE-Backoff Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store Content-Type: application/json Strict-Transport-Security: max-age=604800; includeSubDomains Date: Thu, 31 Oct 2024 15:30:52 GMT Content-Length: 1 Via: 1.1 google Alt-Svc: clear Connection: close
2024-10-31 15:30:52 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49784	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:30:56 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Bdk1MbCYZAPtUBY&MD=yRHDplKb HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-31 15:30:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: c1723814-9796-4093-94c5-d0781cf783e7 MS-RequestId: f59e3a99-4b88-4063-93d5-1e85583c5feb MS-CV: skLhDfGfBUyIvEwv.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 31 Oct 2024 15:30:56 GMT Connection: close Content-Length: 24490
2024-10-31 15:30:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-31 15:30:57 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	61517	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:36 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Bdk1MbCYZAPtUBY&MD=yRHDplKb HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-31 15:31:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: d22a21a4-53fc-4455-938d-7471802e28da MS-RequestId: ca7807c1-d9c4-41a0-be46-21d664d22159 MS-CV: j7sxsZiNhEGyr4io.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 31 Oct 2024 15:31:36 GMT Connection: close Content-Length: 30005
2024-10-31 15:31:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-31 15:31:37 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	61518	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:38 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:39 UTC	561	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:38 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153138Z-16849878b78wv88bk51myq5vxc0000000a10000000009w0x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:39 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-31 15:31:39 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-31 15:31:39 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-31 15:31:39 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-31 15:31:39 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-31 15:31:39 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-31 15:31:39 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-31 15:31:39 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-31 15:31:39 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-31 15:31:39 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	61521	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:40 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:40 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153140Z-16849878b7867ttgfbpnfxt44s00000009gg00000000qykg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:40 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	61522	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:40 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:40 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153140Z-16849878b78fkwcjkpn19c5dsn00000008n000000000ts1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:40 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	61523	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:40 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:40 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: a3cdd038-101e-0046-1366-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153140Z-15b8d89586f5s5nz3ffrgxn5ac0000000ag00000000062xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:40 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	61520	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:40 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:40 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153140Z-16849878b78fssff8btnns3b1400000009xg00000000qa1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:40 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	61524	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:41 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:41 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153141Z-16849878b78fkwcjkpn19c5dsn00000008u0000000004uaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:41 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	61525	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:41 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:41 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153141Z-15b8d89586f42m673h1quuee4s0000000dsg00000000egsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:41 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	61527	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:41 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:41 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 91249574-801e-0078-3dc7-27bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153141Z-17c5cb586f6f98jx9q4y7udcaw000000015g00000000hr4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:41 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	61526	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:41 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:41 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153141Z-16849878b785jrf8dn0d2rczaw0000000asg00000000v4b8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:41 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	61519	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:41 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:42 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f312709b-601e-0001-377c-2afaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153142Z-159b85dff8fgb9pzhC1DFW7mkc00000001p00000000049vu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:42 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	61528	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:42 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:42 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153142Z-16849878b78bjkl8dpep89pbgg00000008cg00000000k6s8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:42 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	61529	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:42 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153142Z-16849878b7867ttgfbpnfxt44s00000009ng00000000770h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:42 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	61530	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:42 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:42 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153142Z-16849878b78p8hrf1se7fucxk80000000agg00000000qv5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:42 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	61531	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:42 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: f0c209fa-601e-00ab-740d-2966f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153142Z-17c5cb586f6z6tq2xr35mhd5x000000002cg000000002wxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	61532	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:42 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153142Z-16849878b78z2wx67pvzz63kdg00000008d00000000043e5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:42 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	61533	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:43 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:43 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153143Z-16849878b78q9m8bqvwuva4svc0000000890000000009cf7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	61534	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:43 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:43 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 89d7e9f4-d01e-0066-46a8-2aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153143Z-16849878b78nzcqcd7bed2fb6n000000027g0000000042dn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:43 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	61537	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:43 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:43 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:43 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 360ad152-001e-0079-6bbd-2a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153143Z-159b85dff8fprglthC1DFW8zcg00000001p000000000287m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:43 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	61535	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:43 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:43 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f6a97644-d01e-0017-2411-2bb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153143Z-15b8d89586fwzdd88qtcg4dr18000000020g000000001nxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	61538	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:43 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:43 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:43 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153143Z-16849878b7867ttgfbpnfxt44s00000009fg00000000us4w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:43 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	61539	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:43 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:44 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1b580eb2-001e-00a2-4628-2bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153144Z-15b8d89586fnfb49yv03rfgz1c00000001e0000000004a3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:44 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	61541	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:44 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:44 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 5fd3a61a-e01e-0071-0feb-2a08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153144Z-16849878b78qf2gleqhwczd21s00000009xg00000000dac9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	61542	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:44 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:44 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153144Z-16849878b78qfbkc5yywmsbg0c00000009ag00000000nvua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:44 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	61540	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:44 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:44 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bf2855ec-b01e-0084-57b7-2ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153144Z-16849878b787wpl5wqkt5731b40000000ag000000000ac4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	61543	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:44 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:44 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153144Z-16849878b78wv88bk51myq5vxc0000000a30000000001hh4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	61544	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:45 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:45 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c990e8a6-c01e-0034-078c-2a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153145Z-159b85dff8fprglthC1DFW8zcg00000001q0000000000k6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:45 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	61545	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:45 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 4e15243a-401e-005b-2294-2a9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153145Z-159b85dff8f2qnk7hC1DFWwb2400000002cg00000000a3fm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	61546	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:45 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:45 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 283bb1f9-001e-0066-5cf3-2a561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153145Z-16849878b78x6gn56mgecg60qc0000000beg00000000rhs5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:45 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	61547	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:45 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:45 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: deaa19c2-701e-006f-33de-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153145Z-17c5cb586f69dpr98vcd9da8e8000000015g000000009apt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:45 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	61548	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:45 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 128a8aa7-901e-005b-27fd-272005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153145Z-15b8d89586f42m673h1quuee4s0000000dw0000000005tf7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	61549	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:46 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:46 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:46 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 860be216-201e-0071-14dc-2aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153146Z-159b85dff8fbvrz4hC1DFW730c00000000y0000000001fsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:46 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	61551	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:46 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:46 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153146Z-16849878b78qg9mlz11wgn0wcc000000098000000000n4ft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	61552	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:46 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153146Z-15b8d89586ff5l62aha9080wv00000000ay000000000mg0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	61550	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:46 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:46 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: ce95f5ab-001e-0034-242a-27dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153146Z-17c5cb586f6wmhkn5q6fu8c5ss000000095g00000000bmvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:46 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	61553	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:46 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:46 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:46 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: daa440d4-101e-0028-4cca-2a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153146Z-17c5cb586f6fqqst87nqkbsx1c000000086000000000aqkm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:46 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	61554	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:46 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:46 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153146Z-16849878b782d4lwcu6h6gmxnw00000009c000000000g689 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:47 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	61555	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:47 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:47 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153147Z-16849878b78qg9mlz11wgn0wcc000000097g00000000pxt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:47 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	61556	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:47 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:47 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153147Z-16849878b7867ttgfbpnfxt44s00000009pg000000002xx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:47 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	61557	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:47 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:47 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:47 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: f3394f62-601e-0070-07f3-2aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153147Z-16849878b78wv88bk51myq5vxc00000009xg00000000q1fz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:47 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	61558	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:47 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:47 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153147Z-16849878b78j7llf5vkyvvcehs0000000aug00000000awku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:47 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	61559	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:47 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:47 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 82dd15c7-901e-0064-46c7-2ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153147Z-159b85dff8fdjprfhC1DFWuqh000000000hg000000006fd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:47 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	61561	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:48 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:48 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:48 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 11245d39-601e-0070-68de-2aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153148Z-159b85dff8fbvrz4hC1DFW730c00000000vg0000000088z6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:48 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	61562	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:48 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:48 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153148Z-16849878b7828dsgct3vrzta70000000083g00000000hemu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:48 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	61563	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:48 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:48 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:48 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153148Z-16849878b78qg9mlz11wgn0wcc00000009c0000000004fh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:48 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	61564	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:48 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:48 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:48 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9703a0f8-701e-0001-7449-2bb110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153148Z-17c5cb586f6wmhkn5q6fu8c5ss000000097g000000006uqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:48 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	61565	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:48 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:48 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:48 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153148Z-16849878b78z2wx67pvzz63kdg000000088000000000rw6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:48 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	61568	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:48 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:48 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153148Z-16849878b78q9m8bqvwuva4svc000000088g00000000bhgs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	61567	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:48 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9f4f074d-601e-00ab-77c7-2a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153149Z-17c5cb586f6tg7hbbt0rp19dan00000001z000000000fpmt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	61566	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:48 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 5926a802-601e-0032-207f-2aeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153149Z-16849878b7828dsgct3vrzta70000000084g00000000dbs9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:49 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	61569	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:49 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 43d41d11-d01e-0028-575c-2b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153149Z-15b8d89586fnfb49yv03rfgz1c000000018g00000000fzrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	61570	13.107.246.45	443	916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:49 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: dca3eddb-501e-008c-6f6b-2acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153149Z-159b85dff8f9mtxchC1DFWf9vg000000010000000000fg6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:49 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	61572	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:49 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: b4a596e1-701e-0097-7b31-2bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153149Z-17c5cb586f6tg7hbbt0rp19dan000000021g000000007hza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:49 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	61573	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:49 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b7b81bb6-b01e-0084-3bc8-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153149Z-17c5cb586f6zcqf8r7the4ske0000000022000000000a24e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	61571	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:50 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 07599615-001e-0082-48f6-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153150Z-17c5cb586f69w69mgazyf263an00000008zg00000000apsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	61574	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:50 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a9b9ee84-f01e-001f-7a95-2a5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153150Z-17c5cb586f6f98jx9q4y7udcaw00000001bg000000001pmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	61575	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:50 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153150Z-16849878b78p49s6zkwt11bbkn00000009bg00000000g1y3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	61576	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:50 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:50 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 1048e377-301e-0000-11d0-2aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153150Z-17c5cb586f6wmhkn5q6fu8c5ss000000094g00000000eg2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:50 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	61577	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:50 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:50 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:50 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 4fe48f14-f01e-005d-23b7-2a13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153150Z-159b85dff8fbvrz4hC1DFW730c00000000t000000000f0bz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:50 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	61578	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:50 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:51 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 24f20e23-801e-0078-0539-2bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153151Z-15b8d89586fmhjx6a8nf3qm53c00000003ng000000005f03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:51 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	61579	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:50 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153151Z-16849878b78g2m84h2v9sta29000000008q0000000006xm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	61580	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:51 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:51 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153151Z-16849878b7867ttgfbpnfxt44s00000009eg00000000xqvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:51 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	61581	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:51 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153151Z-16849878b78g2m84h2v9sta29000000008kg00000000mwvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	61582	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:51 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:51 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153151Z-16849878b78hh85qc40uyr8sc80000000a1000000000a2cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	61584	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:51 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:51 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 3c311aa7-c01e-008e-22a5-2a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153151Z-17c5cb586f6ks725u50g36qts800000001vg0000000054ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:51 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	61583	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:51 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:51 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153151Z-16849878b78qf2gleqhwczd21s00000009zg000000005f6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:51 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	61585	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:52 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:52 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: bde7aa86-f01e-0052-08e5-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153152Z-17c5cb586f6p5pndayxh2uxv54000000018000000000n42n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:52 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	61586	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:52 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: e1f5471d-e01e-0051-4f6c-2784b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153152Z-15b8d89586f6nn8zqg1h5suba8000000052000000000112t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	61587	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:52 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:52 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 927ac0b1-901e-0083-7fcc-2abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153152Z-159b85dff8fdthgkhC1DFWk0rw00000001mg00000000acrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:52 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	61588	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:52 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:52 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 6bbe0222-301e-0051-45fe-2a38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153152Z-15b8d89586f5s5nz3ffrgxn5ac0000000agg000000004nhc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:52 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	61589	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:52 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153152Z-15b8d89586fvpb59307bn2rcac00000004tg00000000cx1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	61590	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:53 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e6885a93-401e-0078-5ec2-2a4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153153Z-159b85dff8fdthgkhC1DFWk0rw00000001rg000000002mcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	61591	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:53 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:53 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9f581369-601e-00ab-15c9-2a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153153Z-16849878b78qf2gleqhwczd21s00000009u000000000tvfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	61592	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:53 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:53 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153153Z-16849878b78p49s6zkwt11bbkn00000009ag00000000nsfy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	61593	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:53 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:53 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 4f8161d3-a01e-00ab-6acd-2a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153153Z-159b85dff8f9mtxchC1DFWf9vg00000001500000000008zs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:53 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	61594	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:53 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: d871491f-101e-0046-2593-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153153Z-159b85dff8fsgrl7hC1DFWadan00000002eg000000002nr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	61595	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:54 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:54 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: f410ee1c-401e-0047-3649-2b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153154Z-17c5cb586f6fqqst87nqkbsx1c000000083g00000000gy8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:54 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	61596	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:54 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:54 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153154Z-16849878b78qfbkc5yywmsbg0c00000009eg000000006ch9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:54 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	61597	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:54 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:54 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 34089ae0-601e-005c-0dae-2af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153154Z-159b85dff8f7x84jhC1DFWaghs00000001d000000000dw1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:54 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	61598	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:54 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:54 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 45a27b82-c01e-002b-5784-2a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153154Z-17c5cb586f6tg7hbbt0rp19dan000000023g000000000qrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:54 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	61599	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:54 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:54 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:54 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 560a6fa2-801e-0083-6978-2bf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153154Z-159b85dff8fdthgkhC1DFWk0rw00000001mg00000000acv8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:54 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	61600	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:55 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:55 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153155Z-16849878b78xblwksrnkakc08w0000000910000000006duu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:55 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	61601	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:55 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:55 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:55 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153155Z-16849878b78fssff8btnns3b1400000009x000000000txp3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:55 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	61602	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:55 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:55 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:55 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 97090380-701e-0032-52b4-2aa540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153155Z-16849878b78smng4k6nq15r6s40000000b8g00000000act3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:55 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	61603	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:55 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:55 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:55 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153155Z-16849878b786lft2mu9uftf3y40000000ay000000000kset x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:55 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	61604	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:55 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:55 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ca4b2a6a-001e-000b-1aff-2615a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153155Z-17c5cb586f626sn8grcgm1gf80000000086000000000c8s0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:55 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	61605	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:55 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153156Z-15b8d89586ffsjj9qb0gmb1stn0000000dw000000000dkvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:56 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	61606	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:56 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:56 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153156Z-16849878b78bcpfn2qf7sm6hsn0000000bd0000000003y6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:31:56 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	61607	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:56 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153156Z-16849878b78nzcqcd7bed2fb6n000000022g00000000rfb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:56 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	61608	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:56 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153156Z-16849878b78wc6ln1zsrz6q9w8000000099g00000000th3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:56 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	61609	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:56 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 53a1c2dc-701e-003e-3d57-2b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153156Z-15b8d89586fzcfbd8we4bvhqds00000004mg00000000d7px x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:56 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	61610	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:56 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153156Z-16849878b78km6fmmkbenhx76n00000008z000000000t1cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:56 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	61611	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:56 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 24b2bddd-501e-0016-07ca-2a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153156Z-16849878b786lft2mu9uftf3y40000000b100000000067fd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:57 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	61612	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:56 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:57 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153157Z-16849878b78sx229w7g7at4nkg00000007v000000000v21x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:57 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	61613	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:57 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:57 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:57 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5ab4434b-401e-000a-2f95-2a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153157Z-159b85dff8f2qnk7hC1DFWwb2400000002hg0000000034wh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:57 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	61614	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:57 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:57 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153157Z-16849878b78km6fmmkbenhx76n000000094g000000004b8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:57 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	61615	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:57 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:57 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:57 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153157Z-16849878b78fssff8btnns3b1400000009w000000000vdpf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:57 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	61616	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:57 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:57 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: eb0745eb-f01e-003c-6cca-2a8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153157Z-17c5cb586f69dpr98vcd9da8e8000000012g00000000g8fe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:57 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	61617	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:57 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:58 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153158Z-16849878b78smng4k6nq15r6s40000000b7g00000000e4e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:58 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	61618	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:58 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:58 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153158Z-16849878b78qwx7pmw9x5fub1c00000007s000000000u7t2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:58 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	61619	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:58 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:58 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:58 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153158Z-16849878b785dznd7xpawq9gcn0000000b0000000000u1mb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:58 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	61620	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:58 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:58 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: f0ac2fb9-601e-003e-0667-2a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153158Z-17c5cb586f6jwd8h9y40tqxu5w00000000s000000000h6eg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:58 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	61621	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:58 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:58 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:58 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: e1cf8e51-d01e-00a1-6880-2935b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153158Z-159b85dff8fvjwrdhC1DFWsn1000000001g0000000006kh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:58 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	61622	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:58 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:58 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:58 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153158Z-16849878b786fl7gm2qg4r5y700000000a20000000005923 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:58 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	61623	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:58 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 93439f28-801e-00ac-63f6-2afd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153159Z-15b8d89586flzzksdx5d6q7g1000000004tg00000000f269 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:59 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	61624	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:59 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 4f1ccae2-501e-0064-3ff9-2a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153159Z-15b8d89586ff5l62aha9080wv00000000b2g000000008n9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:59 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	61625	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:59 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:59 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153159Z-16849878b78wv88bk51myq5vxc0000000a0g00000000bs5v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:59 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	61626	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:59 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4fde2afa-301e-0099-279b-276683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153159Z-17c5cb586f69p7mmw593w958p4000000014g000000000qmt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:59 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	61627	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:59 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:31:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153159Z-16849878b78fhxrnedubv5byks000000083000000000860h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:31:59 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	61628	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:31:59 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:00 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153159Z-16849878b78wv88bk51myq5vxc00000009x000000000ss5r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:00 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	61631	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:00 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:00 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:00 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153200Z-16849878b78hh85qc40uyr8sc800000009w000000000w3m6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:00 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	61630	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:00 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:00 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:00 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7b68ac53-d01e-0082-7e67-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153200Z-16849878b78tg5n42kspfr0x4800000009p000000000r5u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:32:00 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	61632	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:00 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:00 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:00 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 5c4d015b-701e-0097-6b71-28b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153200Z-15b8d89586fzhrwgk23ex2bvhw0000000cqg00000000aqzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:00 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	61633	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:00 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:00 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:00 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 0f14d228-a01e-0021-799c-2b814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153200Z-159b85dff8fdjprfhC1DFWuqh000000000eg000000006t2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:32:00 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	61634	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:01 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:01 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:01 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 56c29abd-201e-0000-6535-2aa537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153201Z-17c5cb586f6ks725u50g36qts800000001w0000000003rkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:01 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	61635	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:01 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:01 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:01 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4113dc96-c01e-008e-5a2a-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153201Z-16849878b78fkwcjkpn19c5dsn00000008rg00000000dbs8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:01 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	61636	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:01 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:01 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:01 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153201Z-16849878b785jrf8dn0d2rczaw0000000ayg000000004f1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:32:01 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	61637	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:01 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:02 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:01 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153201Z-16849878b786lft2mu9uftf3y40000000avg00000000uqzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:02 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	61638	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:02 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:02 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153202Z-16849878b78km6fmmkbenhx76n000000092000000000e7qv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	61640	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:02 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:02 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:02 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153202Z-16849878b78smng4k6nq15r6s40000000b7g00000000e4p9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:02 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	61639	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:02 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:02 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:02 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4da15e59-501e-0029-361e-2bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153202Z-15b8d89586f42m673h1quuee4s0000000du000000000ahh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:32:02 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	61641	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:02 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:02 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:02 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153202Z-16849878b78smng4k6nq15r6s40000000b7000000000g7rh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:02 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	61642	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:03 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:03 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:03 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153203Z-16849878b78x6gn56mgecg60qc0000000bkg000000007bs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:03 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	61643	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:03 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:03 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:03 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153203Z-16849878b78tg5n42kspfr0x4800000009sg000000009dcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:03 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	61644	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:03 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:03 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:03 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153203Z-16849878b78p49s6zkwt11bbkn00000009e0000000006v7c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:03 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	61645	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:03 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:03 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:03 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153203Z-16849878b7828dsgct3vrzta70000000081g00000000rxvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:03 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	61647	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:04 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:04 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:04 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: c49cf7be-b01e-0002-3880-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153204Z-16849878b78p8hrf1se7fucxk80000000agg00000000qwyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:04 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	61646	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:04 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:04 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:04 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: d4940829-c01e-0014-691e-27a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153204Z-17c5cb586f6f98jx9q4y7udcaw00000001a0000000005v6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:04 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	61649	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:04 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:04 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:04 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153204Z-15b8d89586ffsjj9qb0gmb1stn0000000e10000000001qtx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:04 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	61648	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:04 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:04 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:04 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153204Z-16849878b786lft2mu9uftf3y40000000az000000000eeeh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:32:04 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	61651	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:05 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:05 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e20e9adc-401e-0083-18ae-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153205Z-16849878b78zqkvcwgr6h55x9n000000092g00000000saq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:05 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	61650	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:05 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:05 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:05 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 7a68eea2-001e-00a2-2aac-2ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153205Z-159b85dff8fsgrl7hC1DFWadan00000002ag0000000087q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:05 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	61652	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:05 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:05 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:05 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 692fb0cd-a01e-0070-2974-2a573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153205Z-15b8d89586fpccrmgpemqdqe5800000004m000000000a95z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:05 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	61653	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:05 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:05 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153205Z-16849878b7828dsgct3vrzta70000000087g000000001s65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:05 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	61654	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:05 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:06 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 897ec3ad-201e-005d-0167-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153206Z-16849878b7828dsgct3vrzta70000000085000000000b25k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:06 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	61655	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:05 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:06 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: ef1abc9b-501e-0029-5887-28d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153206Z-15b8d89586fvpb59307bn2rcac00000004zg000000000emn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:06 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	61656	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:06 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:06 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153206Z-16849878b78j5kdg3dndgqw0vg0000000bh00000000012h2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:06 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	61657	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:06 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:06 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153206Z-16849878b78km6fmmkbenhx76n00000008z000000000t2b4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:06 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	61658	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:06 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:06 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 623250e5-d01e-00ad-1e9c-27e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153206Z-16849878b7898p5f6vryaqvp580000000afg00000000qcgc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:06 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	61659	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:06 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:07 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:07 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 8e66950d-f01e-0003-769c-274453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153206Z-16849878b78x6gn56mgecg60qc0000000bg000000000grvu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:07 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	61660	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:32:07 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:32:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:32:07 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: bb0f4686-e01e-0033-4aaf-2a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T153207Z-17c5cb586f6l54tjt07kuq05pc00000000vg000000000sxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:32:07 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2188, Parent PID: 3684

General

Target ID:	0
Start time:	11:30:37
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 916, Parent PID: 2188

General

Target ID:	2
Start time:	11:30:41
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1992,i,4131933963223236764,10375215342501524208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6356, Parent PID: 3684

General

Target ID:	3
Start time:	11:30:44
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na4.docusign.net/Signing/EmailStart.aspx?a=efd4acd3-3acc-4088-a2a7-53241bdf60b1&etti=24&acct=667bdcdf-7e30-4b26-9a28-cdfd47d27620&er=280620f2-b628-44e5-bd4d-0943c13c18f7"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://na4.docusign.net/Signing/EmailStart.aspx?a=efd4acd3-3acc-4088-a2a7-53241bdf60b1&etti=24&acct=667bdcdf-7e30-4b26-9a28-cdfd47d27620&er=280620f2-b628-44e5-bd4d-0943c13c18f7

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Windows Analysis Report
https://na4.docusign.net/Signing/EmailStart.aspx?a=efd4acd3-3acc-4088-a2a7-53241bdf60b1&etti=24&acct=667bdcdf-7e30-4b26-9a28-cdfd47d27620&er=280620f2-b628-44e5-bd4d-0943c13c18f7