Edit tour

Windows Analysis Report
ResumeKR.pdf

Overview

General Information

Sample name:	ResumeKR.pdf
Analysis ID:	1562496
MD5:	a58e112cb4ef114c45758a8bedd09a64
SHA1:	07fa1dbf31d0f48a81a58581b8b4d79fff35db4a
SHA256:	ba75893d4cbfc31b2f27dcfe4748afe3b20c07be1c42d4a591daac32011521c8
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 4524 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\ResumeKR.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 6192 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 5776 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1344,i,7329765949995824427,13631409799317529830,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 8044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://mailto:rode.ketan98@gmail.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4776 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: Title: Gmail does not match URL

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1164913258&timestamp=1732548722798
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1164913258&timestamp=1732548722798
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S253597853%3A1732548708985093&ddm=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:50010 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 34.193.227.236 34.193.227.236

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 34.193.227.236
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /psdk/v2/content?surfaceId=ACROBAT_READER_MASTER_SURFACEID&surfaceId=DC_READER_LAUNCH_CARD&surfaceId=DC_Reader_RHP_Banner&surfaceId=DC_Reader_RHP_Retention&surfaceId=Edit_InApp_Aug2020&surfaceId=DC_FirstMile_Right_Sec_Surface&surfaceId=DC_Reader_Upsell_Cards&surfaceId=DC_FirstMile_Home_View_Surface&surfaceId=DC_Reader_RHP_Intent_Banner&surfaceId=DC_Reader_Disc_LHP_Banner&surfaceId=DC_Reader_Edit_LHP_Banner&surfaceId=DC_Reader_Convert_LHP_Banner&surfaceId=DC_Reader_Sign_LHP_Banner&surfaceId=DC_Reader_More_LHP_Banner&surfaceId=DC_Reader_Disc_LHP_Retention&surfaceId=DC_Reader_Home_LHP_Trial_Banner&adcProductLanguage=en-us&adcVersion=23.6.20320&adcProductType=SingleClientMini&adcOSType=WIN&adcCountryCode=US&adcXAPIClientID=api_reader_desktop_win_23.6.20320&encodingScheme=BASE_64 HTTP/1.1Host: p13n.adobe.ioConnection: keep-alivesec-ch-ua: "Chromium";v="105"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01x-adobe-uuid: 89d789c4-e7e5-4f75-95a4-57139ab6811fx-adobe-uuid-type: visitorIdx-api-key: AdobeReader9sec-ch-ua-platform: "Windows"Origin: https://rna-resource.acrobat.comAccept-Language: en-US,en;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://rna-resource.acrobat.com/Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EfeMOVL4ZVOW8Ag&MD=34rmAM78 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mail/u/0/ HTTP/1.1Host: mail.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1164913258&timestamp=1732548722798 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EfeMOVL4ZVOW8Ag&MD=34rmAM78 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=2lyKahjW_wzkYYlCPVzRmqv8cLpXEbMGclzMkOCxfafkKnnDr8A1hxOVcdlB8yA-xXtS3ElJP1glll9yuAqUj7CdAZzwJXpwIVA9Xhui3IxfEAD4Knwz8G_GoF-uxotDHD0T7vPujoX9roLy1d6B8ZN-kGQUi0s6nm5dzHwJy4Xi-hJ9LxjSLcs
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=I4dNTkfUnKXn9DRgtkstq15WrRV9-bcolD8RchE3mmpJYPnlMp6EHbBkP50A3CgQ7VZ3CIRHxoTeKWvYQ0xEtX2Xu_8mX2KRCn5x9zBoxwfa2Xv4tV_jy490SFFagBtdFxoFlMe_oej0d8-EpRkwB2i0CYu8sz5n8w6QllT0hFLAXnXj7l4UREQ
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=I4dNTkfUnKXn9DRgtkstq15WrRV9-bcolD8RchE3mmpJYPnlMp6EHbBkP50A3CgQ7VZ3CIRHxoTeKWvYQ0xEtX2Xu_8mX2KRCn5x9zBoxwfa2Xv4tV_jy490SFFagBtdFxoFlMe_oej0d8-EpRkwB2i0CYu8sz5n8w6QllT0hFLAXnXj7l4UREQ
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=zFykNgFgZNLnED7rkjomTYwiV8rWhEFfAaNskTKpR2TX8ci3s7EV7s8P6qvqxAZpQJCaYCB7a0la5RwYUNUz1sv7y_JNpB7kM-7KcdzHPB2pNRD-JR6Mv7Ue8DFF7K3enDvqmZcsfZ0A1IGX_iBC7LtQHNKgX5Pod4w-BKwpICFx6aTs8FqCEDFXzL-_aKM
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=zFykNgFgZNLnED7rkjomTYwiV8rWhEFfAaNskTKpR2TX8ci3s7EV7s8P6qvqxAZpQJCaYCB7a0la5RwYUNUz1sv7y_JNpB7kM-7KcdzHPB2pNRD-JR6Mv7Ue8DFF7K3enDvqmZcsfZ0A1IGX_iBC7LtQHNKgX5Pod4w-BKwpICFx6aTs8FqCEDFXzL-_aKM
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=zFykNgFgZNLnED7rkjomTYwiV8rWhEFfAaNskTKpR2TX8ci3s7EV7s8P6qvqxAZpQJCaYCB7a0la5RwYUNUz1sv7y_JNpB7kM-7KcdzHPB2pNRD-JR6Mv7Ue8DFF7K3enDvqmZcsfZ0A1IGX_iBC7LtQHNKgX5Pod4w-BKwpICFx6aTs8FqCEDFXzL-_aKM
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=zFykNgFgZNLnED7rkjomTYwiV8rWhEFfAaNskTKpR2TX8ci3s7EV7s8P6qvqxAZpQJCaYCB7a0la5RwYUNUz1sv7y_JNpB7kM-7KcdzHPB2pNRD-JR6Mv7Ue8DFF7K3enDvqmZcsfZ0A1IGX_iBC7LtQHNKgX5Pod4w-BKwpICFx6aTs8FqCEDFXzL-_aKM
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gmail.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_234.9.dr

String found in binary or memory: _.Dq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.Dq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.Dq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.Dq(_.Mq(c))+"&hl="+_.Dq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.Dq(m)+"/chromebook/termsofservice.html?languageCode="+_.Dq(d)+"&regionCode="+_.Dq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: gmail.com
Source: global traffic	DNS traffic detected: DNS query: mail.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 546sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Goog-AuthUser: 0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://accounts.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: 77EC63BDA74BD0D0E0426DC8F80085060.2.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_234.9.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_234.9.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_229.9.dr, chromecache_235.9.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_234.9.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_235.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_235.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_234.9.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_234.9.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_234.9.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2_darkmode.svg
Source: chromecache_229.9.dr, chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/speedbump/take_selfie.svg
Source: chromecache_229.9.dr, chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/speedbump/take_selfie_dark_mode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_229.9.dr, chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_235.9.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_234.9.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_229.9.dr, chromecache_235.9.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://www.google.com
Source: chromecache_234.9.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_235.9.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_235.9.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_235.9.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_235.9.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_235.9.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_235.9.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: ResumeKR.pdf	String found in binary or memory: https://www.ketanrode.com/)
Source: ResumeKR.pdf	String found in binary or memory: https://www.ketanrode.com/cc_app)
Source: ResumeKR.pdf	String found in binary or memory: https://www.ketanrode.com/tasteai-restaurant-review-analyzer-and-recommender)
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_222.9.dr, chromecache_234.9.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443

Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.5:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:50010 version: TLS 1.2

Source: classification engine

Classification label: clean2.winPDF@42/101@19/11

Source: ResumeKR.pdf	Initial sample: https://www.ketanrode.com/
Source: ResumeKR.pdf	Initial sample: https://www.ketanrode.com/cc_app
Source: ResumeKR.pdf	Initial sample: https://www.ketanrode.com/tasteai-restaurant-review-analyzer-and-recommender

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-11-25 10-31-16-398.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\ResumeKR.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1344,i,7329765949995824427,13631409799317529830,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://mailto:rode.ketan98@gmail.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4776 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1344,i,7329765949995824427,13631409799317529830,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4776 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: ResumeKR.pdf	Initial sample: PDF keyword /JS count = 0
Source: ResumeKR.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: ResumeKR.pdf

Initial sample: PDF keyword stream count = 28

Source: ResumeKR.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: ResumeKR.pdf

Initial sample: PDF keyword obj count = 75

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	1 Drive-by Compromise	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://www.ketanrode.com/cc_app)	0%	Avira URL Cloud	safe
https://www.ketanrode.com/)	0%	Avira URL Cloud	safe
https://www.ketanrode.com/tasteai-restaurant-review-analyzer-and-recommender)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www3.l.google.com	172.217.19.238	true	false	high
play.google.com	172.217.19.206	true	false	high
mail.google.com	172.217.21.37	true	false	high
www.google.com	142.250.181.68	true	false	high
gmail.com	142.250.181.69	true	false	high
windowsupdatebg.s.llnwi.net	178.79.238.128	true	false	high
accounts.youtube.com	unknown	unknown	false	high
x1.i.lencr.org	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	high
https://mail.google.com/mail/u/0/	false	high
https://www.google.com/favicon.ico	false	high
https://play.google.com/log?hasfast=true&authuser=0&format=json	false	high
http://gmail.com/	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.2.dr	false		high
https://play.google/intl/	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://families.google.com/intl/	chromecache_234.9.dr	false		high
https://youtube.com/t/terms?gl=	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://policies.google.com/technologies/location-data	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://www.google.com/intl/	chromecache_234.9.dr	false		high
https://apis.google.com/js/api.js	chromecache_229.9.dr, chromecache_235.9.dr	false		high
https://policies.google.com/privacy/google-partners	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://play.google.com/work/enroll?identifier=	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://policies.google.com/terms/service-specific	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://g.co/recover	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://policies.google.com/privacy/additional	chromecache_234.9.dr	false		high
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_234.9.dr	false		high
https://www.ketanrode.com/tasteai-restaurant-review-analyzer-and-recommender)	ResumeKR.pdf	false	Avira URL Cloud: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://policies.google.com/terms	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_229.9.dr, chromecache_235.9.dr	false		high
https://www.google.com	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_234.9.dr	false		high
https://www.ketanrode.com/cc_app)	ResumeKR.pdf	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://support.google.com/accounts?hl=	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://www.ketanrode.com/)	ResumeKR.pdf	false	Avira URL Cloud: safe	unknown
https://policies.google.com/terms/location	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://policies.google.com/privacy	chromecache_234.9.dr	false		high
https://support.google.com/accounts?p=new-si-ui	chromecache_222.9.dr, chromecache_234.9.dr	false		high
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_222.9.dr, chromecache_234.9.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.206	play.google.com	United States	15169	GOOGLEUS	false
142.250.181.69	gmail.com	United States	15169	GOOGLEUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
172.217.21.36	unknown	United States	15169	GOOGLEUS	false
172.217.21.37	mail.google.com	United States	15169	GOOGLEUS	false
172.217.19.238	www3.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
34.193.227.236	unknown	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.9
192.168.2.5
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562496
Start date and time:	2024-11-25 16:30:17 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ResumeKR.pdf
Detection:	CLEAN
Classification:	clean2.winPDF@42/101@19/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.50.252.167, 172.64.41.3, 162.159.61.3, 52.5.13.197, 52.202.204.11, 23.22.254.206, 54.227.187.23, 178.79.238.128, 23.195.61.56, 192.229.221.95, 2.20.40.170, 23.54.81.176, 23.54.81.169, 2.19.198.200, 23.32.238.82, 2.19.198.195, 23.32.238.83, 23.32.238.66, 2.19.198.82, 23.32.238.64, 23.32.238.67, 23.32.238.59, 216.58.208.227, 172.217.17.46, 74.125.205.84, 34.104.35.123, 172.217.21.42, 172.217.19.10, 172.217.19.234, 142.250.181.42, 142.250.181.74, 142.250.181.106, 142.250.181.138, 172.217.17.42, 216.58.208.234, 172.217.19.202, 172.217.17.74, 172.217.21.35, 142.250.181.10, 172.217.17.35, 64.233.165.84
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, e4578.dscb.akamaiedge.net, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, fonts.gstatic.com, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, ssl.adobe.com.edgekey.net, armmf.adobe.com, edgedl.me.gvt1.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: ResumeKR.pdf

Simulations

Behavior and APIs

Time	Type	Description
10:31:25	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Input	Output
URL: https://google.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://google.com
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&os Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "AWS", "Snowflake", "Excel", "MySQL", "PostgreSQL", "MongoDB (NoSQL)", "DBT", "Hadoop", "PySpark" ] }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&os Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }
URL: https://accounts.google.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://accounts.google.com
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&os Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&os Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&os Model: Joe Sandbox AI	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are consistent with Google's account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&os Model: Joe Sandbox AI	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&os Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&os Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-ermsamLkvt1Y6_7Yr3Mm1O65TduMCdpotdfK-2v3rhqIObvRIhJU1sjP79tl9pzPcTaF2qWg&os Model: Joe Sandbox AI	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are consistent with Google's account login pages." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	http://esaleerugs.com	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	Annual_Q4_Benefits_&_Bonus_for_Ed.riley#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	HTMLPhisher	Browse
	https://vectaire.doclawfederal.com/uDLtT/	Get hash	malicious	HTMLPhisher	Browse
	https://esaleerugs.com	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	https://newbuck12.oss-ap-southeast-7.aliyuncs.com/pJKrbGSI.txt	Get hash	malicious	Unknown	Browse
	https://pastebin.com/raw/0v6Vhvpb	Get hash	malicious	Unknown	Browse
	https://docs.zoom.us/doc/5mbYcD6lRBK5O3HcDEXhFA?from=email	Get hash	malicious	Unknown	Browse
	http://begantotireo.xyz	Get hash	malicious	Unknown	Browse
34.193.227.236	file (1).txt.bat	Get hash	malicious	Unknown	Browse
	estimate Cost.pdf	Get hash	malicious	Unknown	Browse
	original.eml	Get hash	malicious	Unknown	Browse
	Demande de proposition du Fondation qu#U00e9b#U00e9coise du cancer.pdf	Get hash	malicious	Unknown	Browse
	Scan_7341292.pdf	Get hash	malicious	HTMLPhisher	Browse
	scan1738761_rsalinas@wcctxlaw.com.pdf	Get hash	malicious	HTMLPhisher	Browse
	Cotain Spires (RFP) ID#88763.pdf	Get hash	malicious	Unknown	Browse
	Sales_Contract_Main_417053608_09.2024.pdf	Get hash	malicious	Unknown	Browse
	Final_Contract_Copy-532392974.pdf	Get hash	malicious	Unknown	Browse
	Cbequipment-Voice Audio Interface.pdf	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
windowsupdatebg.s.llnwi.net	http://esaleerugs.com	Get hash	malicious	Unknown	Browse	178.79.238.0
	KAHILINGAN NG BADYET 25-11-2024#U00b7pdf.vbs	Get hash	malicious	Remcos, GuLoader	Browse	178.79.238.128
	file.exe	Get hash	malicious	LummaC Stealer	Browse	178.79.238.0
	0Nj1sxmCtr.exe	Get hash	malicious	Binder HackTool, Quasar	Browse	178.79.238.128
	registration.msi	Get hash	malicious	AteraAgent	Browse	178.79.238.128
	Digital.msi	Get hash	malicious	AteraAgent	Browse	178.79.238.0
	file_66efd0132ceed.msi	Get hash	malicious	AteraAgent	Browse	178.79.238.0
	Guidelines_for_Citizen_Safety.msi	Get hash	malicious	AteraAgent	Browse	178.79.238.0
	e0#U05ea.msi	Get hash	malicious	AteraAgent	Browse	178.79.238.0
	ReceitaFederal-consulta-yFZMA-45896_v.3_35687.msi	Get hash	malicious	AteraAgent	Browse	178.79.238.0

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-AESUS	la.bot.arm7.elf	Get hash	malicious	Unknown	Browse	54.157.44.82
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	35.170.19.66
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	18.215.109.226
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	18.207.108.84
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	54.92.225.151
	la.bot.arm6.elf	Get hash	malicious	Unknown	Browse	44.210.2.196
	loligang.spc.elf	Get hash	malicious	Mirai	Browse	54.136.192.68
	loligang.ppc.elf	Get hash	malicious	Mirai	Browse	54.133.8.87
	loligang.arm7.elf	Get hash	malicious	Mirai	Browse	18.234.171.111
	loligang.mpsl.elf	Get hash	malicious	Mirai	Browse	44.221.131.45

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	http://esaleerugs.com	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	Annual_Q4_Benefits_&_Bonus_for_Ed.riley#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	HTMLPhisher	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	https://vectaire.doclawfederal.com/uDLtT/	Get hash	malicious	HTMLPhisher	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	https://esaleerugs.com	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	https://newbuck12.oss-ap-southeast-7.aliyuncs.com/pJKrbGSI.txt	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	https://pastebin.com/raw/0v6Vhvpb	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	https://docs.zoom.us/doc/5mbYcD6lRBK5O3HcDEXhFA?from=email	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	http://begantotireo.xyz	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164
	http://begantotireo.xyz	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 2.18.109.164

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.151185172997477
Encrypted:	false
SSDEEP:	6:HAplFT+q2P92nKuAl9OmbnIFUt8YApl/FmWZmw+YApl/FNVkwO92nKuAl9OmbjLJ:gHFT+v4HAahFUt87H/AW/+7H/3V5LHAR
MD5:	392F0DB553F8C5106F4B4CA617E2BE51
SHA1:	F41B0C03895A041C340DEC9AE2A43C62F93A0C21
SHA-256:	03320BC5D2368EA26ACCD92CAEBFF64E02A2C235416E045242DF8278E84E4538
SHA-512:	4AB9166AC4CAB8944F0FE54D31DC39B7970DA498EBEAA2D10337F9470A0B711873B332BD39F99F94C3D5EDED055B1EF199E410D570B16D1D211DBF3753C02822
Malicious:	false
Reputation:	low
Preview:	2024/11/25-10:31:14.842 1bec Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/25-10:31:14.844 1bec Recovering log #3.2024/11/25-10:31:14.844 1bec Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.151185172997477
Encrypted:	false
SSDEEP:	6:HAplFT+q2P92nKuAl9OmbnIFUt8YApl/FmWZmw+YApl/FNVkwO92nKuAl9OmbjLJ:gHFT+v4HAahFUt87H/AW/+7H/3V5LHAR
MD5:	392F0DB553F8C5106F4B4CA617E2BE51
SHA1:	F41B0C03895A041C340DEC9AE2A43C62F93A0C21
SHA-256:	03320BC5D2368EA26ACCD92CAEBFF64E02A2C235416E045242DF8278E84E4538
SHA-512:	4AB9166AC4CAB8944F0FE54D31DC39B7970DA498EBEAA2D10337F9470A0B711873B332BD39F99F94C3D5EDED055B1EF199E410D570B16D1D211DBF3753C02822
Malicious:	false
Reputation:	low
Preview:	2024/11/25-10:31:14.842 1bec Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/25-10:31:14.844 1bec Recovering log #3.2024/11/25-10:31:14.844 1bec Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.121205454938148
Encrypted:	false
SSDEEP:	6:HAplT66q2P92nKuAl9Ombzo2jMGIFUt8YAplTJ9ZZmw+YAplTJ9zkwO92nKuAl97:gHW6v4HAa8uFUt87H99Z/+7H99z5LHAv
MD5:	ED2C83D5EF505D593DFC017C98924D05
SHA1:	B4BB04F1A05AB58F7B0FAFAA91B4C53F71E38C3D
SHA-256:	6CEC0FDAD5D7F8119A0257F33F3539F418C8C09637177C735BDF9165683F361C
SHA-512:	0F0F0837760A1ADBF6E526F6B6E02BD4B4532012C7C47C2DD448600CD628B8B57C05DCBD94E469DDCCBC0354ACEB4C30048FD79E08D10B64A8E89A330C63080A
Malicious:	false
Reputation:	low
Preview:	2024/11/25-10:31:14.914 1a40 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/11/25-10:31:14.915 1a40 Recovering log #3.2024/11/25-10:31:14.915 1a40 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.121205454938148
Encrypted:	false
SSDEEP:	6:HAplT66q2P92nKuAl9Ombzo2jMGIFUt8YAplTJ9ZZmw+YAplTJ9zkwO92nKuAl97:gHW6v4HAa8uFUt87H99Z/+7H99z5LHAv
MD5:	ED2C83D5EF505D593DFC017C98924D05
SHA1:	B4BB04F1A05AB58F7B0FAFAA91B4C53F71E38C3D
SHA-256:	6CEC0FDAD5D7F8119A0257F33F3539F418C8C09637177C735BDF9165683F361C
SHA-512:	0F0F0837760A1ADBF6E526F6B6E02BD4B4532012C7C47C2DD448600CD628B8B57C05DCBD94E469DDCCBC0354ACEB4C30048FD79E08D10B64A8E89A330C63080A
Malicious:	false
Reputation:	low
Preview:	2024/11/25-10:31:14.914 1a40 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/11/25-10:31:14.915 1a40 Recovering log #3.2024/11/25-10:31:14.915 1a40 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\3dfcb717-e783-4c7b-a61f-0e33f414a2e7.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.047195090775108
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqnT/sBdOg2HXcaq3QYiubxnP7E4TfF+:Y2sRdsgTAdMHW3QYhbxP7np+
MD5:	70321A46A77A3C2465E2F031754B3E06
SHA1:	5E7E713285D36F12ACFC68A34D8A34FD33C96B34
SHA-256:	344DA48DA0F9A5CC258E10D6C28086B7718CBE596CDC3D7A2A61C8F5FD781248
SHA-512:	E885342B270FE3D538F17F8F80B9ED061B30EE55624177BD81F5C65C033160D71559D60872BC0F99C0C93FAE29F9D09FD5042B68D83CD538154D1335BAC8205D
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340988966329963","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144691},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7e348768-cd54-4b4c-bc8e-67250a2b3d10.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	508
Entropy (8bit):	5.052242844548376
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq2MK2sBdOg2HBOgcaq3QYiubxnP7E4TfF+:Y2sRdsF1bdMHM3QYhbxP7np+
MD5:	772FD98096E21B2704D5715FACF16328
SHA1:	41AFD24D4C079E521A7C9BB6379740D0CCA28EAC
SHA-256:	4624A501DCA9C748D33692F2A4E57D78FBE37FFBF636CF4C858D95A4DAB4A422
SHA-512:	DC63E55EDF45C5E75711CC4B8BEADDE0B0F94EED3225F5B607A9816BCAEA430289487A976AEA1D78EB239380987655784238FB2C24FF589786C48B8D84ADE8C3
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13377108683168737","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":693308},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.047195090775108
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqnT/sBdOg2HXcaq3QYiubxnP7E4TfF+:Y2sRdsgTAdMHW3QYhbxP7np+
MD5:	70321A46A77A3C2465E2F031754B3E06
SHA1:	5E7E713285D36F12ACFC68A34D8A34FD33C96B34
SHA-256:	344DA48DA0F9A5CC258E10D6C28086B7718CBE596CDC3D7A2A61C8F5FD781248
SHA-512:	E885342B270FE3D538F17F8F80B9ED061B30EE55624177BD81F5C65C033160D71559D60872BC0F99C0C93FAE29F9D09FD5042B68D83CD538154D1335BAC8205D
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340988966329963","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144691},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF564236.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.047195090775108
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqnT/sBdOg2HXcaq3QYiubxnP7E4TfF+:Y2sRdsgTAdMHW3QYhbxP7np+
MD5:	70321A46A77A3C2465E2F031754B3E06
SHA1:	5E7E713285D36F12ACFC68A34D8A34FD33C96B34
SHA-256:	344DA48DA0F9A5CC258E10D6C28086B7718CBE596CDC3D7A2A61C8F5FD781248
SHA-512:	E885342B270FE3D538F17F8F80B9ED061B30EE55624177BD81F5C65C033160D71559D60872BC0F99C0C93FAE29F9D09FD5042B68D83CD538154D1335BAC8205D
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340988966329963","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144691},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.237557906689823
Encrypted:	false
SSDEEP:	96:QqBpCqGp3Al+NehBmkID2w6bNMhugoKTNY+No/KTNcygLPGLLUCnrNC0weNZ:rBpJGp3AoqBmki25ZEVoKTNY+NoCTNLz
MD5:	46B8195AF0F88C2F954AF4D1E24F722A
SHA1:	56312F6A4284CE766CCE99B130AF1C538C9FA596
SHA-256:	3A351E94469B5CC059561D32DD20DDFC6967807B8D07D76D613D094DE7FDA792
SHA-512:	542EBFBAC30DA67D872611864CADD55B23DE082F64F1857DA533A6E15275B5330FF58C48F0D58B675E66654DA3AB7C43F69099734C8FD36B378BB110DDC8D535
Malicious:	false
Preview:	*...#................version.1..namespace-.1a.o................next-map-id.1.Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/.0.K..r................next-map-id.2.Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/.1.m.Fr................next-map-id.3.Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.2.8.o................next-map-id.4.Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/.3.A-N^...............Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/-j..^...............Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/[.\|.a...............Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/....a...............Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.W.@o................next-map-id.5.Pnamespace-8fb46ac3_c992_47ca_bb04_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.132550935329167
Encrypted:	false
SSDEEP:	6:HAplncIq2P92nKuAl9OmbzNMxIFUt8YAplndFThZmw+YAplndFT7kwO92nKuAl9c:gHncIv4HAa8jFUt87Hndlh/+7Hndl75z
MD5:	30BDF0CE067099D85FF051C9C1E59D8E
SHA1:	23A0F01B6B93061306EB82ED3910ED62806A4DBB
SHA-256:	78D2BAC6E13C2CDB98C8917FE7CF500945EC5FEB2AA239B35D83C11B04077CA9
SHA-512:	C9B81B16DBA13228D5FC0D5E0FC58170FB93688850B69BD7DD4D7074E762B57CCD03140CE2AA9815AB7AAC26E56858C20618FFA6922A3280B40652E1EFD6D74F
Malicious:	false
Preview:	2024/11/25-10:31:15.027 1a40 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/11/25-10:31:15.028 1a40 Recovering log #3.2024/11/25-10:31:15.028 1a40 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.132550935329167
Encrypted:	false
SSDEEP:	6:HAplncIq2P92nKuAl9OmbzNMxIFUt8YAplndFThZmw+YAplndFT7kwO92nKuAl9c:gHncIv4HAa8jFUt87Hndlh/+7Hndl75z
MD5:	30BDF0CE067099D85FF051C9C1E59D8E
SHA1:	23A0F01B6B93061306EB82ED3910ED62806A4DBB
SHA-256:	78D2BAC6E13C2CDB98C8917FE7CF500945EC5FEB2AA239B35D83C11B04077CA9
SHA-512:	C9B81B16DBA13228D5FC0D5E0FC58170FB93688850B69BD7DD4D7074E762B57CCD03140CE2AA9815AB7AAC26E56858C20618FFA6922A3280B40652E1EFD6D74F
Malicious:	false
Preview:	2024/11/25-10:31:15.027 1a40 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/11/25-10:31:15.028 1a40 Recovering log #3.2024/11/25-10:31:15.028 1a40 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241125153118Z-162.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	2.3864414728301604
Encrypted:	false
SSDEEP:	96:2sMA7hso8DdrbAsQDBBN4+wtzu4rIVDYGV5MMRdHLMMMCU9RDZDa18M3Rpr20+rV:2Asz9r+HsZ2rtVFBROXpRDMt7BSikmoX
MD5:	EEEFDA02FD92EE4FF7A6AD113ACB798F
SHA1:	7C37983DAAA6241D3A3FBE33F24407270897EE93
SHA-256:	0804ED92A74D901BA152979B5681FACBC24C86B77A20853E5C082291FEEC7663
SHA-512:	E48126DB20957EA56E3E03AF945ED8EB64954DCB3087D4486DCFA24CEB71E5F615ED4B80A670406B9501EA7BB21309DD68723250632BBDCC4EDFBCC171A58A6D
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.756901573172974
Encrypted:	false
SSDEEP:	3:kkFkly0kPtfllXlE/HT8ki1/jNNX8RolJuRdxLlGB9lQRYwpDdt:kKr0seT8zNMa8RdWBwRd
MD5:	7FD602C79C6E0C601A5A9B3A57CB132C
SHA1:	F506A82FB95A26463574F698D2954D068EA721A8
SHA-256:	1B38043C3E218DB12E7E3D3E7FEB19E6253841762BE2E367275D9A7B5C6213D1
SHA-512:	EE2532EA13358C4DFAE9E6C65AE97E273B0A2EAD0BAEBFCEE8519F0BB29ADEF3EFDB1D4D49825EAA313F5792EF9638EE1D20FB18635D09C3B6588E643C72DC81
Malicious:	false
Preview:	p...... ............O?..(....................................................... ..........W....G...............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	290
Entropy (8bit):	2.9844219596585932
Encrypted:	false
SSDEEP:	6:kKLaPL9Usw9L+N+SkQlPlEGYRMY9z+4KlDA3RUe/:zCiD9LNkPlE99SNxAhUe/
MD5:	CCD1D967A70D89E14D9AD4C0655149A0
SHA1:	1616AB69B9E29903A4409969BEAFBA3B74AF904A
SHA-256:	62D8EA0CAB97CB31B783EA375DEBFD24A5B95DF699A9C3037B48EC09D0A84E1B
SHA-512:	535A3DADA26E8CF904307D9FE2B3BAA18ADA9DD19A910308C9AEF8931DC4B21A8101C65379C6C5811C281B5D1F656E313EA75E37CBED81AEB9D67F157762FFA2
Malicious:	false
Preview:	p...... ...........)O?..(....................................................... ........G..@.......................h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.5664

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.5664

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	227002
Entropy (8bit):	3.392780893644728
Encrypted:	false
SSDEEP:	1536:WKPC4iyzDtrh1cK3XEivK7VK/3AYvYwgF/rRoL+sn:DPCaJ/3AYvYwglFoL+sn
MD5:	87EDBEE38F56C20298F25D5D3D4D1B5C
SHA1:	7F904E9615AC3186A87472EF366DD8202855B0B7
SHA-256:	A46B56D3ABCC137D1872DDF20EED4BCD7D04518282282ADB32DDCCF70D7FFBA6
SHA-512:	BBEBC1FCD5BC9AE042DD5782425BA8C47BF3EAC283B2487FC4E3FF6BF8101306DAB081E5135594165D4DC1AC120FF125AADBC5B3FFE7C646183C04DF77865E0D
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.3703016283106315
Encrypted:	false
SSDEEP:	6:YEQXJ2HXO5EBVKVx+FIbRI6XVW7+0YYzVieoAvJM3g98kUwPeUkwRe9:YvXKXEWmUYpW7sVGMbLUkee9
MD5:	0AA2ACD029758387F88B34AA523CDF8C
SHA1:	B2CA08B6949E43095887F33CABEEC37E31803E2D
SHA-256:	41DF83CD8099DC9DF3105E759A2C1886157373C87BD64513864763E5643DE6DA
SHA-512:	922FE3127E13A9D716897B8B2B8E566647A7BC4A67DA3B8DE35FAEB086DF5B32ABA80712289CB25504C874D36DD25D9CED49DE1D89C0A6F8D5249F39A7985D84
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.309314723095721
Encrypted:	false
SSDEEP:	6:YEQXJ2HXO5EBVKVx+FIbRI6XVW7+0YYzVieoAvJfBoTfXpnrPeUkwRe9:YvXKXEWmUYpW7sVGWTfXcUkee9
MD5:	B7B0A9EF632D99CCF23B73C72D6F1891
SHA1:	44382F1849AE6AF52CA8A9C9DF5EAB38419ABB81
SHA-256:	4F9DE85CA748BDAF3A373B75BF11BBB90C7663CE9F7A4AE26AA23F6610022ABF
SHA-512:	71711C022D1F35AEB4AFD1B53CA340CBEFAB28418238022DA3FAF49FEFA6FD87A03031005197B12ED9D2D2F2C38CC1E24D605806566851E52248ACC5F303B29B
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.287574218453528
Encrypted:	false
SSDEEP:	6:YEQXJ2HXO5EBVKVx+FIbRI6XVW7+0YYzVieoAvJfBD2G6UpnrPeUkwRe9:YvXKXEWmUYpW7sVGR22cUkee9
MD5:	E2555606488B72FAE2CCECEB7141177D
SHA1:	BB641E1345259C8D2D0DD01848DB5D885277A128
SHA-256:	12EB9F74EA50C19B1775CA57B5FE3752BFBFA5FE99BBAF76C547D396B4A0FD38
SHA-512:	0DACC365856E180434E6FCC78A4235E2D43B6069279BA2164F6243165EA9D30CFF39D8A865563B500682FBD77F8D2D030700A859B6572C46D207B319B77AC752
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.349437953052057
Encrypted:	false
SSDEEP:	6:YEQXJ2HXO5EBVKVx+FIbRI6XVW7+0YYzVieoAvJfPmwrPeUkwRe9:YvXKXEWmUYpW7sVGH56Ukee9
MD5:	ABF95B6BB5C76BB2DA8B4D4633D63919
SHA1:	574C46213B57CC2D8FC6C989B38580CF4BA2D86E
SHA-256:	B4906107AF2DE0D2AAFF6CFBDD5F7860CDD1AF82876E79CEF2B4BA2EEDAA27F5
SHA-512:	F66E8CBA71746923F58533129A94F9669B574C3DABC6475EA20DA34F18288B9CE7FB1A35AAF106F3EF390EF337A6D793FFE8B6FE60EAF59B36B0D579E94A6C45
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.689232346020524
Encrypted:	false
SSDEEP:	24:Yv6XoFis6pLgE9cQx8LennAvzBvkn0RCmK8czOCCSUm:Yvws6hgy6SAFv5Ah8cv/Um
MD5:	BCF8B974CB5C324C39FA387BA9563056
SHA1:	39E7805121A2F50045E53A1AA5F11D00B9109555
SHA-256:	9EC24639145581E10C170F9388600E2EFA8C7F2612440B1D87338D772482E912
SHA-512:	574364257D2486814ACD6703A82017BE945045166B8AA2589B314E11D49689165F765EF3563AB4E0DC7F2FFAAEB443208DC52EB99D7F6751E6A15D056907E6CE
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1122
Entropy (8bit):	5.678909906698202
Encrypted:	false
SSDEEP:	24:Yv6XoFiscVLgEwcp06ybnAvz7xHn0RCmK8czOCYHfl8zdBdm:YvwscFgSNycJUAh8cvYHmm
MD5:	654A37F53D452884FD5EA73468798073
SHA1:	4B80F93A7A6D0726D05265E381522FCDC7A0F297
SHA-256:	F9785AC9D017D0AAD6DCB5C081FE5CAE09926C40BBD4DC11830DD2D59D8414EB
SHA-512:	1432B45D520F06FB0F692D90D0F48C8DEB2923F85D204214DCDB6848ADDC7B04A2EEEC8CDBABFBE67D3A37CF4131184564315EB5A10FFC6D3ACFEE5E9B322061
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93181_288855ActionBlock_0","campaignId":93181,"containerId":"1","controlGroupId":"","treatmentId":"1aad653c-ef44-43f7-be1c-3a2ba2cf2cfc","variationId":"288855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuIFBERiBmb3JtcyAmIGFncmVlbWVudHMuIn0sInRjY

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.293119729874553
Encrypted:	false
SSDEEP:	6:YEQXJ2HXO5EBVKVx+FIbRI6XVW7+0YYzVieoAvJfQ1rPeUkwRe9:YvXKXEWmUYpW7sVGY16Ukee9
MD5:	C86B40F25C3B0BD9B67EFBF094A43670
SHA1:	CB95DD6AD8D1090CD52DC3656AFA4C889814B55B
SHA-256:	EF1F58DC48AABC62BA796B79B1A1E4442C1296A009EC3363C418856A42A04C00
SHA-512:	849CD677809F0A944827FDA3524178520D6DA9C9C63902AA3DED0511734EBBB49D4FE2D123FA255CB5A66210E03A591C9DC308F4E35789CD13DF45232ADF2E10
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1102
Entropy (8bit):	5.67400359508696
Encrypted:	false
SSDEEP:	24:Yv6XoFisB2LgErcXWl7y0nAvzIBcSJCBViVdm:YvwsBogH47yfkB5kVUm
MD5:	2D30664F7485A9DFF6C34E7D67C4CE09
SHA1:	73F23FAB36E7EF3662BC6F9827B905A10D7B0D1B
SHA-256:	C69E78505C8B79F74FD0F5A83FA440ACF724C1E60B64EE5D296C05286423EAC2
SHA-512:	8A9EAA06A246ECABA9BB683E3BF46F7141AD752DCE1CD52E377E83D99A0CCFEF5BE2001490E0CAB8266D4F71E3B27D71880AD304395516BE82D2E5BE82511381
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93181_288855ActionBlock_1","campaignId":93181,"containerId":"1","controlGroupId":"","treatmentId":"533ab5eb-b236-4889-89a5-ac002261d71e","variationId":"288855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkVkaXRQREZSZHJBcHBGdWxsIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTRweCIsImZvbnRfc3R5bGUiOiIwIn0sImRlc2NyaXB0aW9uX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTJweCIsImZvbnRfc3R5bGUiOiItMSJ9LCJ0aXRsZSI6bnVsbCwiZGVzY3JpcHRpb24iOiJFZGl0IHRleHQsIGltYWdlcywgcGFnZXMsIGFuZCBtb3JlLiJ9LCJ0Y2F0SWQiOm51bGx9","da

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.699104239136043
Encrypted:	false
SSDEEP:	24:Yv6XoFisBKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5dm:YvwsBEgqprtrS5OZjSlwTmAfSKvm
MD5:	679F0E4209F1BA472FE5BFCF1885A319
SHA1:	5421ADCF65CCBF4A699317A1F0B76DE334E12239
SHA-256:	A4DDD4572DA4A62EFE460E664D3DCBD38E1E6AC188B8EFF7A2DE42AD5C77358E
SHA-512:	6CE3F1718F5C2D964FE3ECD4798E8F3209761261A262540AD799317DA4422AFC5D90410B9B41418619D82E9F8BB6F64FEB2D5FE110A033D6CC2818473B7E9542
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.300036977773097
Encrypted:	false
SSDEEP:	6:YEQXJ2HXO5EBVKVx+FIbRI6XVW7+0YYzVieoAvJfYdPeUkwRe9:YvXKXEWmUYpW7sVGg8Ukee9
MD5:	C0C49F5BA2BE0B864A2257549FD9F1A2
SHA1:	C72C104AE57FACB47BEAFA71D70DB689C44B8FD9
SHA-256:	67C1578CF09051ACD687F60497E34923AA8ED73656270901D6F0F428386E3140
SHA-512:	EC9B0A67F51D94EC3A0772F3441D0F895B34924BDE124A20602FB7E88B817B50620A7A4EA18EC1969AE4F1BDC634257AFFAC6B3B49B5F388843214D8479B1347
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.286088001613101
Encrypted:	false
SSDEEP:	6:YEQXJ2HXO5EBVKVx+FIbRI6XVW7+0YYzVieoAvJf+dPeUkwRe9:YvXKXEWmUYpW7sVG28Ukee9
MD5:	886D0C535E2C81CB1A799403BFA1AFFB
SHA1:	0C2755E89CBD8698A5BDD8C4B87963F2802A2890
SHA-256:	28B90D7B4A7CE5DDC0CFB1B6FD20396A28E13B4A8D27DB2527A6B55461CAEE41
SHA-512:	2AD35C9D83DB0236CF7CF0EF3A126CE3DDF41A650063482C160EEC33A8A7E9398292259892636E423E4E1F6441E7E3C7EDF1FE71A95C07268A65B09F62105AAB
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.283583821304188
Encrypted:	false
SSDEEP:	6:YEQXJ2HXO5EBVKVx+FIbRI6XVW7+0YYzVieoAvJfbPtdPeUkwRe9:YvXKXEWmUYpW7sVGDV8Ukee9
MD5:	9D69E24D7E1E4F831603632FB1609FE4
SHA1:	B78449A7DC063186E7A0821436194093AC69902A
SHA-256:	2F7D4BBE602B9AEE70312D4B5A64A6E567E799CF545C753E50F3C2C95B1469B2
SHA-512:	D4746873E5F66072B25017EFC994E759DB65C372928BD4F9E875F55288394F21C4A3AB7AF591743BE4E776A1A6CCAAC1BC43951FB7E32B4E3239BF3F028A742F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.285257552415146
Encrypted:	false
SSDEEP:	6:YEQXJ2HXO5EBVKVx+FIbRI6XVW7+0YYzVieoAvJf21rPeUkwRe9:YvXKXEWmUYpW7sVG+16Ukee9
MD5:	943DBF68BB73CC48FC4315418329A602
SHA1:	52A488FA89EE4EA82C149ACD5F2B8C44803EBB89
SHA-256:	076C6FD8DB81BD34ACBCE5C6C2247F1B0B98B41FFC1D975FE254001DC275AC7E
SHA-512:	ADC247F08A27EE66CE041F32067C05E6C32A7816B35DE0E9ABF58350A78C85029FD02DE39D4259E1F8DE329534124E4EA6FA74557C934F4096EA263A18C5DDEE
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.662456634328902
Encrypted:	false
SSDEEP:	24:Yv6XoFismamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BSUm:YvwsoBgkDMUJUAh8cvMUm
MD5:	706C416379C7716818F3EA5CADB37F8C
SHA1:	40DAC0DE2FFCE5E543ABAD3A2660123970065138
SHA-256:	DEA19E0813856F79F3FFBB5646060F42499F744652E6BBB38B14058E4A4F8F48
SHA-512:	D502689E19B9A28FF88E76D361A32DBF927CE777892265E208BC4544DC922E0DB68B18CB8D7A73B883F7CE963E1207F718DF8B3C13DF7D9B5B54A46A02508884
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.257376034899556
Encrypted:	false
SSDEEP:	6:YEQXJ2HXO5EBVKVx+FIbRI6XVW7+0YYzVieoAvJfshHHrPeUkwRe9:YvXKXEWmUYpW7sVGUUUkee9
MD5:	61EDD95ECE24D518820DD601BAC4AA20
SHA1:	6CD4E375237E65C3F30C3E1BCE3AB9265CDD40A1
SHA-256:	8736F37CF839F9399403C49C4C7970D2CC01CADA6A620854B82FF38F5EFA916C
SHA-512:	6D23E3350AC865F1C2ED103DEDD74A403232D52ACC79D80BA91ADC3CE5D42F8D276BCD8A97FA29DBD7077F45CC6D57ADF10994E72E94C25F5F887E73CDD9E1CF
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.366919490944804
Encrypted:	false
SSDEEP:	12:YvXKXEWmUYpW7sVGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhW5M1:Yv6XoFisx168CgEXX5kcIfANhUm
MD5:	B9E6B708E87D003890813F7A7AF28C0E
SHA1:	C340479D87A6F8E419EBA408F72FE503031341A5
SHA-256:	F6B6E38CD9C987F9DE094D3170C164F0F692D087B28FAF6F4B9EAB9B4B13273E
SHA-512:	8E822C65C82C0E63ED64B2D40320056140B102C4C812D3079510700BC93EEC9DE94ED89061AB8BE173E5E40BA6AE2667D1D94983B3CE0534CD8B6661A1D8028D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"9d6cb67d-a5d1-48fd-859c-8347b9dfae36","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732727005694,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1732548685725}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2817
Entropy (8bit):	5.142915372824415
Encrypted:	false
SSDEEP:	48:YzYNkmvM9QYxtaKN0AO+7quUXkp40FNZafHKvlUHrLp9NsJl:HWRbmA9YUmoDvO+
MD5:	BFA1309EDB0C7FE320F0E6B03D1997A9
SHA1:	35124B84BEA8C9BD74776DDF13B5EDBDB2824F6D
SHA-256:	5D48424EAC10353BA5296ADA007CF98112730A0E68CEB4E8FF69C78DAA5FC8A9
SHA-512:	2F661A3714B8C6FF9CF811FB1113A281960B726CFE073351F8A35D0ABCEF95227769E87B0DB5A2A2CCA73EDA2860952B82E8623F946B19FB35004B94EFC99547
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"83368b270db16010348c0a5d5a6c3322","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1122,"ts":1732548685000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"f5580b0af0734f067d6dc6aade892e23","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1732548685000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"5f1a767976aeaa365e9f20e66f34dc04","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1732548685000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"0ba33ba3972be1d394a5f851c61e1e51","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1732548685000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"38aa3513b2c44845d0eda87496ff165d","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1102,"ts":1732548685000},{"id":"Edit_InApp_Aug2020","info":{"dg":"6760d51c5d3d6685e27e4c40af3583ef","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9851513310443339
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs6I1RZKHs/Ds/SpjE4zJwtNBwtNbRZ6bRZ4qEF:TVl2GL7ms6ggOVpDzutYtp6P6
MD5:	5FEC244BBFA2D558B00682137AE54AA5
SHA1:	09F3EAB0E71E65ABC0275C07F5D0BEBD08F79032
SHA-256:	171EC55414FF32D13D5BC352F2FFBF2754459F4F561FFFD08B6FA78759818D00
SHA-512:	7DA749053F5670354EA2CF6B8A293B05BB1D4B3C52F6BB81741DE8F933EA6DB3BE5062D6872E60D76720634A7F156AA60AFFB0CE2E3EC028A90F1FC533B3B086
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3385464115747177
Encrypted:	false
SSDEEP:	24:7+tunAD1RZKHs/Ds/SpjEPzJwtNBwtNbRZ6bRZWf1RZKOqLBx/XYKQvGJF7ursz:7MyGgOVp8zutYtp6PMLqll2GL7msz
MD5:	334238675E3946AE3E55905EA2248AB4
SHA1:	5786F3F0EFBC450B25E167284BF7C35FEB0BA361
SHA-256:	3A64E28845366026A662494AC2D48FDF3D7809E60271624FE819126A05747532
SHA-512:	D16AD53419A8F4D83EFBF3425BA0DEE05A7A2B788C25AD229BF8FC0B688B5C895662F5EE3FE66824209EDF03C006EE64DD6FAD354FAD5C4960911DA47078BC96
Malicious:	false
Preview:	.... .c.....%.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgsBnW/9ZcjNUCqFP09htTMxfACOWYyu:6a6TZ44ADE9uNNO89htoxYgK
MD5:	71DA5ABBFF4447F793C6C18CBE80EC32
SHA1:	C7350F328ADAF147A1348258628A31B6ED5AC3B9
SHA-256:	794C37329955AAC5F99E15A79B684DD52953DC39DDC4CBE6C41EF2C57A1A3DE7
SHA-512:	1170C47C496FFB4481F2F3F359F73BA63E05311FEE03B268C838E21D043120EC80057384385C23680082D019C4A00FBF28DFC1F8FCBB66D55E1413451F52E40F
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSI60618.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.4963635481307946
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8fvdN3ClH:Qw946cPbiOxDlbYnuRK+C9
MD5:	335C6C6FF7F44A9142ABE6BE9BAFE4A3
SHA1:	C4C7DB9E8BDCA8EE31AB95836D81E629F12DED25
SHA-256:	2903D707E965335315609E5E00EA337F686310E9631929D2A301ADF9EF044782
SHA-512:	06CA79CBCBD89697C7D6A2E188F5E40343834AB64DC311990410D01F47C69A7B211BEB68114F2996BCC941E9D5017F819E9F489B25019726DA0FDFE1115D1EAC
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .2.5./.1.1./.2.0.2.4. . .1.0.:.3.1.:.2.1. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-11-25 10-31-16-398.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.376360055978702
Encrypted:	false
SSDEEP:	384:6b1sdmfenwop+WP21h2RPjRNg7JjO2on6oU6CyuJw1oaNIIu9EMuJuF6MKK9g9JQ:vIn
MD5:	1336667A75083BF81E2632FABAA88B67
SHA1:	46E40800B27D95DAED0DBB830E0D0BA85C031D40
SHA-256:	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
SHA-512:	D039D8650CF7B149799D42C7415CBF94D4A0A4BF389B615EF7D1B427BC51727D3441AA37D8C178E7E7E89D69C95666EB14C31B56CDFBD3937E4581A31A69081A
Malicious:	false
Preview:	SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:961+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.362544480773266
Encrypted:	false
SSDEEP:	384:Vh/03pOVPGmQPZ6DGUXim1AZE5NrL+GEBCmAyKwlVuNZ7JaYZ3OWaOzOz2Q+b2Z7:nnml
MD5:	FBD03AA5ABA463B2A5C2C464DC4853EA
SHA1:	DCEA0D7927DD02698C05C2ED329A4E895BC0BF4C
SHA-256:	5CDB0813FF414FFABC5197F80610CEF4A26C90D212F03FC6B8EBEE5EF34C25A7
SHA-512:	71DF0F8011B8751570E9CD49D27E4D82704C4FB43BA54E2253E22B9D9BE04541D938B0FBEF73DB391D28779019BE05DCA765AEA8E2AD689E3EECBD1CBE74E209
Malicious:	false
Preview:	SessionID=8cca7112-6441-4cd1-a886-5fe63e9b8059.1732548676407 Timestamp=2024-11-25T10:31:16:407-0500 ThreadID=7340 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=8cca7112-6441-4cd1-a886-5fe63e9b8059.1732548676407 Timestamp=2024-11-25T10:31:16:408-0500 ThreadID=7340 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=8cca7112-6441-4cd1-a886-5fe63e9b8059.1732548676407 Timestamp=2024-11-25T10:31:16:408-0500 ThreadID=7340 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=8cca7112-6441-4cd1-a886-5fe63e9b8059.1732548676407 Timestamp=2024-11-25T10:31:16:408-0500 ThreadID=7340 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=8cca7112-6441-4cd1-a886-5fe63e9b8059.1732548676407 Timestamp=2024-11-25T10:31:16:408-0500 ThreadID=7340 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.400138427193892
Encrypted:	false
SSDEEP:	768:GLxxlyVUFcAzWL8VWL1ANSFld5YjMWLvJ8Uy++NSXl3WLd5WLrbhhVClkVMwDGb6:e
MD5:	3C9DD4EF125C4674DEDD35887A2B6BB2
SHA1:	00E2E74F0187EC54122F508F461F04FA24CD3C61
SHA-256:	83D6CB81DF82A6BAC5E5B096CEB76254A3C802D88D405F4ECD7422E02EAA0219
SHA-512:	172786CB62BA37839792469ED66ADE71DCEF26416FAC8CE14CA3263A515712207BF798C5FED198CF7801F61DA0350611E5C07E7FA8ABA4F1FEFAFDEAF2262B24
Malicious:	false
Preview:	04-10-2023 02:39:31:.---2---..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : *************************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : ***********************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Starting NGL..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..04-10-2023 02:39:31:.Closing File..04-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\1c2233cf-a916-41ae-af6b-0f71280d36d4.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\3fc0f6c6-f593-4045-a727-4f1e80677216.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\60018273-fafa-49a0-83ce-126affbc8633.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7owWLkwYIGNPMGZfPdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JVwWLkwZGuGZn3mlind9i4ufFXpAXkru
MD5:	CA6B0D9F8DDC295DACE8157B69CA7CF6
SHA1:	6299B4A49AB28786E7BF75E1481D8011E6022AF4
SHA-256:	A933C727CE6547310A0D7DAD8704B0F16DB90E024218ACE2C39E46B8329409C7
SHA-512:	9F150CDA866D433BD595F23124E369D2B797A0CA76A69BA98D30DF462F0A95D13E3B0834887B5CD2A032A55161A0DC8BB30C16AA89663939D6DCF83FAC056D34
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\b580ee6c-6b87-4938-995b-88744c5e9a91.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/M7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZjZwYIGNPJe:RB3mlind9i4ufFXpAXkrfUs03WLaGZje
MD5:	716C2C392DCD15C95BBD760EEBABFCD0
SHA1:	4B4CE9C6AED6A7F809236B2DAFA9987CA886E603
SHA-256:	DD3E6CFC38DA1B30D5250B132388EF73536D00628267E7F9C7E21603388724D8
SHA-512:	E164702386F24FF72111A53DA48DC57866D10DAE50A21D4737B5687E149FF9D673729C5D2F2B8DA9EB76A2E5727A2AFCFA5DE6CC0EEEF7D6EBADE784385460AF
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 14:31:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9784879807977207
Encrypted:	false
SSDEEP:	48:85dquTKqn7H/idAKZdA19ehwiZUklqeh3y+3:8vPN8y
MD5:	0F633667393D425EF07EAB3E394EE923
SHA1:	7FBDD62D8A5A8BF95A899A40385D20FFE832B9AB
SHA-256:	AD840B2F322B61AA099F9EEF273D7E2706E288ACFDA9EABA71775D9BCFD47198
SHA-512:	E921927DCF510BB94AAC46264818557A47F6BFA8C044F987273D8B997752B297DD757F1A8641AEAB7925C37A99E51284943CCB262E8C0353394DEF88AC5E464D
Malicious:	false
Preview:	L..................F.@.. ...$+.,...... O?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 14:31:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9954880099188506
Encrypted:	false
SSDEEP:	48:8BdquTKqn7H/idAKZdA1weh/iZUkAQkqehsy+2:83Pn9Qly
MD5:	1CDD8171DB7AAB7B323376995F804352
SHA1:	9AA7881B634BA6A35A8BCCFB3C2BEAC2CD2342E3
SHA-256:	92751763BBF2C82471BB45CC4271C7C12B3B2E4450D7F08B46F63CBC763FF60E
SHA-512:	EBC0CB4113D8A1C0F10E33D85A26669971E59EC841DEEB26AD3B6B6878B90F2484DACC5650097426A89ADD909A8B34A08E6C7476EC4BB38F8D07E0D0D877325C
Malicious:	false
Preview:	L..................F.@.. ...$+.,....[. O?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006841413979531
Encrypted:	false
SSDEEP:	48:8xcdquTKqnsH/idAKZdA14tseh7sFiZUkmgqeh7syy+BX:8xQP+ngy
MD5:	C1450F3CAF13245F69544B9895E029A9
SHA1:	A25BE5482EBCFECDFDC7D8FD7402D500057059BA
SHA-256:	0087BBB5F1F4D96EABE88C5F6DB37E3135B2680095CBA2C0E04293C99953AF79
SHA-512:	26774ED6685ADC3C946E86C2F17480C6CF57D0687F858E9D940AAFF3772CD5D21B04E32199C79EDA535036D4725BB89E60B7D2E6F1343CD856CD38E12FC41059
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 14:31:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9953451566088924
Encrypted:	false
SSDEEP:	48:8CdquTKqn7H/idAKZdA1vehDiZUkwqeh4y+R:8uPEKy
MD5:	18BF42DE2FB19D2EF1C7C7C82BEF7CD3
SHA1:	918CB132480611380E550ACF0B82E4A7E6ED19E0
SHA-256:	24FCD95DF45459CEE23BDD11734D0A3EFBDEC568B28DD93BB2E217887F638F36
SHA-512:	5989BF4AECB221A2B947C839B54958B6D9EE5FDF8BA1E64C0D1BE9740228F7E57E26D33316D8CA39A515E239A72688C5CCD192E27CE863246A1AD0134D4106D6
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....<. O?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 14:31:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9818286771326203
Encrypted:	false
SSDEEP:	48:8qdquTKqn7H/idAKZdA1hehBiZUk1W1qehmy+C:82PE9Gy
MD5:	5D90F94D4D3235469D78A91F3956F776
SHA1:	D258E3C91D75DF1FEF355256BDDA15CF28B9EE28
SHA-256:	30E5B8FD366D74389B6B99FC211EA1E1DA9A3A3FE3EA6D9405287429F039A3BA
SHA-512:	E62C37E6E1FA56438ABAFBDA272FAA1571F342969CB62FF4C01EDC996A82DAB9DA8DF2591FB91B6E5757E393EA8E2C5B9084C5EA661AD24E38CF99540439D1E3
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....0. O?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 14:31:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9899197375350193
Encrypted:	false
SSDEEP:	48:8vdquTKqn7H/idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbgy+yT+:89PqT/TbxWOvTbgy7T
MD5:	80EED4630C5F68E0EF37534FDC1BD100
SHA1:	0B160DEC651145AE7B3895B00D90EF689767E7C6
SHA-256:	F0AABF9DCF49EA755EB19DDC9C57708AFEF9A4129DB9338B977E24A6FCCD9B8E
SHA-512:	DEB5432F0644958C9E0681D1F4A41FF7E6CD597ED2C6D64D5A1BBC88404D44E1070449BB2550B8DE3C9B08D633AEC17677D0FC0BB0589C9459C71A1068B32CE7
Malicious:	false
Preview:	L..................F.@.. ...$+.,.... .~ O?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	5051
Entropy (8bit):	5.327799895816786
Encrypted:	false
SSDEEP:	96:ozzDJDMxgP68TAPDt9SRapBRAUgCA3cCp8hLqzLmUxrEDVh1VuXnLj5TRQfSOw:clGE6GkD3TAcAM48hL6VxyvYnLF64
MD5:	CB6AE28110B58D1B9F1CDA63A880654D
SHA1:	0267F1BBC81DE05E2F3A33F5AA1B0D624C93DF8E
SHA-256:	C99D1EA69DADFEDA8AF7A835271791CAFB34BF58D1A477A2CC022E2938DB403F
SHA-512:	20782468B4AD40771A3F399110086AAB4AF18CF8ACD2BA8EFFEA17A85902A36C667EE135999C097E311A11FB137A4AC06450FAC268A68B68976A75A70D320FD2
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,q0xTif,qPYxq,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.iOa=_.z("wg1P6b",[_.OB,_.Jo,_.Qo]);._.k("wg1P6b");.var x9a;x9a=_.Ph(["aria-"]);._.EJ=function(a){_.X.call(this,a.Ha);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Oc=a.Ea.Ff;this.eb=a.Ea.focus;this.Lc=a.Ea.Lc;this.fa=this.uj();a=-1*parseInt(_.Cp(this.uj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.Cp(this.uj().el(),"marginBottom")\|\|"0",10);this.Va={top:a,right:0,bottom:b,left:0};a=_.nf(this.getData("isMenuDynamic"),!1);b=_.nf(this.getData("isMenuHoisted"),!1);this.Fa=a?1:b?2:0;this.ka=!1;this.Da=1;this.Fa!==1&&(this.aa=this.Sa("U0exHf").children().Xc(0),_.bu(this,.y9a(this,this.aa.el())));_.tG(this.Aa())&&(a=this.Aa().el(),b=this.Je.bind(this),a.__soy_skip_handler=b)};_.K(_.EJ,_.X);_.EJ.Ca=function(){return{Ea:{Ff:_.iG,focus:_.YF,Lc:_.gv}}};_.EJ.prototype.Zz=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.dB)?(a=a.data.dB,this.Da=a==="MOUS

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	9202
Entropy (8bit):	5.399808136516541
Encrypted:	false
SSDEEP:	192:M22dw8oCVOYENp9Q1Lyqj2LwA2jLiU/RYnNdRJ0EIEFm:MZcCVBENpK1+qmcLiU/+v0FEFm
MD5:	2F3196E4FD1F65418F22902FF5B79318
SHA1:	3A27E4785AC3325D21307ACC736D1180889819BB
SHA-256:	F5390743638AC795C6656BE835E71DECB27DD654B6C683802246F8243FCFED68
SHA-512:	F7709BA24E28A830210EF622859B31CCF26C7D5174581614C6468F1B0214288E5D5B1FAD062054441E4670F9E6EA2AD8AE31311274A4C2E29CD3A88A732E256A
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.zOa=_.z("SD8Jgb",[]);._.$W=function(a,b){if(typeof b==="string")a.Mc(b);else if(b instanceof _.eq&&b.ia&&b.ia===_.C)b=_.Za(b.Xv()),a.empty().append(b);else if(b instanceof _.Va)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("ng");};_.aX=function(a){var b=_.Jp(a,"[jsslot]");if(b.size()>0)return b;b=new _.Hp([_.Gl("span")]);_.Kp(b,"jsslot","");a.empty().append(b);return b};_.xRb=function(a){return a===null\|\|typeof a==="string"&&_.mj(a)};._.k("SD8Jgb");._.fX=function(a){_.X.call(this,a.Ha);this.Xa=a.controller.Xa;this.hd=a.controllers.hd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.Aa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.fX,_.X);_.fX.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.dw},header:{jsname:"tJHJj",ctor:_.dw},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	dropped
Size (bytes):	710523
Entropy (8bit):	5.597103944085754
Encrypted:	false
SSDEEP:	6144:Tb5QNmquyq/j86q+cbnnaJ/4+H+3UuQsCkTNTYp2ArTu5XzD5Hkci24PQyn6sbIf:TucLyq8ccjasMp22Ts
MD5:	E98480A007CF93E0FA31BEC4BE18B7A9
SHA1:	635C8082DDE97A52159E3C699BEDB2B87E87A935
SHA-256:	7387E970CB3ABFABC7DB808D5F3CED524FD1BC9844A445187F00BEB84D4DC18D
SHA-512:	F65EBB57817423C190BEDDC2DA6341AFA2BF02C5330C5867591A1C9D0881358ADEAD2BB75CEBF768FC62F3D6E615DA78D7E04AA4C6BEF0DC95FF3A0325885DED
Malicious:	false
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (764)
Category:	dropped
Size (bytes):	1473
Entropy (8bit):	5.291664596304218
Encrypted:	false
SSDEEP:	24:kMYD7DwuSjZ4NsAP0YT9+ki/cM0f7P1iCX3oxPWJ1oGb3xHGboSFIV47OH1Wwprw:o7D9S/IDMcMk3Y4oGb3xHGboS2V4+Trw
MD5:	CBEE0CCFF203907FADBD4CC69AA64666
SHA1:	DC4DB3EFA298D0E1CDE9F325F2FF50F959AB3705
SHA-256:	B6E268AD998935C1CACFFBC50EFE550C2D7D2D4CB85979C6EDEAD5C9D859D130
SHA-512:	ED7658DC2D9F9B28A4C8C278E0760E046DB5EACDF235E043C00F41F9623AE4363E3100B2D1C1A275B8453B01A035D06F7404D339EFAA6005CA7F1A926B834DD5
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.A1a=new _.Bf(_.Hn);._.l();._.k("P6sQOc");.var G1a=!!(_.ki[0]>>28&1);var I1a=function(a,b,c,d,e){this.fa=a;this.Ba=b;this.ka=c;this.Da=d;this.Fa=e;this.aa=0;this.da=H1a(this)},J1a=function(a){var b={};_.Oa(a.lU(),function(e){b[e]=!0});var c=a.eU(),d=a.gU();return new I1a(a.bR(),c.aa()1E3,a.DT(),d.aa()1E3,b)},H1a=function(a){return Math.random()Math.min(a.BaMath.pow(a.ka,a.aa),a.Da)},K1a=function(a,b){return a.aa>=a.fa?!1:b!=null?!!a.Fa[b]:!0};var L1a=function(a){_.W.call(this,a.Ha);this.da=a.Ea.hX;this.fa=a.Ea.metadata;a=a.Ea.Uia;this.fetch=a.fetch.bind(a)};_.K(L1a,_.W);L1a.Ca=function(){return{Ea:{hX:_.D1a,metadata:_.A1a,Uia:_.W0a}}};L1a.prototype.aa=function(a,b){if(this.fa.getType(a.Pd())!==1)return _.Sn(a);var c=this.da.sW;return(c=c?J1a(c):null)&&K1a(c)?_.nza(a,M1a(this,a,b,c)):_.Sn(a)};.var M1a=function(a,b,c,d){return c.then(function(e){return e},fu

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	33973
Entropy (8bit):	5.385133194767871
Encrypted:	false
SSDEEP:	768:pYbhf6G77v+31Eax8DQ+/asMATE+i5qtWrb8Sym7VSBeKswmURdy:piuyhQ+Rg8tWr+SVn2Y
MD5:	A6BA2E41FC4D92833A8BB57BEC7CF14F
SHA1:	50942F996289EEA4C47B430E5F6A149736503E9D
SHA-256:	81181680863DE2D95C8C878C25AFD7E072C4BA3A10A4BB09CEAD1B2B3A7B2221
SHA-512:	937494FE00DB198C48DDCD295F6BF4F63DFE2F55A241DE9795CAD739584A9F31AF917BD349B6BD8A377A3E66207F917A762FD0C0DCC301CB311B2D03D5B45E0E
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var eva=function(a,b){this.da=a;this.fa=b;if(!c){var c=new _.cg("//www.google.com/images/cleardot.gif");_.Tm(c)}this.ka=c};_.h=eva.prototype;_.h.fd=null;_.h.H_=1E4;_.h.XB=!1;_.h.iS=0;_.h.rL=null;_.h.pW=null;_.h.setTimeout=function(a){this.H_=a};_.h.start=function(){if(this.XB)throw Error("sc");this.XB=!0;this.iS=0;fva(this)};_.h.stop=function(){gva(this);this.XB=!1};.var fva=function(a){a.iS++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.pn((0,_.Lg)(a.OI,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.Lg)(a.Ila,a),a.aa.onerror=(0,_.Lg)(a.Hla,a),a.aa.onabort=(0,_.Lg)(a.Gla,a),a.rL=_.pn(a.Jla,a.H_,a),a.aa.src=String(a.ka))};_.h=eva.prototype;_.h.Ila=function(){this.OI(!0)};_.h.Hla=function(){this.OI(!1)};_.h.Gla=function(){this.OI(!1)};_.h.Jla=function(){this.OI(!1)};._.h.OI=function(a){gva(this);a?(this.XB=!1,this.da.call(this.fa,!0)):this.iS<=0?fva(this):(this.XB=!1,

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (391)
Category:	downloaded
Size (bytes):	1609
Entropy (8bit):	5.257846360538064
Encrypted:	false
SSDEEP:	48:o72/ByYwIkkF/6e7B0YCSvtMxIjli77DCvbUrw:om6kdB07SSLOsw
MD5:	40F6233D2814AD4CB8BB8833EF7B15DD
SHA1:	C7DD3CD5FF22143FE10EACA93A93B62AC60C9334
SHA-256:	C1F698FAE45B9A95567B373A08C08E05418123FC2D7E5BA0F0E4CAA5AA26CB21
SHA-512:	E81FAA8CFA5DA2F36CC1EB067CEC5E598001FE3CD374494E044DF0AAAB2559937146DBBBD811AFC29D6079C0D2B66B3D345DD1F8154D8C2BBCBF2988AD9E8ACA
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Ng(_.oma);_.bB=function(a){_.W.call(this,a.Ha);this.aa=a.Ya.cache};_.K(_.bB,_.W);_.bB.Ca=function(){return{Ya:{cache:_.Vt}}};_.bB.prototype.execute=function(a){_.Gb(a,function(b){var c;_.kf(b)&&(c=b.jb.jc(b.nb));c&&this.aa.tI(c)},this);return{}};_.cv(_.uma,_.bB);._.l();._.k("ZDZcre");.var s2a=function(a){_.W.call(this,a.Ha);this.aa=_.IH();this.jn=a.Ea.jn;this.H5=a.Ea.metadata};_.K(s2a,_.W);s2a.Ca=function(){return{Ea:{jn:_.LH,metadata:_.A1a}}};s2a.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Gb(a,function(c){var d=b.H5.getType(c.Pd())===2?b.jn.Rb(c):b.jn.fetch(c);return _.vm(c,_.MH)?d.then(function(e){return _.Ld(e)}):d},this)};_.cv(_.zma,s2a);._.l();._.k("K5nYTd");._.z1a=new _.Bf(_.vma);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var E1a=function(a){_.W.call(this,a.Ha);this.aa=a.Ea.oS};_.K(E1a,_.W);E1a.Ca=funct

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (469)
Category:	dropped
Size (bytes):	2031
Entropy (8bit):	5.2966870780639095
Encrypted:	false
SSDEEP:	48:o7kB0pssL3AxF1mYts94nU7SOQLGf23R/rIosRrw:oesLKF0YtQpDYwwUj9w
MD5:	F54DECFE5159D6A3E54A1E904B9E4E8D
SHA1:	9A8C7690580D3C026CF5334A85554B97EAC127ED
SHA-256:	29BF215462714C08E95464FE2182AE8BF8A0231CEBB58A1E3376024A45608F66
SHA-512:	AD387E85AC4993901866F66275B85133C31241232859E6F49628CB7B9ED39347655C4FEBDFC88D8AA80EA5C2B4314CCF53E6C9876297C9C092D7CA79C07E90AB
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.lZ=function(a){_.W.call(this,a.Ha);this.window=a.Ea.window.get();this.kc=a.Ea.kc};_.K(_.lZ,_.W);_.lZ.Ca=function(){return{Ea:{window:_.fv,kc:_.SF}}};_.lZ.prototype.Vp=function(){};_.lZ.prototype.addEncryptionRecoveryMethod=function(){};_.mZ=function(a){return(a==null?void 0:a.Op)\|\|function(){}};_.nZ=function(a){return(a==null?void 0:a.P4)\|\|function(){}};_.kVb=function(a){return(a==null?void 0:a.Hq)\|\|function(){}};._.lVb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.mVb=function(a){setTimeout(function(){throw a;},0)};_.lZ.prototype.dQ=function(){return!0};_.oZ=function(a,b,c,d){c=c===void 0?"":c;a=a.kc;var e=a.XP,f=new _.HF;b=_.ak(f,7,_.AXa,b==null?b:_.Qc(b));e.call(a,305,b,d,void 0,void 0,_.dUb(new _.GF,_.cUb(new _.HY,c)))};

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	dropped
Size (bytes):	776572
Entropy (8bit):	5.7886561386263
Encrypted:	false
SSDEEP:	6144:+7as90yoB3M3r0okXm/6ws86hOX2u9VYZ/:+7admkX22uAZ/
MD5:	9277AA4705063B0FD162099440C74A1B
SHA1:	B74A6621FFE26C7FE5935C128F6C5D9186839189
SHA-256:	7B7AF1075A751BF002CCABFC510BE161A9702480DEEBD847B99007E107D13C51
SHA-512:	DE37351D7C83BE21E4A00E225371C00BCBC32B168C40749D7D8690B24B964C4E5123FFEFA2D8C56E331FFB7C4841C1E5FC2A96FC2DAE5B7025F69BF51656DA31
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x24cc1d88, 0x401a61, 0x34f0ff1, 0x12280de8, 0x6420, 0x0, 0x2c000010, 0x20000001, 0x187, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,jb,qaa,xaa,Bb,Jaa,Laa,Oaa,Mb,Paa,Rb,Wb,Xb,Qaa,Raa,Yb,Saa,Taa,Uaa,bc,Zaa,aba,ic,kc,lc,eba,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Bba,Eba,Gba,Hba,Dba,Jba,Lc,Lba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,$ba,cca,dca,eca,fca,gca,jca,lca,kca,nca,Ad,zd,pca,oc

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	3131
Entropy (8bit):	5.399846119659807
Encrypted:	false
SSDEEP:	48:o77hIdXD7qs+ucu5jNQ8jsw1GheuwejUZrqHm9O3WEpZLEF1vf5tvLSxMe5wBDrw:oJazePu5jOQ8YRwUw3ZZLiXvz8+fw
MD5:	9F0C7A347DC37CA3118F4B65598C226E
SHA1:	50FC1B6D82BC2991BF06F07DDCE8CFD540D2B5AA
SHA-256:	2E97BF41C7C4C1708292E4FD91E03BC7B74FD0CED3A3DCA7C0AE77400D49060C
SHA-512:	713C45D91FE169AE3A53EFEF5CFD049B7137D43615251C44C0D4E1EB334241885EB1548BA7DBBAAEB53E808777B4921E57833855E1B98CB7BFF92A62A7F5934A
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var dB=function(a){_.W.call(this,a.Ha)};_.K(dB,_.W);dB.Ca=_.W.Ca;dB.prototype.VT=function(a){return _.hf(this,{Ya:{IU:_.fm}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.Pi(function(e){window._wjdc=function(f){d(f);e(RKa(f,b,a))}}):RKa(c,b,a)})};var RKa=function(a,b,c){return(a=a&&a[c])?a:b.Ya.IU.VT(c)};.dB.prototype.aa=function(a,b){var c=_.ksa(b).Wk;if(c.startsWith("$")){var d=_.ln.get(a);_.Sq[b]&&(d\|\|(d={},_.ln.set(a,d)),d[c]=_.Sq[b],delete _.Sq[b],_.Tq--);if(d)if(a=d[c])b=_.lf(a);else throw Error("Vb`"+b);else b=null}else b=null;return b};_.cv(_.Ufa,dB);._.l();._.k("SNUn3");._.QKa=new _.Bf(_.Og);._.l();._.k("RMhBfe");.var VKa=function(a){var b=_.Rq(a);return b?new _.Pi(function(c,d){var e=function(){b=_.Rq(a);var f=_.aga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3467
Entropy (8bit):	5.520152394896059
Encrypted:	false
SSDEEP:	96:oNASEr6MYjk/6tIFI7TtlzGhTHdZK1UkAPUcw:BSEr6wkDbcTcp6u
MD5:	549610E92A799D6DCA63777F49A2C274
SHA1:	37FE6C3BD9A7B71B020751AECA4CF18E11A9B0AB
SHA-256:	30FEA7F5C990065189C2E22B04B07E201591355052C970D524F15B948A48EFBD
SHA-512:	C56A063CE2EB7BE981CBE6DB196AF9078D8CA97875EDCF27857A90EB4C09AAF63315B77A7C4A3E18922FA13F3C34157811A4C232036ACE131A0E28EC058C1235
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,q0xTif,qPYxq,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Uya=function(){var a=_.Ke();return _.yk(a,1)},Su=function(a){this.Ga=_.u(a,0,Su.messageId)};_.K(Su,_.v);Su.prototype.Ia=function(){return _.pk(this,1)};Su.prototype.Ua=function(a){return _.Ik(this,1,a)};Su.messageId="f.bo";var Tu=function(){_.mn.call(this)};_.K(Tu,_.mn);Tu.prototype.Cd=function(){this.eV=!1;Vya(this);_.mn.prototype.Cd.call(this)};Tu.prototype.aa=function(){Wya(this);if(this.uE)return Xya(this),!1;if(!this.oX)return Uu(this),!0;this.dispatchEvent("p");if(!this.kR)return Uu(this),!0;this.uO?(this.dispatchEvent("r"),Uu(this)):Xya(this);return!1};.var Yya=function(a){var b=new _.cg(a.A6);a.lS!=null&&_.fg(b,"authuser",a.lS);return b},Xya=function(a){a.uE=!0;var b=Yya(a),c="rt=r&f_uid="+_.gl(a.kR);_.Zn(b,(0,_.Lg)(a.fa,a),"POST",c)};.Tu.prototype.fa=function(a){a=a.target;Wya(this);if(_.bo(a)){this.WL=0;if(this.uO)this.uE=!1,this.dispatchEvent("r"

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	dropped
Size (bytes):	3131
Entropy (8bit):	5.399846119659807
Encrypted:	false
SSDEEP:	48:o77hIdXD7qs+ucu5jNQ8jsw1GheuwejUZrqHm9O3WEpZLEF1vf5tvLSxMe5wBDrw:oJazePu5jOQ8YRwUw3ZZLiXvz8+fw
MD5:	9F0C7A347DC37CA3118F4B65598C226E
SHA1:	50FC1B6D82BC2991BF06F07DDCE8CFD540D2B5AA
SHA-256:	2E97BF41C7C4C1708292E4FD91E03BC7B74FD0CED3A3DCA7C0AE77400D49060C
SHA-512:	713C45D91FE169AE3A53EFEF5CFD049B7137D43615251C44C0D4E1EB334241885EB1548BA7DBBAAEB53E808777B4921E57833855E1B98CB7BFF92A62A7F5934A
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var dB=function(a){_.W.call(this,a.Ha)};_.K(dB,_.W);dB.Ca=_.W.Ca;dB.prototype.VT=function(a){return _.hf(this,{Ya:{IU:_.fm}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.Pi(function(e){window._wjdc=function(f){d(f);e(RKa(f,b,a))}}):RKa(c,b,a)})};var RKa=function(a,b,c){return(a=a&&a[c])?a:b.Ya.IU.VT(c)};.dB.prototype.aa=function(a,b){var c=_.ksa(b).Wk;if(c.startsWith("$")){var d=_.ln.get(a);_.Sq[b]&&(d\|\|(d={},_.ln.set(a,d)),d[c]=_.Sq[b],delete _.Sq[b],_.Tq--);if(d)if(a=d[c])b=_.lf(a);else throw Error("Vb`"+b);else b=null}else b=null;return b};_.cv(_.Ufa,dB);._.l();._.k("SNUn3");._.QKa=new _.Bf(_.Og);._.l();._.k("RMhBfe");.var VKa=function(a){var b=_.Rq(a);return b?new _.Pi(function(c,d){var e=function(){b=_.Rq(a);var f=_.aga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	downloaded
Size (bytes):	710523
Entropy (8bit):	5.597103944085754
Encrypted:	false
SSDEEP:	6144:Tb5QNmquyq/j86q+cbnnaJ/4+H+3UuQsCkTNTYp2ArTu5XzD5Hkci24PQyn6sbIf:TucLyq8ccjasMp22Ts
MD5:	E98480A007CF93E0FA31BEC4BE18B7A9
SHA1:	635C8082DDE97A52159E3C699BEDB2B87E87A935
SHA-256:	7387E970CB3ABFABC7DB808D5F3CED524FD1BC9844A445187F00BEB84D4DC18D
SHA-512:	F65EBB57817423C190BEDDC2DA6341AFA2BF02C5330C5867591A1C9D0881358ADEAD2BB75CEBF768FC62F3D6E615DA78D7E04AA4C6BEF0DC95FF3A0325885DED
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,niKKCd,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,oqkvIf,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	downloaded
Size (bytes):	776572
Entropy (8bit):	5.7886561386263
Encrypted:	false
SSDEEP:	6144:+7as90yoB3M3r0okXm/6ws86hOX2u9VYZ/:+7admkX22uAZ/
MD5:	9277AA4705063B0FD162099440C74A1B
SHA1:	B74A6621FFE26C7FE5935C128F6C5D9186839189
SHA-256:	7B7AF1075A751BF002CCABFC510BE161A9702480DEEBD847B99007E107D13C51
SHA-512:	DE37351D7C83BE21E4A00E225371C00BCBC32B168C40749D7D8690B24B964C4E5123FFEFA2D8C56E331FFB7C4841C1E5FC2A96FC2DAE5B7025F69BF51656DA31
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGMG0trGyb304bQgc2n1BTHB9Ghgg/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x24cc1d88, 0x401a61, 0x34f0ff1, 0x12280de8, 0x6420, 0x0, 0x2c000010, 0x20000001, 0x187, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,jb,qaa,xaa,Bb,Jaa,Laa,Oaa,Mb,Paa,Rb,Wb,Xb,Qaa,Raa,Yb,Saa,Taa,Uaa,bc,Zaa,aba,ic,kc,lc,eba,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Bba,Eba,Gba,Hba,Dba,Jba,Lc,Lba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,$ba,cca,dca,eca,fca,gca,jca,lca,kca,nca,Ad,zd,pca,oc

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	3506
Entropy (8bit):	5.356940169929674
Encrypted:	false
SSDEEP:	48:os1lCWcM0I7dNnon8jhd2yfNXGUXGWX9xx0gnMysXy7do7oGZa7wf8gIkn7rw:oLM0IHnon8FdVFFtqWMy9G1ZVnw
MD5:	D7447B2D8E7EA81C4D672DA1A3674A4F
SHA1:	25BBD995A0601CF56CCEFB069890F4CA3BF95E4C
SHA-256:	DA5859707D9DB2A1475231FC10BA7C6FFA4726DCB81215D840B1C03D082892F3
SHA-512:	4AC291ACCC38A2841D33BDEDAD1A91D47BEE3F743C83668F0DAF8F72B0D632B3FB0B8B84AB4F28C637BA9348AB31E487E605998A236638E3F7D5FAE4EBF3FE3A
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Ng(_.Xqa);._.k("sOXFj");.var iv=function(a){_.W.call(this,a.Ha)};_.K(iv,_.W);iv.Ca=_.W.Ca;iv.prototype.aa=function(a){return a()};_.cv(_.Wqa,iv);._.l();._.k("oGtAuc");._.pza=new _.Bf(_.Xqa);._.l();._.k("q0xTif");.var lAa=function(a){var b=function(d){_.Yo(d)&&(_.Yo(d).Nc=null,_.yv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])};_.Jv=function(a,b){a&&_.Df.jc().register(a,b)};_.Kv=function(a){_.xv.call(this,a.Ha);var b=this,c=a.context.lga;this.ka=c.Ar;this.fd=this.Pa=this.eb=this.Ba=null;this.Ma=a.Ea.Lc;this.Va=a.Ea.soa;a=this.ka.ka.then(function(d){b.Ba=d;d=b.ka.id.z6(d,b.ka.getParams());b.eb=d.variant});c=c.s1.then(function(d){b.Pa=d});this.Fa=this.Fa.bind(this);_.bu(this,_.Ri([a,c]))};_.K(_.Kv,_.xv);_.Kv.Ca=function(){return{context:{lga:"FVxLkf"},Ea:{Lc:_.gv,component:_.Dv,soa:_.pza}}};_.Kv.prototype.aa=function(

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2768)
Category:	dropped
Size (bytes):	21312
Entropy (8bit):	5.419002548311702
Encrypted:	false
SSDEEP:	384:X8KS9myUQ1zi9hkVahJIjMfig9+yG+n1cW1/mQTbc242vBA0kswWLO0:X8KS9rUFkVahJIjM/9dKe/tbc242viTy
MD5:	04D1F5F13943B51E038E02C5C71DD89E
SHA1:	01FE871093776CE07473F5FBE9CB554D7589CD5C
SHA-256:	92110863BEFFBB09C6313CEFF62EE3B56B51E2BB2B04E7AE029EB7FF288E8F27
SHA-512:	2349DA23A8A9A49502AB4C5F1295F535F2795F8436A9177647ACD744BE0FCF7F95029CFCE1B2B91983FBE32C04A07775B436A5A040ABA369D47D61B8BAD60636
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var CIa;._.EIa=function(){var a=CIa(_.He("xwAfE"),function(){return _.He("UUFaWc")}),b=CIa(_.He("xnI9P"),function(){return _.He("u4g7r")}),c,d,e,f;return(f=DIa)!=null?f:DIa=Object.freeze({isEnabled:function(g){return g===-1\|\|_.nf(_.He("iCzhFc"),!1)?!1:a.enabled\|\|b.enabled},environment:(c=_.nl(_.He("y2FhP")))!=null?c:void 0,gS:(d=_.nl(_.He("MUE6Ne")))!=null?d:void 0,kt:(e=_.nl(_.He("cfb2h")))!=null?e:void 0,Kp:_.pl(_.He("yFnxrf"),-1),E1:_.hGa(_.He("fPDxwd")).map(function(g){return _.pl(g,0)}).filter(function(g){return g>0}),.C6:a,mxa:b})};CIa=function(a,b){a=_.nf(a,!1);return{enabled:a,kX:a?_.Ld(_.ql(b(),_.bA)):FIa()}};_.bA=function(a){this.Ga=_.u(a)};_.K(_.bA,_.v);var FIa=function(a){return function(){return _.rd(a)}}(_.bA);var DIa;._.k("p3hmRc");.var nJa=function(a){a.Fa=!0;return a},oJa=function(a,b,c,d){this.transport=a;this.aa=b;this.da=c;this.environment=d;this.fa=Number

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	5051
Entropy (8bit):	5.327799895816786
Encrypted:	false
SSDEEP:	96:ozzDJDMxgP68TAPDt9SRapBRAUgCA3cCp8hLqzLmUxrEDVh1VuXnLj5TRQfSOw:clGE6GkD3TAcAM48hL6VxyvYnLF64
MD5:	CB6AE28110B58D1B9F1CDA63A880654D
SHA1:	0267F1BBC81DE05E2F3A33F5AA1B0D624C93DF8E
SHA-256:	C99D1EA69DADFEDA8AF7A835271791CAFB34BF58D1A477A2CC022E2938DB403F
SHA-512:	20782468B4AD40771A3F399110086AAB4AF18CF8ACD2BA8EFFEA17A85902A36C667EE135999C097E311A11FB137A4AC06450FAC268A68B68976A75A70D320FD2
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.iOa=_.z("wg1P6b",[_.OB,_.Jo,_.Qo]);._.k("wg1P6b");.var x9a;x9a=_.Ph(["aria-"]);._.EJ=function(a){_.X.call(this,a.Ha);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Oc=a.Ea.Ff;this.eb=a.Ea.focus;this.Lc=a.Ea.Lc;this.fa=this.uj();a=-1*parseInt(_.Cp(this.uj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.Cp(this.uj().el(),"marginBottom")\|\|"0",10);this.Va={top:a,right:0,bottom:b,left:0};a=_.nf(this.getData("isMenuDynamic"),!1);b=_.nf(this.getData("isMenuHoisted"),!1);this.Fa=a?1:b?2:0;this.ka=!1;this.Da=1;this.Fa!==1&&(this.aa=this.Sa("U0exHf").children().Xc(0),_.bu(this,.y9a(this,this.aa.el())));_.tG(this.Aa())&&(a=this.Aa().el(),b=this.Je.bind(this),a.__soy_skip_handler=b)};_.K(_.EJ,_.X);_.EJ.Ca=function(){return{Ea:{Ff:_.iG,focus:_.YF,Lc:_.gv}}};_.EJ.prototype.Zz=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.dB)?(a=a.data.dB,this.Da=a==="MOUS

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9202
Entropy (8bit):	5.399808136516541
Encrypted:	false
SSDEEP:	192:M22dw8oCVOYENp9Q1Lyqj2LwA2jLiU/RYnNdRJ0EIEFm:MZcCVBENpK1+qmcLiU/+v0FEFm
MD5:	2F3196E4FD1F65418F22902FF5B79318
SHA1:	3A27E4785AC3325D21307ACC736D1180889819BB
SHA-256:	F5390743638AC795C6656BE835E71DECB27DD654B6C683802246F8243FCFED68
SHA-512:	F7709BA24E28A830210EF622859B31CCF26C7D5174581614C6468F1B0214288E5D5B1FAD062054441E4670F9E6EA2AD8AE31311274A4C2E29CD3A88A732E256A
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.zOa=_.z("SD8Jgb",[]);._.$W=function(a,b){if(typeof b==="string")a.Mc(b);else if(b instanceof _.eq&&b.ia&&b.ia===_.C)b=_.Za(b.Xv()),a.empty().append(b);else if(b instanceof _.Va)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("ng");};_.aX=function(a){var b=_.Jp(a,"[jsslot]");if(b.size()>0)return b;b=new _.Hp([_.Gl("span")]);_.Kp(b,"jsslot","");a.empty().append(b);return b};_.xRb=function(a){return a===null\|\|typeof a==="string"&&_.mj(a)};._.k("SD8Jgb");._.fX=function(a){_.X.call(this,a.Ha);this.Xa=a.controller.Xa;this.hd=a.controllers.hd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.Aa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.fX,_.X);_.fX.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.dw},header:{jsname:"tJHJj",ctor:_.dw},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	5.025852324109785
Encrypted:	false
SSDEEP:	3:fnSVyJuVUhVTScsROTKsJNX3yKAhP:P7JuKhVTIOJjnZAhP
MD5:	4B847D6DC110194217A51F82A5511798
SHA1:	960C63FB35EBE8A299DDAD613C773B886FC90340
SHA-256:	3DDE3794451C01C0B9349D87A4D6E74057A0502279EB8EE20E0F1306B27CE9EE
SHA-512:	E112D841AB0EEB29875175DB7ACC3560561502980CCC44E22E6BE72F32DEA481BBE600D803CDE450BB8310CB5CE39C68185E8CB3091007698E62945E7798860B
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Cj4KBw0ZARP6GgAKKg3oIX6GGgQISxgCKh0IClIZCg9AIS4kI18qLSY/Ky8lLF4QARj/////DwoHDdOYqAcaAA==

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (469)
Category:	downloaded
Size (bytes):	2031
Entropy (8bit):	5.2966870780639095
Encrypted:	false
SSDEEP:	48:o7kB0pssL3AxF1mYts94nU7SOQLGf23R/rIosRrw:oesLKF0YtQpDYwwUj9w
MD5:	F54DECFE5159D6A3E54A1E904B9E4E8D
SHA1:	9A8C7690580D3C026CF5334A85554B97EAC127ED
SHA-256:	29BF215462714C08E95464FE2182AE8BF8A0231CEBB58A1E3376024A45608F66
SHA-512:	AD387E85AC4993901866F66275B85133C31241232859E6F49628CB7B9ED39347655C4FEBDFC88D8AA80EA5C2B4314CCF53E6C9876297C9C092D7CA79C07E90AB
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,q0xTif,qPYxq,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.lZ=function(a){_.W.call(this,a.Ha);this.window=a.Ea.window.get();this.kc=a.Ea.kc};_.K(_.lZ,_.W);_.lZ.Ca=function(){return{Ea:{window:_.fv,kc:_.SF}}};_.lZ.prototype.Vp=function(){};_.lZ.prototype.addEncryptionRecoveryMethod=function(){};_.mZ=function(a){return(a==null?void 0:a.Op)\|\|function(){}};_.nZ=function(a){return(a==null?void 0:a.P4)\|\|function(){}};_.kVb=function(a){return(a==null?void 0:a.Hq)\|\|function(){}};._.lVb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.mVb=function(a){setTimeout(function(){throw a;},0)};_.lZ.prototype.dQ=function(){return!0};_.oZ=function(a,b,c,d){c=c===void 0?"":c;a=a.kc;var e=a.XP,f=new _.HF;b=_.ak(f,7,_.AXa,b==null?b:_.Qc(b));e.call(a,305,b,d,void 0,void 0,_.dUb(new _.GF,_.cUb(new _.HY,c)))};

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2768)
Category:	downloaded
Size (bytes):	21312
Entropy (8bit):	5.419002548311702
Encrypted:	false
SSDEEP:	384:X8KS9myUQ1zi9hkVahJIjMfig9+yG+n1cW1/mQTbc242vBA0kswWLO0:X8KS9rUFkVahJIjM/9dKe/tbc242viTy
MD5:	04D1F5F13943B51E038E02C5C71DD89E
SHA1:	01FE871093776CE07473F5FBE9CB554D7589CD5C
SHA-256:	92110863BEFFBB09C6313CEFF62EE3B56B51E2BB2B04E7AE029EB7FF288E8F27
SHA-512:	2349DA23A8A9A49502AB4C5F1295F535F2795F8436A9177647ACD744BE0FCF7F95029CFCE1B2B91983FBE32C04A07775B436A5A040ABA369D47D61B8BAD60636
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=p3hmRc,LvGhrf,RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var CIa;._.EIa=function(){var a=CIa(_.He("xwAfE"),function(){return _.He("UUFaWc")}),b=CIa(_.He("xnI9P"),function(){return _.He("u4g7r")}),c,d,e,f;return(f=DIa)!=null?f:DIa=Object.freeze({isEnabled:function(g){return g===-1\|\|_.nf(_.He("iCzhFc"),!1)?!1:a.enabled\|\|b.enabled},environment:(c=_.nl(_.He("y2FhP")))!=null?c:void 0,gS:(d=_.nl(_.He("MUE6Ne")))!=null?d:void 0,kt:(e=_.nl(_.He("cfb2h")))!=null?e:void 0,Kp:_.pl(_.He("yFnxrf"),-1),E1:_.hGa(_.He("fPDxwd")).map(function(g){return _.pl(g,0)}).filter(function(g){return g>0}),.C6:a,mxa:b})};CIa=function(a,b){a=_.nf(a,!1);return{enabled:a,kX:a?_.Ld(_.ql(b(),_.bA)):FIa()}};_.bA=function(a){this.Ga=_.u(a)};_.K(_.bA,_.v);var FIa=function(a){return function(){return _.rd(a)}}(_.bA);var DIa;._.k("p3hmRc");.var nJa=function(a){a.Fa=!0;return a},oJa=function(a,b,c,d){this.transport=a;this.aa=b;this.da=c;this.environment=d;this.fa=Number

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	3506
Entropy (8bit):	5.356940169929674
Encrypted:	false
SSDEEP:	48:os1lCWcM0I7dNnon8jhd2yfNXGUXGWX9xx0gnMysXy7do7oGZa7wf8gIkn7rw:oLM0IHnon8FdVFFtqWMy9G1ZVnw
MD5:	D7447B2D8E7EA81C4D672DA1A3674A4F
SHA1:	25BBD995A0601CF56CCEFB069890F4CA3BF95E4C
SHA-256:	DA5859707D9DB2A1475231FC10BA7C6FFA4726DCB81215D840B1C03D082892F3
SHA-512:	4AC291ACCC38A2841D33BDEDAD1A91D47BEE3F743C83668F0DAF8F72B0D632B3FB0B8B84AB4F28C637BA9348AB31E487E605998A236638E3F7D5FAE4EBF3FE3A
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Ng(_.Xqa);._.k("sOXFj");.var iv=function(a){_.W.call(this,a.Ha)};_.K(iv,_.W);iv.Ca=_.W.Ca;iv.prototype.aa=function(a){return a()};_.cv(_.Wqa,iv);._.l();._.k("oGtAuc");._.pza=new _.Bf(_.Xqa);._.l();._.k("q0xTif");.var lAa=function(a){var b=function(d){_.Yo(d)&&(_.Yo(d).Nc=null,_.yv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])};_.Jv=function(a,b){a&&_.Df.jc().register(a,b)};_.Kv=function(a){_.xv.call(this,a.Ha);var b=this,c=a.context.lga;this.ka=c.Ar;this.fd=this.Pa=this.eb=this.Ba=null;this.Ma=a.Ea.Lc;this.Va=a.Ea.soa;a=this.ka.ka.then(function(d){b.Ba=d;d=b.ka.id.z6(d,b.ka.getParams());b.eb=d.variant});c=c.s1.then(function(d){b.Pa=d});this.Fa=this.Fa.bind(this);_.bu(this,_.Ri([a,c]))};_.K(_.Kv,_.xv);_.Kv.Ca=function(){return{context:{lga:"FVxLkf"},Ea:{Lc:_.gv,component:_.Dv,soa:_.pza}}};_.Kv.prototype.aa=function(

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	33973
Entropy (8bit):	5.385133194767871
Encrypted:	false
SSDEEP:	768:pYbhf6G77v+31Eax8DQ+/asMATE+i5qtWrb8Sym7VSBeKswmURdy:piuyhQ+Rg8tWr+SVn2Y
MD5:	A6BA2E41FC4D92833A8BB57BEC7CF14F
SHA1:	50942F996289EEA4C47B430E5F6A149736503E9D
SHA-256:	81181680863DE2D95C8C878C25AFD7E072C4BA3A10A4BB09CEAD1B2B3A7B2221
SHA-512:	937494FE00DB198C48DDCD295F6BF4F63DFE2F55A241DE9795CAD739584A9F31AF917BD349B6BD8A377A3E66207F917A762FD0C0DCC301CB311B2D03D5B45E0E
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var eva=function(a,b){this.da=a;this.fa=b;if(!c){var c=new _.cg("//www.google.com/images/cleardot.gif");_.Tm(c)}this.ka=c};_.h=eva.prototype;_.h.fd=null;_.h.H_=1E4;_.h.XB=!1;_.h.iS=0;_.h.rL=null;_.h.pW=null;_.h.setTimeout=function(a){this.H_=a};_.h.start=function(){if(this.XB)throw Error("sc");this.XB=!0;this.iS=0;fva(this)};_.h.stop=function(){gva(this);this.XB=!1};.var fva=function(a){a.iS++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.pn((0,_.Lg)(a.OI,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.Lg)(a.Ila,a),a.aa.onerror=(0,_.Lg)(a.Hla,a),a.aa.onabort=(0,_.Lg)(a.Gla,a),a.rL=_.pn(a.Jla,a.H_,a),a.aa.src=String(a.ka))};_.h=eva.prototype;_.h.Ila=function(){this.OI(!0)};_.h.Hla=function(){this.OI(!1)};_.h.Gla=function(){this.OI(!1)};_.h.Jla=function(){this.OI(!1)};._.h.OI=function(a){gva(this);a?(this.XB=!1,this.da.call(this.fa,!0)):this.iS<=0?fva(this):(this.XB=!1,

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (764)
Category:	downloaded
Size (bytes):	1473
Entropy (8bit):	5.291664596304218
Encrypted:	false
SSDEEP:	24:kMYD7DwuSjZ4NsAP0YT9+ki/cM0f7P1iCX3oxPWJ1oGb3xHGboSFIV47OH1Wwprw:o7D9S/IDMcMk3Y4oGb3xHGboS2V4+Trw
MD5:	CBEE0CCFF203907FADBD4CC69AA64666
SHA1:	DC4DB3EFA298D0E1CDE9F325F2FF50F959AB3705
SHA-256:	B6E268AD998935C1CACFFBC50EFE550C2D7D2D4CB85979C6EDEAD5C9D859D130
SHA-512:	ED7658DC2D9F9B28A4C8C278E0760E046DB5EACDF235E043C00F41F9623AE4363E3100B2D1C1A275B8453B01A035D06F7404D339EFAA6005CA7F1A926B834DD5
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.81r_gfkf0jY.es5.O/ck=boq-identity.AccountsSignInUi.H4HQ-YBujpI.L.B1.O/am=iB3MZJgGEBD_8DSgN6BIIGQAAAAAAAABAMAGAACAhwE/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEWY_iafZjrlywej4QGo0HjlsMVaQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.A1a=new _.Bf(_.Hn);._.l();._.k("P6sQOc");.var G1a=!!(_.ki[0]>>28&1);var I1a=function(a,b,c,d,e){this.fa=a;this.Ba=b;this.ka=c;this.Da=d;this.Fa=e;this.aa=0;this.da=H1a(this)},J1a=function(a){var b={};_.Oa(a.lU(),function(e){b[e]=!0});var c=a.eU(),d=a.gU();return new I1a(a.bR(),c.aa()1E3,a.DT(),d.aa()1E3,b)},H1a=function(a){return Math.random()Math.min(a.BaMath.pow(a.ka,a.aa),a.Da)},K1a=function(a,b){return a.aa>=a.fa?!1:b!=null?!!a.Fa[b]:!0};var L1a=function(a){_.W.call(this,a.Ha);this.da=a.Ea.hX;this.fa=a.Ea.metadata;a=a.Ea.Uia;this.fetch=a.fetch.bind(a)};_.K(L1a,_.W);L1a.Ca=function(){return{Ea:{hX:_.D1a,metadata:_.A1a,Uia:_.W0a}}};L1a.prototype.aa=function(a,b){if(this.fa.getType(a.Pd())!==1)return _.Sn(a);var c=this.da.sW;return(c=c?J1a(c):null)&&K1a(c)?_.nza(a,M1a(this,a,b,c)):_.Sn(a)};.var M1a=function(a,b,c,d){return c.then(function(e){return e},fu

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (391)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.257846360538064
Encrypted:	false
SSDEEP:	48:o72/ByYwIkkF/6e7B0YCSvtMxIjli77DCvbUrw:om6kdB07SSLOsw
MD5:	40F6233D2814AD4CB8BB8833EF7B15DD
SHA1:	C7DD3CD5FF22143FE10EACA93A93B62AC60C9334
SHA-256:	C1F698FAE45B9A95567B373A08C08E05418123FC2D7E5BA0F0E4CAA5AA26CB21
SHA-512:	E81FAA8CFA5DA2F36CC1EB067CEC5E598001FE3CD374494E044DF0AAAB2559937146DBBBD811AFC29D6079C0D2B66B3D345DD1F8154D8C2BBCBF2988AD9E8ACA
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Ng(_.oma);_.bB=function(a){_.W.call(this,a.Ha);this.aa=a.Ya.cache};_.K(_.bB,_.W);_.bB.Ca=function(){return{Ya:{cache:_.Vt}}};_.bB.prototype.execute=function(a){_.Gb(a,function(b){var c;_.kf(b)&&(c=b.jb.jc(b.nb));c&&this.aa.tI(c)},this);return{}};_.cv(_.uma,_.bB);._.l();._.k("ZDZcre");.var s2a=function(a){_.W.call(this,a.Ha);this.aa=_.IH();this.jn=a.Ea.jn;this.H5=a.Ea.metadata};_.K(s2a,_.W);s2a.Ca=function(){return{Ea:{jn:_.LH,metadata:_.A1a}}};s2a.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Gb(a,function(c){var d=b.H5.getType(c.Pd())===2?b.jn.Rb(c):b.jn.fetch(c);return _.vm(c,_.MH)?d.then(function(e){return _.Ld(e)}):d},this)};_.cv(_.zma,s2a);._.l();._.k("K5nYTd");._.z1a=new _.Bf(_.vma);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var E1a=function(a){_.W.call(this,a.Ha);this.aa=a.Ea.oS};_.K(E1a,_.W);E1a.Ca=funct

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3467
Entropy (8bit):	5.520152394896059
Encrypted:	false
SSDEEP:	96:oNASEr6MYjk/6tIFI7TtlzGhTHdZK1UkAPUcw:BSEr6wkDbcTcp6u
MD5:	549610E92A799D6DCA63777F49A2C274
SHA1:	37FE6C3BD9A7B71B020751AECA4CF18E11A9B0AB
SHA-256:	30FEA7F5C990065189C2E22B04B07E201591355052C970D524F15B948A48EFBD
SHA-512:	C56A063CE2EB7BE981CBE6DB196AF9078D8CA97875EDCF27857A90EB4C09AAF63315B77A7C4A3E18922FA13F3C34157811A4C232036ACE131A0E28EC058C1235
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Uya=function(){var a=_.Ke();return _.yk(a,1)},Su=function(a){this.Ga=_.u(a,0,Su.messageId)};_.K(Su,_.v);Su.prototype.Ia=function(){return _.pk(this,1)};Su.prototype.Ua=function(a){return _.Ik(this,1,a)};Su.messageId="f.bo";var Tu=function(){_.mn.call(this)};_.K(Tu,_.mn);Tu.prototype.Cd=function(){this.eV=!1;Vya(this);_.mn.prototype.Cd.call(this)};Tu.prototype.aa=function(){Wya(this);if(this.uE)return Xya(this),!1;if(!this.oX)return Uu(this),!0;this.dispatchEvent("p");if(!this.kR)return Uu(this),!0;this.uO?(this.dispatchEvent("r"),Uu(this)):Xya(this);return!1};.var Yya=function(a){var b=new _.cg(a.A6);a.lS!=null&&_.fg(b,"authuser",a.lS);return b},Xya=function(a){a.uE=!0;var b=Yya(a),c="rt=r&f_uid="+_.gl(a.kR);_.Zn(b,(0,_.Lg)(a.fa,a),"POST",c)};.Tu.prototype.fa=function(a){a=a.target;Wya(this);if(_.bo(a)){this.WL=0;if(this.uO)this.uE=!1,this.dispatchEvent("r"

Static File Info

General

File type:	PDF document, version 1.3, 1 pages
Entropy (8bit):	7.965292259644595
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	ResumeKR.pdf
File size:	165'677 bytes
MD5:	a58e112cb4ef114c45758a8bedd09a64
SHA1:	07fa1dbf31d0f48a81a58581b8b4d79fff35db4a
SHA256:	ba75893d4cbfc31b2f27dcfe4748afe3b20c07be1c42d4a591daac32011521c8
SHA512:	fa26507716cd2367f22a7d656a933bd5554214bcb89102dd336715b25e2b6d839274a1a1be1b15915e75f217feb9ae54e957f5297be9f31780ec8fb68edd3883
SSDEEP:	3072:rjEIYT3838S1Aj/Oe7ssZeLhHEIbCYfnjFANVGT04ifBYXUwZ:rjEIYT38sS1Aj/hrshEI+YfjaNVEDifk
TLSH:	3AF301B9E285AC2CE142C505E92F7ACE8D8CB26387D5B5C12438450EB6C149DFDB61EF
File Content Preview:	%PDF-1.3.%............3 0 obj.<< /Filter /FlateDecode /Length 13666 >>.stream.x............h@.#.iuUu..I....X .0l#c{......Z.<...\|...........9GZ.k.........._...~../..._..........;;.?..fsj.?.s...nn....O.c....l.......~.z...../.u.~......7.....o._...{.....E....

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.3
Total Entropy:	7.965292
Total Bytes:	165677
Stream Entropy:	7.997390
Stream Bytes:	153279
Entropy outside Streams:	5.105161
Bytes outside Streams:	12398
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	75
endobj	75
stream	28
endstream	28
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	8
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 16:31:12.684536934 CET	49674	443	192.168.2.5	23.1.237.91
Nov 25, 2024 16:31:12.684576035 CET	49675	443	192.168.2.5	23.1.237.91
Nov 25, 2024 16:31:12.778304100 CET	49673	443	192.168.2.5	23.1.237.91
Nov 25, 2024 16:31:15.239228964 CET	443	49703	23.1.237.91	192.168.2.5
Nov 25, 2024 16:31:15.239350080 CET	49703	443	192.168.2.5	23.1.237.91
Nov 25, 2024 16:31:20.735517979 CET	49708	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:20.735601902 CET	443	49708	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:20.735683918 CET	49708	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:20.737761021 CET	49708	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:20.737807035 CET	443	49708	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:22.202136040 CET	443	49708	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:22.202286959 CET	49708	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:22.206440926 CET	49708	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:22.206458092 CET	443	49708	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:22.206962109 CET	443	49708	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:22.246501923 CET	49708	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:22.287342072 CET	443	49708	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:22.722946882 CET	443	49708	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:22.723021984 CET	443	49708	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:22.723102093 CET	49708	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:22.727176905 CET	49708	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:22.727224112 CET	443	49708	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:22.727256060 CET	49708	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:22.727269888 CET	443	49708	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:22.771223068 CET	49714	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:22.771255016 CET	443	49714	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:22.771503925 CET	49714	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:22.771884918 CET	49714	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:22.771898031 CET	443	49714	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:23.262535095 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:23.262566090 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:23.262629032 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:23.263823986 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:23.263834953 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:23.918169022 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:23.918195963 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:23.918411970 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:23.918607950 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:23.918620110 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:24.165592909 CET	443	49714	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:24.165689945 CET	49714	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:24.166913986 CET	49714	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:24.166928053 CET	443	49714	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:24.167171955 CET	443	49714	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:24.168678045 CET	49714	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:24.215339899 CET	443	49714	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:24.677778959 CET	443	49714	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:24.677839041 CET	443	49714	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:24.677910089 CET	49714	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:24.679090023 CET	49714	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:24.679111958 CET	443	49714	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:24.679126024 CET	49714	443	192.168.2.5	2.18.109.164
Nov 25, 2024 16:31:24.679132938 CET	443	49714	2.18.109.164	192.168.2.5
Nov 25, 2024 16:31:25.031068087 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:25.031133890 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:25.033273935 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:25.033282042 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:25.033632994 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:25.078670025 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:25.393871069 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.394280910 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.394316912 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.397912025 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.398122072 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.398143053 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.398406982 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.398608923 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.398778915 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.398930073 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.398936987 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.456321001 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.456356049 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.500503063 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.802650928 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:25.802696943 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:25.802918911 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:25.803220987 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:25.803240061 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:25.915322065 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.915340900 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.915371895 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.915414095 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:25.915424109 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.915474892 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.915474892 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.920234919 CET	49716	443	192.168.2.5	34.193.227.236
Nov 25, 2024 16:31:25.920253038 CET	443	49716	34.193.227.236	192.168.2.5
Nov 25, 2024 16:31:26.514130116 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:26.559372902 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:27.099482059 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:27.099545956 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:27.099567890 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:27.099607944 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:27.099628925 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:27.099648952 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:27.099689960 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:27.099706888 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:27.099713087 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:27.118290901 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:27.118355036 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:27.118364096 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:27.118508101 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:27.118626118 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:27.667109966 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:27.667218924 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:27.668721914 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:27.668736935 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:27.669001102 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:27.676146030 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:27.723332882 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.167583942 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.167607069 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.167726994 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.167746067 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.168524981 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.473915100 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.473926067 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.473972082 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.474000931 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.474037886 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.474057913 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.474087000 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.518935919 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.518954992 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.519021988 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.519042015 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.519085884 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.585968018 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:28.585992098 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:28.586004019 CET	49715	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:31:28.586011887 CET	443	49715	4.245.163.56	192.168.2.5
Nov 25, 2024 16:31:28.663239956 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.663264990 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.663362980 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.663399935 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.663449049 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.697217941 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.697233915 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.697309971 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.697323084 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.697429895 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.718017101 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.718034983 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.718077898 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.718087912 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.718116999 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.718141079 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.736037016 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.736052990 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.736126900 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.736138105 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.736363888 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.867955923 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.867974997 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.868030071 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.868046045 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.868062019 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.868088961 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.884830952 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.884850025 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.884891987 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.884900093 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.884928942 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.884941101 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.901966095 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.901983023 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.902034044 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.902043104 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.902070045 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.902090073 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.916177988 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.916194916 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.916253090 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.916261911 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.916357040 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.933182001 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.933223963 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.933295012 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.933564901 CET	49720	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.933578014 CET	443	49720	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.993834019 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.993870020 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.993935108 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.995374918 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.995387077 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.995395899 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.995424986 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.995487928 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.995490074 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.996916056 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.996926069 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.996982098 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.997181892 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.997205019 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.997263908 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.997276068 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.997406960 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.997419119 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.997616053 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.997627974 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.998426914 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.998435974 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:28.998498917 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.998636007 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:28.998644114 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.721396923 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.721925020 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:30.721954107 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.723886013 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:30.723891020 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.725157022 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.725466967 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:30.725496054 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.726706028 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:30.726712942 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.785218954 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.786000967 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:30.786031008 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.786432981 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:30.786437988 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.799787998 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.800589085 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:30.800604105 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.800996065 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:30.801000118 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.851254940 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.851608992 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:30.851620913 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:30.852020979 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:30.852025032 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.302577972 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.305032969 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.305107117 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.305155039 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.305166960 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.305179119 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.305183887 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.307717085 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.307734013 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.307805061 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.307948112 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.307960033 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.312423944 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.313358068 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.313412905 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.313440084 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.313447952 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.313461065 CET	49726	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.313465118 CET	443	49726	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.315490007 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.315529108 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.315602064 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.315731049 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.315743923 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.316685915 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.316704988 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.316747904 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.316768885 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.316802025 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.316931009 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.316936970 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.316951036 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.317068100 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.317092896 CET	443	49727	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.317136049 CET	49727	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.318866014 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.318888903 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.318948984 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.319055080 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.319070101 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.331717014 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.331737041 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.331806898 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.331815958 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.331904888 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.331918955 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.331929922 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.332031965 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.332056999 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.332096100 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.333676100 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.333729982 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.333827019 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.333946943 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.333965063 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.445084095 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.445111036 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.445189953 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.445205927 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.445246935 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.445488930 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.445493937 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.445507050 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.445626974 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.445655107 CET	443	49725	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.445694923 CET	49725	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.448230028 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.448249102 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:31.448323965 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.448470116 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:31.448488951 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.209769011 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.210264921 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.210284948 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.211775064 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.211781025 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.212030888 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.212311029 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.212340117 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.212660074 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.212666035 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.229341984 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.229386091 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.229564905 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.229693890 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.229713917 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.229809999 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.229825974 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.230140924 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.230146885 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.230206013 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.230211020 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.230422020 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.230429888 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.230783939 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.230788946 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.646226883 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.646401882 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.646466970 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.646550894 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.646570921 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.646584988 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.646591902 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.648796082 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.648960114 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.649035931 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.649080992 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.649080992 CET	49734	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.649104118 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.649116993 CET	443	49734	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.649578094 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.649616003 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.649672985 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.649848938 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.649864912 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.651093006 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.651133060 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.651202917 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.651340008 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.651352882 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.676331997 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.676390886 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.676444054 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.676532030 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.676556110 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.676572084 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.676578999 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.676815033 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.676875114 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.676923990 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.676986933 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.676999092 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.677014112 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.677020073 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.678205013 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.678265095 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.678328991 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.678591013 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.678602934 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.678667068 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.678752899 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.678761959 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.678793907 CET	49733	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.678800106 CET	443	49733	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.679059982 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.679076910 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.679131031 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.679255009 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.679267883 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.679332018 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.679343939 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.681061029 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.681075096 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:33.681130886 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.681263924 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:33.681277990 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.403933048 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.404467106 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.404484987 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.404903889 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.404908895 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.545185089 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.546973944 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.546989918 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.547482967 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.547487974 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.552051067 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.552447081 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.552464008 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.552814960 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.552819967 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.552910089 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.553318977 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.553333044 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.553679943 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.553684950 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.564572096 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.564865112 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.564888954 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.565207958 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.565212965 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.846287966 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.846366882 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.846429110 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.846592903 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.846609116 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.846617937 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.846625090 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.849606037 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.849694967 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:35.849791050 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.849950075 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:35.849970102 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.000149965 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.000233889 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.000292063 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.000387907 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.000412941 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.000427008 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.000433922 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.002753019 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.002780914 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.002850056 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.002970934 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.002984047 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.007487059 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.007545948 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.007591963 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.007685900 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.007695913 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.007704020 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.007708073 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.010234118 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.010267973 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.010350943 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.010490894 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.010504961 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.011467934 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.011528969 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.011578083 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.011651039 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.011658907 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.011670113 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.011674881 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.013633966 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.013658047 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.013712883 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.013853073 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.013866901 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.034624100 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.034765959 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.034842014 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.034996033 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.035015106 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.035024881 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.035031080 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.037076950 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.037096977 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:36.037172079 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.037297964 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:36.037308931 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.642002106 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.682955980 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:37.682995081 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.683399916 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:37.683408022 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.741831064 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.742245913 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:37.742273092 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.742696047 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:37.742703915 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.827255964 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.827670097 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:37.827702045 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.828125000 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:37.828130960 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.830713034 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.831052065 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:37.831096888 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.831460953 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:37.831466913 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.885332108 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.928611994 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:37.928626060 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:37.929615021 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:37.929620028 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.087887049 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.087959051 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.088009119 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.088179111 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.088200092 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.088213921 CET	49741	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.088221073 CET	443	49741	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.091451883 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.091487885 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.091563940 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.091696024 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.091708899 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.175700903 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.175844908 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.175906897 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.175949097 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.175971031 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.175986052 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.175992966 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.178531885 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.178558111 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.178692102 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.178811073 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.178823948 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.306201935 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.306382895 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.306454897 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.306552887 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.306569099 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.306600094 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.306605101 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.309089899 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.309109926 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.309324980 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.309494972 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.309505939 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.311518908 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.311589956 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.311641932 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.311676979 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.311676979 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.311696053 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.311708927 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.313642979 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.313678980 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.313750029 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.313879967 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.313894033 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.339488029 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.339643002 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.339931011 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.339931011 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.339993954 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.340006113 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.341710091 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.341761112 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:38.341834068 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.341959000 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:38.341974974 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:39.822957993 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:39.844577074 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:39.844613075 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:39.845159054 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:39.845166922 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:39.987365961 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:39.992788076 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.025558949 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.030129910 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.032179117 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.036043882 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.079051971 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.079078913 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.100260019 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.100270987 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.100755930 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.100760937 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.100872040 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.100888968 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.100974083 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.100989103 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.101362944 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.101370096 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.101475954 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.101483107 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.101682901 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.101687908 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.102042913 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.102046967 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.303621054 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.303697109 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.303775072 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.349060059 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.349086046 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.349100113 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.349108934 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.396048069 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.396091938 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.396161079 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.454359055 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.454380989 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.472258091 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.472337961 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.472405910 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.472588062 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.472611904 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.472625017 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.472631931 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.474710941 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.474740982 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.474803925 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.474920988 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.474934101 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.507198095 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.507281065 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.507327080 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.507385015 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.507397890 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.507456064 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.507567883 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.507581949 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.507597923 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.507603884 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.507772923 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.507797956 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.507808924 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.507813931 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.510823011 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.510837078 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.510885954 CET	49755	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.510896921 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.510905981 CET	443	49755	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.510956049 CET	49755	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.511125088 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.511126041 CET	49755	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.511138916 CET	443	49755	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.511138916 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.529078007 CET	49756	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:31:40.529699087 CET	49757	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:31:40.606566906 CET	49760	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:31:40.611129045 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.611290932 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.611385107 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.611417055 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.611428976 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.611438036 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.611443043 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.614031076 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.614065886 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.614136934 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.614321947 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:40.614337921 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:40.649061918 CET	80	49756	142.250.181.69	192.168.2.5
Nov 25, 2024 16:31:40.649147987 CET	49756	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:31:40.649410963 CET	49756	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:31:40.649616003 CET	80	49757	142.250.181.69	192.168.2.5
Nov 25, 2024 16:31:40.649677992 CET	49757	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:31:40.728136063 CET	80	49760	142.250.181.69	192.168.2.5
Nov 25, 2024 16:31:40.728297949 CET	49760	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:31:40.773598909 CET	80	49756	142.250.181.69	192.168.2.5
Nov 25, 2024 16:31:42.197951078 CET	80	49756	142.250.181.69	192.168.2.5
Nov 25, 2024 16:31:42.217807055 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.219259977 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.219289064 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.220073938 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.220081091 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.249134064 CET	49756	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:31:42.342869997 CET	49762	443	192.168.2.5	172.217.21.37
Nov 25, 2024 16:31:42.342930079 CET	443	49762	172.217.21.37	192.168.2.5
Nov 25, 2024 16:31:42.342993975 CET	49762	443	192.168.2.5	172.217.21.37
Nov 25, 2024 16:31:42.343779087 CET	49762	443	192.168.2.5	172.217.21.37
Nov 25, 2024 16:31:42.343796015 CET	443	49762	172.217.21.37	192.168.2.5
Nov 25, 2024 16:31:42.361227036 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.362133980 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.362164021 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.362750053 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.362756968 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.386162043 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.386531115 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.386545897 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.387712955 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.387717009 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.399132013 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.399475098 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.399507999 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.399866104 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.399873018 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.429677010 CET	443	49755	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.430027008 CET	49755	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.430042982 CET	443	49755	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.430481911 CET	49755	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.430485964 CET	443	49755	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.656603098 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.656698942 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.656744003 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.661245108 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.661269903 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.661282063 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.661290884 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.712502003 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.712541103 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.712603092 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.713342905 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.713356018 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.820255041 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.820421934 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.820489883 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.820569992 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.820569992 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.820605040 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.820627928 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.824589014 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.824615002 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.824738026 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.825231075 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.825244904 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.841732979 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.841799974 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.841857910 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.842344999 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.842364073 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.842374086 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.842381001 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.845098972 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.845122099 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.845191002 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.845525026 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.845536947 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.846765041 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.846822977 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.846895933 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.847409964 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.847409964 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.847434044 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.847466946 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.849999905 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.850022078 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.850086927 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.850265980 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.850281000 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.879585028 CET	443	49755	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.879739046 CET	443	49755	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.879812002 CET	49755	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.879836082 CET	49755	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.879852057 CET	443	49755	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.879863024 CET	49755	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.879868031 CET	443	49755	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.881715059 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.881761074 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:42.881839037 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.882031918 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:42.882061005 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.047274113 CET	443	49762	172.217.21.37	192.168.2.5
Nov 25, 2024 16:31:44.048876047 CET	49762	443	192.168.2.5	172.217.21.37
Nov 25, 2024 16:31:44.048898935 CET	443	49762	172.217.21.37	192.168.2.5
Nov 25, 2024 16:31:44.050582886 CET	443	49762	172.217.21.37	192.168.2.5
Nov 25, 2024 16:31:44.050673962 CET	49762	443	192.168.2.5	172.217.21.37
Nov 25, 2024 16:31:44.051534891 CET	49762	443	192.168.2.5	172.217.21.37
Nov 25, 2024 16:31:44.051637888 CET	443	49762	172.217.21.37	192.168.2.5
Nov 25, 2024 16:31:44.051713943 CET	49762	443	192.168.2.5	172.217.21.37
Nov 25, 2024 16:31:44.051724911 CET	443	49762	172.217.21.37	192.168.2.5
Nov 25, 2024 16:31:44.095410109 CET	49762	443	192.168.2.5	172.217.21.37
Nov 25, 2024 16:31:44.618891954 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.619138956 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.619385958 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:44.619405985 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.619479895 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:44.619509935 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.619848013 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:44.619853020 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.619951963 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:44.619961977 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.649619102 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.650079012 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:44.650103092 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.650479078 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:44.650484085 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.689668894 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.690072060 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:44.690089941 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.690478086 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:44.690481901 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.736148119 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.740099907 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:44.740139008 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.740577936 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:44.740583897 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:44.825949907 CET	49769	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:31:44.825990915 CET	443	49769	142.250.181.68	192.168.2.5
Nov 25, 2024 16:31:44.826056004 CET	49769	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:31:44.826354027 CET	49769	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:31:44.826374054 CET	443	49769	142.250.181.68	192.168.2.5
Nov 25, 2024 16:31:44.940993071 CET	443	49762	172.217.21.37	192.168.2.5
Nov 25, 2024 16:31:44.941412926 CET	49762	443	192.168.2.5	172.217.21.37
Nov 25, 2024 16:31:44.941459894 CET	443	49762	172.217.21.37	192.168.2.5
Nov 25, 2024 16:31:44.941519022 CET	49762	443	192.168.2.5	172.217.21.37
Nov 25, 2024 16:31:45.078460932 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.078543901 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.078602076 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.079478979 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.079493999 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.079504967 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.079515934 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.085927010 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.085956097 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.086025953 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.086184978 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.086203098 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.095180035 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.095264912 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.095333099 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.095423937 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.095432997 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.095442057 CET	49766	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.095446110 CET	443	49766	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.098196983 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.098234892 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.098304987 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.098433971 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.098452091 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.136117935 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.136185884 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.136231899 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.136358976 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.136372089 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.136379957 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.136384010 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.140933037 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.140980005 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.141047001 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.141201019 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.141218901 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.189469099 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.189536095 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.189590931 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.189773083 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.189789057 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.189801931 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.189806938 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.192331076 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.192363977 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.192425013 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.192552090 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.192568064 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.312915087 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.313293934 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.313355923 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.313380957 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.313400984 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.313410997 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.313416958 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.316268921 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.316313982 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:45.316387892 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.316536903 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:45.316550016 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:46.523952961 CET	443	49769	142.250.181.68	192.168.2.5
Nov 25, 2024 16:31:46.524494886 CET	49769	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:31:46.524522066 CET	443	49769	142.250.181.68	192.168.2.5
Nov 25, 2024 16:31:46.525526047 CET	443	49769	142.250.181.68	192.168.2.5
Nov 25, 2024 16:31:46.525588989 CET	49769	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:31:46.526428938 CET	49769	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:31:46.526494026 CET	443	49769	142.250.181.68	192.168.2.5
Nov 25, 2024 16:31:46.582146883 CET	49769	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:31:46.582158089 CET	443	49769	142.250.181.68	192.168.2.5
Nov 25, 2024 16:31:46.629354000 CET	49769	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:31:46.933703899 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:46.934402943 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:46.934473038 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:46.934865952 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:46.934870958 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:46.984249115 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:46.984996080 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:46.985017061 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:46.985431910 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:46.985436916 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:46.987452030 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:46.990523100 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:46.990535021 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:46.990894079 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:46.990896940 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.002485991 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.002837896 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.002872944 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.003189087 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.003195047 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.115550041 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.116725922 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.116754055 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.117166996 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.117172003 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.389131069 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.389209032 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.389273882 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.389452934 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.389452934 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.389497995 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.389523983 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.392350912 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.392390966 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.392474890 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.392683029 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.392697096 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.431968927 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.432060003 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.432118893 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.432252884 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.432252884 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.432271957 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.432281971 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.434930086 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.434947014 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.435019970 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.435197115 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.435210943 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.439176083 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.439254045 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.439307928 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.439392090 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.439398050 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.439404964 CET	49772	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.439409971 CET	443	49772	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.441524029 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.441545963 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.441629887 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.441757917 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.441775084 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.457851887 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.457948923 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.458015919 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.458101988 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.458111048 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.458131075 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.458136082 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.460242033 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.460256100 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.460344076 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.460464954 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.460479021 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.562127113 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.562228918 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.562293053 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.562463999 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.562482119 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.562494040 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.562499046 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.565162897 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.565224886 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:47.565306902 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.565444946 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:47.565499067 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.111650944 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.112154007 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.112189054 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.112633944 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.112638950 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.157108068 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.157561064 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.157587051 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.158140898 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.158145905 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.250324011 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.250447989 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.250859022 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.250878096 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.250922918 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.250938892 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.251379013 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.251384974 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.251415014 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.251419067 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.429331064 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.429816961 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.429836035 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.430428028 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.430433989 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.576864958 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.576935053 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.576988935 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.577130079 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.577143908 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.577155113 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.577161074 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.579911947 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.579946041 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.580039024 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.580204010 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.580218077 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.606113911 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.606287956 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.606365919 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.606427908 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.606451988 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.606492996 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.606498003 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.610371113 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.610426903 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.610502005 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.610619068 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.610635996 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.697691917 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.697756052 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.697810888 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.698291063 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.698304892 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.698314905 CET	49781	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.698319912 CET	443	49781	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.701404095 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.701435089 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.701533079 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.701658964 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.701673031 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.737029076 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.737090111 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.737132072 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.737250090 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.737258911 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.737271070 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.737276077 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.739573002 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.739586115 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:49.739665985 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.739830017 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:49.739841938 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:50.070461988 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:50.070538044 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:50.070596933 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:50.072498083 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:50.072505951 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:50.072519064 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:50.072525024 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:50.078495026 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:50.078526020 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:50.078596115 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:50.078758001 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:50.078771114 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.548532963 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.556560993 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.556590080 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.557226896 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.557233095 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.616170883 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.616643906 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.616662979 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.617094994 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.617100000 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.675214052 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.675607920 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.675628901 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.676040888 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.676048040 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.806576967 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.807070971 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.807095051 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.807528019 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.807533979 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.823164940 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.823563099 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.823585987 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.823992014 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.823997021 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.984741926 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.984913111 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.984997034 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.985057116 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.985076904 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.985090017 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.985096931 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.987847090 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.987890959 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:51.987972975 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.988148928 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:51.988162994 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.064014912 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.064090014 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.064136982 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.064351082 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.064367056 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.064378023 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.064388990 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.067338943 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.067384005 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.067457914 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.067606926 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.067625999 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.240848064 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.240931988 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.241089106 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.241132975 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.241147041 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.241157055 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.241163015 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.243541002 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.243558884 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.243638992 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.243761063 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.243772030 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.278201103 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.278258085 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.278306961 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.278476000 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.278486967 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.278496981 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.278501987 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.281528950 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.281579018 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.281651974 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.281783104 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.281799078 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.298019886 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.298115015 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.298163891 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.298276901 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.298288107 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.298300982 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.298305035 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.300791979 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.300812960 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:52.300888062 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.301043034 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:52.301054001 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:53.773042917 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:53.773591995 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:53.773629904 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:53.773947001 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:53.773953915 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:53.871685028 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:53.872323990 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:53.872347116 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:53.872791052 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:53.872797012 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.055598021 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.056020021 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.056041956 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.056540966 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.056546926 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.083851099 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.084481955 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.084512949 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.085477114 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.085481882 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.088732958 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.089206934 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.089232922 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.089915991 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.089920998 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.220659018 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.220726013 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.220777035 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.221206903 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.221220016 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.221234083 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.221240044 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.225189924 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.225229979 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.225296974 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.225609064 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.225629091 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.383800983 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.383878946 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.383974075 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.384121895 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.384140015 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.384176970 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.384183884 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.387178898 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.387217045 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.387295008 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.387458086 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.387473106 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.580570936 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.580653906 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.580667019 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.580673933 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.580734015 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.580894947 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.580899000 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.580909967 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.580920935 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.580925941 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.580929041 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.580965996 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.581015110 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.582007885 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.582012892 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.582026005 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.582029104 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.582377911 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.582377911 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.582392931 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.582402945 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.587390900 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.587436914 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.587568045 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.587740898 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.587785006 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.587807894 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.587824106 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.587835073 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.587935925 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.587941885 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.588965893 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.588996887 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:54.589056015 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.589169979 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:54.589174986 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.217487097 CET	443	49769	142.250.181.68	192.168.2.5
Nov 25, 2024 16:31:56.217567921 CET	443	49769	142.250.181.68	192.168.2.5
Nov 25, 2024 16:31:56.217727900 CET	49769	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:31:56.237541914 CET	49769	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:31:56.237601995 CET	443	49769	142.250.181.68	192.168.2.5
Nov 25, 2024 16:31:56.456679106 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.457387924 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.457428932 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.457915068 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.457921028 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.575748920 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.576983929 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.577017069 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.577394962 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.577718019 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.577723026 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.577872038 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.577908993 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.578655005 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.578661919 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.594505072 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.594955921 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.594983101 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.595438957 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.595443964 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.612946987 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.613356113 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.613387108 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.613811016 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.613816023 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.900052071 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.900127888 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.900234938 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.900366068 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.900388002 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.900415897 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.900422096 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.903959036 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.904011011 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:56.904081106 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.904237032 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:56.904252052 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.019618034 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.019699097 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.019783974 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.019985914 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.020005941 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.020021915 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.020029068 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.021219969 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.021291971 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.021352053 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.021969080 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.021985054 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.022017956 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.022023916 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.026129961 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.026158094 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.026225090 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.027286053 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.027328014 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.027405977 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.030190945 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.030206919 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.030308008 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.030328989 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.040237904 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.040308952 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.040364027 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.040519953 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.040519953 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.040532112 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.040540934 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.043466091 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.043499947 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.043571949 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.043715000 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.043755054 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.084656954 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.084733963 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.084785938 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.084975958 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.084994078 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.085005045 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.085011005 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.087661982 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.087697029 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:57.087774992 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.087901115 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:57.087913990 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.691512108 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.692694902 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:58.692719936 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.693177938 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:58.693181992 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.826648951 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.827286959 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.828444958 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:58.828464985 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.828907967 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:58.828912020 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.829385996 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.829693079 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:58.829726934 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.830087900 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:58.830094099 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.831232071 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.832472086 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:58.832504988 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.832869053 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:58.832876921 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.833086967 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:58.833103895 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:58.833787918 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:58.833794117 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.262875080 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.262964010 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.263026953 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.284063101 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.284081936 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.284092903 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.284106016 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.285075903 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.285151958 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.285221100 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.289401054 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.289561033 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.290265083 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.297518969 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.297532082 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.297540903 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.297549963 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.298415899 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.298429966 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.298439026 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.298444986 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.302391052 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.302405119 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.303438902 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.303458929 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.303483009 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.304478884 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.304495096 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.304548025 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.304614067 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.304630041 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.305239916 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.305249929 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.306210041 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.306497097 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.306512117 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.364351034 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.364458084 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.366290092 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.370795012 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.370817900 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.370830059 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.370836020 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.379482031 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.379581928 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.379666090 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.379966974 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.379981995 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.402380943 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.402462006 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.402527094 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.404118061 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.404134989 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.404148102 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.404156923 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.406198025 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.406228065 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 16:31:59.406289101 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.406790018 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:31:59.406804085 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:00.993279934 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:00.993804932 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:00.993827105 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:00.994278908 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:00.994285107 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.175456047 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.175932884 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.175951958 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.176522970 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.176531076 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.177927017 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.178289890 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.178301096 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.178834915 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.178839922 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.196659088 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.197026968 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.197045088 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.197515965 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.197521925 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.252917051 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.254884005 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.254903078 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.255340099 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.255345106 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.439120054 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.439183950 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.439251900 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.439470053 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.439486980 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.439496994 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.439502954 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.442466021 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.442509890 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.442590952 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.442786932 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.442804098 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.628958941 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.629019976 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.629127979 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.629357100 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.629357100 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.629364967 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.629374981 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.632395029 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.632426023 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.632529020 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.632725000 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.632740021 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.632896900 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.632961988 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.633033991 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.633161068 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.633161068 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.633172035 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.633187056 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.635324955 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.635354996 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.635417938 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.635577917 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.635591030 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.650388956 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.650552034 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.650638103 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.650669098 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.650669098 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.650676966 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.650690079 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.653312922 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.653325081 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.653431892 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.654067993 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.654078960 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.725543022 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.725615978 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.725683928 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.725970984 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.725982904 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.726000071 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.726006031 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.729474068 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.729509115 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:01.729619980 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.729762077 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:01.729775906 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.509059906 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.517618895 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.517637968 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.518649101 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.518654108 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.721188068 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:03.721240997 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:03.721316099 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:03.721522093 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:03.721537113 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:03.901285887 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.901829958 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.901849985 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.902443886 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.902460098 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.915575981 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.916246891 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.916264057 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.916754007 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.916758060 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.928378105 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.928783894 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.928811073 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.929200888 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.929207087 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.947180033 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.947623968 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.947639942 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.948030949 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.948035955 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.989254951 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.989312887 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.989370108 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.989537001 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.989552021 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.989562035 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.989567041 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.993212938 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.993242979 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:03.993366003 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.993555069 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:03.993567944 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.345110893 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.345261097 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.345392942 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.345422983 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.345441103 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.345449924 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.345455885 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.348160982 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.348206997 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.348278999 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.348412991 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.348428011 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.366209030 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.366277933 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.366446018 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.366508007 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.366528034 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.366538048 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.366544008 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.369306087 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.369349957 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.369414091 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.369657993 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.369677067 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.386740923 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.386841059 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.386909962 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.387137890 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.387156963 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.387171984 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.387180090 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.390342951 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.390379906 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.390459061 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.390578985 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.390595913 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.396888018 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.396953106 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.397092104 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.397116899 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.397116899 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.397130013 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.397134066 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.399235010 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.399250984 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:04.399327040 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.399476051 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:04.399488926 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:05.418066978 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:05.418114901 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:05.418175936 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:05.418667078 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:05.418678999 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:05.448673964 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:05.448928118 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:05.448941946 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:05.450270891 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:05.450344086 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:05.451770067 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:05.451819897 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:05.452871084 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:05.452944040 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:05.453057051 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:05.453063965 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:05.496222019 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:05.825340986 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:05.871695042 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:05.896740913 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:05.896759033 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:05.897264957 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:05.897269011 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.074601889 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:06.074645996 CET	443	49855	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:06.074717999 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:06.074748039 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:06.074763060 CET	443	49856	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:06.074812889 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:06.075053930 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:06.075067043 CET	443	49856	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:06.075359106 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:06.075375080 CET	443	49855	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:06.153795004 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.156335115 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.156362057 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.156802893 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.156809092 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.189989090 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.190543890 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.190563917 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.191026926 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.191034079 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.229441881 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.233977079 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.234009981 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.234613895 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.234622002 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.266642094 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.267308950 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.267337084 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.267914057 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.267920971 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.269772053 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.269839048 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.269906044 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.270111084 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.270136118 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.270181894 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.270190001 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.277214050 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.277250051 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.277318954 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.277605057 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.277618885 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.341324091 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.341470957 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.341530085 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.341537952 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.342668056 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.349304914 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.349366903 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.356360912 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.356416941 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.368047953 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.368114948 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.368140936 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.368191004 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.385234118 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.385317087 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.460999966 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.461071968 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.465301991 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.465375900 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.532644987 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.532722950 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.532735109 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.532761097 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.532813072 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.540627956 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.540688992 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.549307108 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.549379110 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.556379080 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.556437969 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.563014984 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.563095093 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.577039003 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.577105999 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.577111959 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.590513945 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.590627909 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.590634108 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.603805065 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.603858948 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.603864908 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.603869915 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.603898048 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.603957891 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.604000092 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.604057074 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.604058027 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.604091883 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.604233027 CET	443	49844	172.217.19.238	192.168.2.5
Nov 25, 2024 16:32:06.604293108 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.605314016 CET	49844	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:32:06.605317116 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.605341911 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.605355024 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.605360031 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.611587048 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.611624956 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.611721039 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.611895084 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.611907959 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.650512934 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.650676012 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.650773048 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.650816917 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.650816917 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.650831938 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.650835991 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.654947042 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.654992104 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.655067921 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.655193090 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.655210972 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.693413973 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.693480015 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.693720102 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.693761110 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.693777084 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.693790913 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.693797112 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.696624041 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.696656942 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.696727991 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.696858883 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.696873903 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.728605032 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.728662968 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.728735924 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.728755951 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.730798960 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.730868101 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.731410027 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.731422901 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.731436014 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.731442928 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.739455938 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.739485025 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:06.739578009 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.739710093 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:06.739721060 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:07.222975016 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.223067045 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:07.227353096 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:07.227364063 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.227593899 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.237346888 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:07.283319950 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.766875029 CET	443	49856	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.770502090 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.770524979 CET	443	49856	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.771060944 CET	443	49856	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.771120071 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.772105932 CET	443	49856	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.772162914 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.773005009 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.773075104 CET	443	49856	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.773199081 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.773205996 CET	443	49856	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.825479031 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.825752020 CET	443	49855	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.826025963 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.826040983 CET	443	49855	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.826559067 CET	443	49855	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.826616049 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.827580929 CET	443	49855	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.827630997 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.827790976 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.827872992 CET	443	49855	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.827948093 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.827955961 CET	443	49855	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:07.873366117 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:07.938026905 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.938051939 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.938066959 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.938177109 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:07.938193083 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.938252926 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:07.975188017 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.975236893 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.975276947 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:07.975286961 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.975296021 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.975322962 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:07.975341082 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:07.975433111 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:07.975445032 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:07.975455999 CET	49853	443	192.168.2.5	4.245.163.56
Nov 25, 2024 16:32:07.975461006 CET	443	49853	4.245.163.56	192.168.2.5
Nov 25, 2024 16:32:08.068149090 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.071573973 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.071607113 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.072029114 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.072036028 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.398430109 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.398895979 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.398936987 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.399543047 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.399549961 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.420068026 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.420737982 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.420783997 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.421188116 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.421196938 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.516741991 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.516766071 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.516876936 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.516891003 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.516961098 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.517117977 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.517123938 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.517137051 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.517311096 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.517342091 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.517385960 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.519706011 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.519742012 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.519823074 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.520049095 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.520064116 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.556838989 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.557519913 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.557547092 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.557926893 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.557934999 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.574332952 CET	443	49856	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:08.575056076 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:08.575113058 CET	443	49856	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:08.575170040 CET	49856	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:08.575922966 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:08.575951099 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:08.576011896 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:08.576298952 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:08.576314926 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:08.648066998 CET	443	49855	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:08.648617983 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:08.648708105 CET	443	49855	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:08.648763895 CET	49855	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:08.649637938 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:08.649652004 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:08.649712086 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:08.650105000 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:08.650115013 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:08.723608017 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.724124908 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.724154949 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.724586964 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.724594116 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.853180885 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.853245020 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.853355885 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.853382111 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.853637934 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.853657007 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.853671074 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.854007006 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.854101896 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.854152918 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.857043028 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.857084036 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.857161999 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.857409000 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.857424974 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.862076044 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.865211010 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.865278959 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.865330935 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.865349054 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.865361929 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.865369081 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.867520094 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.867544889 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:08.867679119 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.867767096 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:08.867774963 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.007291079 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.010400057 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.010497093 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.010540009 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.010560036 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.010574102 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.010581970 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.013571978 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.013597965 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.013672113 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.013834953 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.013849020 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.177064896 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.179728031 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.179796934 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.179842949 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.179857969 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.179872036 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.179877996 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.183217049 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.183249950 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:09.183316946 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.183465004 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:09.183485985 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.313831091 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.314414978 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.314435005 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.314918041 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.314922094 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.318599939 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.318833113 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.318849087 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.319222927 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.319283009 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.319977045 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.320034981 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.320179939 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.320245028 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.320353031 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.320353031 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.320364952 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.363360882 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.370953083 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.395914078 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.396208048 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.396219015 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.397417068 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.397496939 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.399950981 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.400010109 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.400176048 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.400324106 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.400329113 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.400341988 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.400346041 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.443341970 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.449090004 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.449099064 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.455239058 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.455276012 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.455339909 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.455732107 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.455748081 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:10.495979071 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:10.711427927 CET	49876	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:10.711457968 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:10.711543083 CET	49876	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:10.711812019 CET	49876	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:10.711826086 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:10.774348021 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.777827024 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.777904034 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.777967930 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.777986050 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.777996063 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.778002024 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.781027079 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.781059980 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.781166077 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.781373024 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.781378984 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.785852909 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.786281109 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.786305904 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.786715031 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.786720037 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.799088001 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.799485922 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.799504042 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.799851894 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.799856901 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.885308981 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.886070967 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.886086941 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.886570930 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.886575937 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.967895985 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.968563080 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.968580961 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:10.969042063 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:10.969048977 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.072185993 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:11.076055050 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:11.076134920 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:11.076857090 CET	49866	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:11.076872110 CET	443	49866	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:11.141884089 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:11.145781040 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:11.145891905 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:11.146704912 CET	49870	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:11.146714926 CET	443	49870	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:11.219026089 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:11.219057083 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:11.219141960 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:11.219415903 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:11.219429016 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:11.224292994 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.227547884 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.227617025 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.227660894 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.227678061 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.227689028 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.227694035 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.231506109 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.231548071 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.231645107 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.231802940 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.231817007 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.245413065 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.248989105 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.249063015 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.249167919 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.249167919 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.249193907 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.249208927 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.251907110 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.251933098 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.252017021 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.252156019 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.252170086 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.348400116 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.352886915 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.353046894 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.353224039 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.353239059 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.356395960 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.356430054 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.356539011 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.356812000 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.356826067 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.415884018 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.415982962 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.416142941 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.416595936 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.416595936 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.416624069 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.416635990 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.419641018 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.419676065 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:11.419771910 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.419955969 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:11.419972897 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:12.148375988 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.148710966 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.148734093 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.149102926 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.149188042 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.149797916 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.149858952 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.149996996 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.150053978 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.150171995 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.150178909 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.198987007 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.451752901 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:12.452127934 CET	49876	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:12.452151060 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:12.452490091 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:12.452810049 CET	49876	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:12.452873945 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:12.452986002 CET	49876	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:12.499337912 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:12.565773964 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:12.566239119 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:12.566265106 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:12.566690922 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:12.566694975 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:12.956234932 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.956492901 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.956568956 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.956835985 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.956856012 CET	443	49875	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.956872940 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.956906080 CET	49875	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.957782984 CET	49884	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.957822084 CET	443	49884	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.957895994 CET	49884	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.958200932 CET	49884	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.958218098 CET	443	49884	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.962704897 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:12.962724924 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.963054895 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.963071108 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.963346004 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:12.963370085 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:12.963464022 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.963526964 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.963922977 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:12.963928938 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:12.964184046 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.964235067 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.964401007 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:12.964497089 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:12.964521885 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:13.011332989 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:13.011717081 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:13.011727095 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:13.012409925 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.013787031 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.013856888 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.013889074 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.013904095 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.013928890 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.013935089 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.017576933 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.017591953 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.017698050 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.017851114 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.017863989 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.043786049 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.044214010 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.044224024 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.044660091 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.044665098 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.058584929 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:13.147142887 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:13.147299051 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:13.147337914 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:13.147366047 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:13.147377968 CET	49876	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:13.147397995 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:13.147414923 CET	49876	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:13.157336950 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:13.157429934 CET	49876	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:13.157649040 CET	49876	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:13.157660007 CET	443	49876	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:13.204899073 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.205410004 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.205430031 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.205866098 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.205872059 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.219624996 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.220091105 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.220124960 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.220488071 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.220494986 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.306773901 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:13.306822062 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:13.306966066 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:13.307169914 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:13.307184935 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:13.405987024 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.409616947 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.409723043 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.409797907 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.409797907 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.409816980 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.409826994 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.412619114 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.412659883 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.412733078 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.412894011 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.412905931 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.573069096 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.577085972 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.577182055 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.581964016 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.581964016 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.581974983 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.581983089 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.584767103 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.584806919 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.584909916 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.585083961 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.585098028 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.759115934 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.759759903 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.759838104 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.759946108 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.759953022 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.760025024 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.760025024 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.760049105 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.760066032 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.762192965 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.762280941 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.762716055 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.762731075 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.762733936 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.762744904 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.762751102 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.762768984 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.762861013 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.763796091 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.763813972 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.764904976 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.764949083 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.765038967 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.765156984 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:13.765171051 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:13.824260950 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:13.824306965 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:13.824372053 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:13.824388027 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:13.825448990 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:13.825491905 CET	443	49879	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:13.825542927 CET	49879	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:13.826529980 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:13.826565981 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:13.826626062 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:13.826874018 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:13.826891899 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:14.736099005 CET	443	49884	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:14.736423969 CET	49884	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:14.736438036 CET	443	49884	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:14.736846924 CET	443	49884	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:14.737181902 CET	49884	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:14.737248898 CET	443	49884	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:14.737371922 CET	49884	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:14.737371922 CET	49884	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:14.737407923 CET	443	49884	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:14.885044098 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:14.885878086 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:14.885899067 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:14.886461020 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:14.886466980 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.162004948 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.162733078 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:15.162745953 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.163786888 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.163882017 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:15.164618015 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:15.164681911 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.164835930 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:15.164844036 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.214950085 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:15.224200964 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.224941969 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.224967003 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.225565910 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.225570917 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.331088066 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.334703922 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.334760904 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.334798098 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.334839106 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.334912062 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.334933043 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.334944010 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.334949970 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.338007927 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.338042021 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.338114977 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.338259935 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.338273048 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.500971079 CET	443	49884	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:15.505871058 CET	443	49884	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:15.506010056 CET	49884	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:15.507086992 CET	49884	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:15.507103920 CET	443	49884	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:15.513499022 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.514023066 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.514033079 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.514486074 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.514491081 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.584275961 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:15.584650993 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:15.584681988 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:15.585047960 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:15.585118055 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:15.585768938 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:15.585823059 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:15.585961103 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:15.586026907 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:15.586090088 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:15.601964951 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.602489948 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.602499962 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.602936983 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.602942944 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.631351948 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:15.636989117 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:15.636997938 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:15.654190063 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.654875994 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.654895067 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.655343056 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.655347109 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.671181917 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.675502062 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.675591946 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.675641060 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.675657988 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.675668955 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.675673962 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.678601027 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.678622007 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.678690910 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.678823948 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.678834915 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.683847904 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:15.900268078 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.900322914 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.900358915 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.900391102 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.900398970 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:15.900409937 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.900444031 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:15.908723116 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.908797026 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:15.909006119 CET	49886	443	192.168.2.5	172.217.21.36
Nov 25, 2024 16:32:15.909022093 CET	443	49886	172.217.21.36	192.168.2.5
Nov 25, 2024 16:32:15.971405983 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.971482992 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.971556902 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.971760988 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.971766949 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.971776962 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.971781015 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.974248886 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.974284887 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:15.974358082 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.974486113 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:15.974498987 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.059634924 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.062248945 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.062299967 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.062304020 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.062347889 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.062407970 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.062418938 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.062432051 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.062437057 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.065116882 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.065148115 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.065217972 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.065363884 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.065378904 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.107029915 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.110151052 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.110328913 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.110328913 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.110328913 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.112754107 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.112798929 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.112941027 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.113003969 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.113013029 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.418606043 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:16.418628931 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:16.535240889 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:16.535289049 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:16.535353899 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:16.535382986 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:16.536402941 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:16.536452055 CET	443	49891	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:16.536501884 CET	49891	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:16.537117958 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:16.537167072 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:16.537233114 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:16.537614107 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:16.537630081 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:17.130702972 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.131345987 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.131357908 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.131833076 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.131838083 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.580584049 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.580667973 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.580729961 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.580919027 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.580935955 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.580945969 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.580950975 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.584000111 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.584048986 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.584122896 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.584269047 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.584281921 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.597407103 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.597894907 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.597913980 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.598404884 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.598408937 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.890435934 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.891082048 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.891091108 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.891558886 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.891562939 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.966398001 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.966999054 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.967011929 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.967600107 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.967605114 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.975552082 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.975965023 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.975980043 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:17.976475000 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:17.976481915 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.224267006 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.227303028 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.227426052 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.227488995 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.227500916 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.227521896 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.227531910 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.230211973 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.230247974 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.230364084 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.230721951 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.230736971 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.284981012 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:18.285327911 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:18.285358906 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:18.285763025 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:18.285830975 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:18.286499977 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:18.286552906 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:18.286751986 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:18.286814928 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:18.286907911 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:18.286917925 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:18.335701942 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.338983059 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.339071035 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.339097023 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.339108944 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.339118958 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.339123964 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.339696884 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:18.342149973 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.342186928 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.342263937 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.342453003 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.342468023 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.410413980 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.413316965 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.413397074 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.413459063 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.413471937 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.413481951 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.413487911 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.416260004 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.416312933 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.416388035 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.416524887 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.416538954 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.432790995 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.436038971 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.436106920 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.436115980 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.436171055 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.436218023 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.436239004 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.436260939 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.436269045 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.438566923 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.438652039 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:18.438729048 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.438880920 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:18.438899040 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:19.373433113 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:19.373465061 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:19.373517990 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:19.373532057 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:19.374290943 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:19.374363899 CET	443	49897	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:19.374420881 CET	49897	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:19.907697916 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:19.908320904 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:19.908351898 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:19.908813953 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:19.908819914 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.025049925 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.025718927 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.025738955 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.026182890 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.026187897 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.072722912 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.073345900 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.073384047 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.073805094 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.073813915 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.236706972 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.237282991 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.237313986 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.237744093 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.237751961 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.268486977 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.268949986 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.268965960 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.269402027 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.269407988 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.361099005 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.364336014 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.364468098 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.364474058 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.364624977 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.364756107 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.364769936 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.364799023 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.364805937 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.367719889 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.367744923 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.367820978 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.367981911 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.367995024 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.480387926 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.483448982 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.483531952 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.483602047 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.483620882 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.483633995 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.483639002 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.486449003 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.486479044 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.486555099 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.486695051 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.486706972 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.640641928 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.643724918 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.643799067 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.643877029 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.643903971 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.643923998 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.643932104 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.647058010 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.647098064 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.647209883 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.647401094 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.647419930 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.771400928 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.774349928 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.774395943 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.774450064 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.774506092 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.774569035 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.774569035 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.774610043 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.774635077 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.777261972 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.777297974 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.777363062 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.777512074 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.777527094 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.779598951 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.783035040 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.783174038 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.783233881 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.783243895 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.783262014 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.783267021 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.785567045 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.785599947 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:20.785681009 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.785809994 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:20.785820007 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.292840004 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.293363094 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.293378115 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.293879032 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.293884993 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.332196951 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.332696915 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.332717896 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.333069086 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.333075047 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.438764095 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.439563036 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.439583063 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.440038919 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.440043926 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.653604031 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.654244900 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.654264927 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.654735088 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.654741049 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.679835081 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.680696964 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.680721045 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.681075096 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.681081057 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.746890068 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.749799013 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.749922037 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.750026941 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.750049114 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.750077009 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.750083923 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.753119946 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.753146887 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.753225088 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.753354073 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.753370047 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.769449949 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.772569895 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.772656918 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.772717953 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.772732019 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.772742987 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.772748947 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.776772022 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.776827097 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.776957989 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.777380943 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.777411938 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.877511978 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.880628109 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.880779028 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.880850077 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.880867958 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.880893946 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.880898952 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.886045933 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.886064053 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:22.886209011 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.886563063 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:22.886584997 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.097917080 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.101638079 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.101703882 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.101717949 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.101754904 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.101805925 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.101840019 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.101852894 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.101862907 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.101866961 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.104549885 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.104636908 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.104720116 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.104865074 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.104902029 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.129079103 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.132080078 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.132208109 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.132235050 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.132235050 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.132247925 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.132256031 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.134550095 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.134577036 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:23.134659052 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.134783983 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:23.134799957 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.687808990 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.688384056 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:24.688395977 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.688853979 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:24.688858986 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.700500965 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.701216936 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:24.701236010 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.701560974 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:24.701572895 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.831835032 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.832820892 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:24.832834959 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.833293915 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:24.833298922 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.967601061 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.968255043 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:24.968280077 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:24.968702078 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:24.968714952 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.084368944 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.084995985 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.085011005 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.085491896 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.085499048 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.130080938 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.132812977 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.132903099 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.132953882 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.132975101 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.132987976 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.132994890 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.135708094 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.135751009 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.135837078 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.135965109 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.135973930 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.150327921 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.153465986 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.153537035 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.153578997 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.153601885 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.153626919 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.153641939 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.156467915 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.156502008 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.156625986 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.156898975 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.156913996 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.296854973 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.297957897 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.298021078 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.298043966 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.298084974 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.298121929 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.298140049 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.298154116 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.298161030 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.300894976 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.300940990 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.301007032 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.301161051 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.301173925 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.415393114 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.418606997 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.418741941 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.418935061 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.418957949 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.423182011 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.423217058 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.423830032 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.423830986 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.423865080 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.543062925 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.546176910 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.546277046 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.546319008 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.546338081 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.546360016 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.546365023 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.549069881 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.549118996 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.549302101 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.549350023 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:25.549360991 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:25.652139902 CET	49757	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:32:25.730376005 CET	49760	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:32:25.773750067 CET	80	49757	142.250.181.69	192.168.2.5
Nov 25, 2024 16:32:25.850439072 CET	80	49760	142.250.181.69	192.168.2.5
Nov 25, 2024 16:32:27.026668072 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.027432919 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.027451992 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.028162956 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.028168917 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.031712055 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.032291889 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.032309055 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.032715082 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.032721996 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.199390888 CET	49756	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:32:27.225502968 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.226505995 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.226521015 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.227013111 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.227018118 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.294909000 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.295876026 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.295914888 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.297369003 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.297374964 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.324676037 CET	80	49756	142.250.181.69	192.168.2.5
Nov 25, 2024 16:32:27.346626043 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.347259998 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.347271919 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.347744942 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.347749949 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.476129055 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.479206085 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.479263067 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.479281902 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.479331017 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.479397058 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.479397058 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.479418039 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.479430914 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.482445955 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.485110044 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.485167027 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.485301971 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.485443115 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.485464096 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.485981941 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.486073017 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.486135960 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.486135960 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.486164093 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.486176968 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.488423109 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.488487959 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.488568068 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.488702059 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.488714933 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.691348076 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.694356918 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.694446087 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.694514990 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.694538116 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.694556952 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.694562912 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.697993040 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.698065042 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.698138952 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.698302984 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.698314905 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.745374918 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.748322010 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.748387098 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.748389006 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.748444080 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.748503923 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.748537064 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.748558998 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.748568058 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.754944086 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.755000114 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.755110979 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.755286932 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.755295038 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.783518076 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.783710957 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.783770084 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.783811092 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.783821106 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.783838987 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.783844948 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.787676096 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.787703991 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:27.787883997 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.788029909 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:27.788044930 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.220124960 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.220681906 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.220707893 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.221164942 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.221172094 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.281136990 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.282099962 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.282125950 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.282533884 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.282540083 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.288187027 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.288738966 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.288765907 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.289091110 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.289098024 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.488028049 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.488953114 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.488980055 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.489423990 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.489434004 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.579554081 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.580442905 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.580451965 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.580930948 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.580936909 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.683339119 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.686409950 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.686534882 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.686646938 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.686661959 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.686713934 CET	49919	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.686718941 CET	443	49919	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.691946983 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.691979885 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.692145109 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.692503929 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.692517042 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.730611086 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.734143019 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.734199047 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.734266996 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.734395027 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.734440088 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.734453917 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.734466076 CET	49918	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.734472036 CET	443	49918	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.736939907 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.736964941 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.737122059 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.737246990 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.737258911 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.758239031 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.762592077 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.762670994 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.762732029 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.762753010 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.762763023 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.762768030 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.765714884 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.765742064 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.765822887 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.765974045 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.765985966 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.986480951 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.986510038 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.986562967 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.986675024 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.986813068 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.987339973 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.987358093 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.992499113 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.992526054 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:29.992661953 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.993030071 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:29.993043900 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:30.045914888 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:30.048265934 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:30.048376083 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:30.048468113 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:30.048516035 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:30.048563004 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:30.048576117 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:30.048583031 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:30.048589945 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:30.052414894 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:30.052443027 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:30.052517891 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:30.052648067 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:30.052656889 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.627278090 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.627876997 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:31.627892971 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.628346920 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:31.628353119 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.631310940 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.631637096 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:31.631648064 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.631992102 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:31.631997108 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.649343014 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.649662971 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:31.649673939 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.650008917 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:31.650013924 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.854487896 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.855154037 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:31.855170012 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.855618954 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:31.855627060 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.866843939 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.867321968 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:31.867341995 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:31.867714882 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:31.867722034 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.083342075 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.085725069 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.086369991 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.086443901 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.086497068 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.086513996 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.086527109 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.086540937 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.088876963 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.089018106 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.089046955 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.089063883 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.089072943 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.089078903 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.092112064 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.092128038 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.092200041 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.092883110 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.092915058 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.092992067 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.093053102 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.093066931 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.093135118 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.093148947 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.267582893 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.270548105 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.270653963 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.270781040 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.270798922 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.270811081 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.270816088 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.273937941 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.273973942 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.274101019 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.274279118 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.274297953 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.379386902 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.379549026 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.379621983 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.379820108 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.379829884 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.379853010 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.379858971 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.383012056 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.383034945 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.383131027 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.383395910 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.383409977 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.393474102 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.393670082 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.393724918 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.393733978 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.393795967 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.393857002 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.393862963 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.393877029 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.393882036 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.396373034 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.396403074 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:32.396471977 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.396636009 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:32.396651030 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:33.881424904 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:33.881973982 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:33.881983042 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:33.882436991 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:33.882441044 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:33.895157099 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:33.900573969 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:33.900597095 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:33.900998116 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:33.901005030 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.199403048 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.200355053 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.200371981 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.201024055 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.201029062 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.252598047 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.253241062 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.253254890 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.253654003 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.253659964 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.368031979 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.370882988 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.370964050 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.370984077 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.371001959 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.371098042 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.371243000 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.371248960 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.371334076 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.371339083 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.374797106 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.374834061 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.375157118 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.375157118 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.375190020 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.402076006 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.402136087 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.402232885 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.402513981 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.402529955 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.402546883 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.402554989 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.405695915 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.405730009 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.405827999 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.406079054 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.406092882 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.409147978 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.409568071 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.409576893 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.409986019 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.409991026 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.647237062 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.652074099 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.652153015 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.652215958 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.652216911 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.652236938 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.652256012 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.654963970 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.654999018 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.655086040 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.655246019 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.655258894 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.692774057 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.692938089 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.693075895 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.693196058 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.693196058 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.693217993 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.693228960 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.695823908 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.695851088 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.695930004 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.696154118 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.696171045 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.890757084 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.893904924 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.893949986 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.894009113 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.894129992 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.894320965 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.894334078 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.898200989 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.898227930 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:34.898343086 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.898624897 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:34.898641109 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.187259912 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.187923908 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.187949896 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.188380003 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.188385963 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.233381987 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.234102964 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.234136105 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.234524965 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.234530926 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.421621084 CET	49938	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:36.421664953 CET	443	49938	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:36.421762943 CET	49938	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:36.422152996 CET	49938	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:36.422168970 CET	443	49938	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:36.506820917 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.507589102 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.507608891 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.508059978 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.508066893 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.533664942 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.534271002 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.534293890 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.534719944 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.534725904 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.798362017 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.798554897 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.798641920 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.798748970 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.798763990 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.798774004 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.798780918 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.802498102 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.802524090 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.802639961 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.802805901 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.802823067 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.830486059 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.830517054 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.830560923 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.830667973 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.830715895 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.831036091 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.831044912 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.831056118 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.831062078 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.834711075 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.834749937 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.834933043 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.835381031 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.835392952 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.921621084 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.922223091 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.922240973 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.922697067 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.922703981 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.971667051 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.974633932 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.974730968 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.975006104 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.975027084 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.975039959 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.975047112 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.982109070 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.982139111 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.982207060 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.982379913 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.982395887 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.983170033 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.987175941 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.987282038 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.987323046 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.987340927 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.987351894 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.987358093 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.989816904 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.989840031 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:36.989926100 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.990051031 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:36.990066051 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:37.547760963 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:37.550602913 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:37.550703049 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:37.550755978 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:37.550779104 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:37.550789118 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:37.550796032 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:37.553724051 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:37.553744078 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:37.553838015 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:37.554028034 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:37.554040909 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.144359112 CET	443	49938	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.144751072 CET	49938	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.144771099 CET	443	49938	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.145152092 CET	443	49938	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.145464897 CET	49938	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.145534039 CET	443	49938	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.145646095 CET	49938	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.145672083 CET	49938	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.145678043 CET	443	49938	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.618208885 CET	49944	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.618252993 CET	443	49944	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.618316889 CET	49944	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.618721008 CET	49944	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.618732929 CET	443	49944	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.792814970 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.793462992 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:38.793483973 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.794001102 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:38.794007063 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.829754114 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.830419064 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:38.830429077 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.830910921 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:38.830916882 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.882117033 CET	443	49938	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.884790897 CET	443	49938	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.884884119 CET	49938	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.885027885 CET	49938	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.885039091 CET	443	49938	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.890913010 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.890930891 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.891036034 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.891284943 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:38.891304016 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:38.941142082 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.941862106 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:38.941870928 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.942270994 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:38.942276001 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.968393087 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.968882084 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:38.968902111 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:38.969252110 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:38.969259024 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.243937016 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.248348951 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.248450041 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.248498917 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.248519897 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.248529911 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.248536110 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.251494884 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.251548052 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.251640081 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.251794100 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.251810074 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.285304070 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.290661097 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.290781021 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.290826082 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.290838957 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.290883064 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.290889025 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.293669939 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.293703079 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.293792963 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.294001102 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.294013977 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.355331898 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.355854034 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.355876923 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.356300116 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.356304884 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.401081085 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.404599905 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.404719114 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.404783964 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.404803038 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.404812098 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.404819012 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.409116983 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.409156084 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.409303904 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.409853935 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.409871101 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.438232899 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.441389084 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.441474915 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.441500902 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.441518068 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.441529036 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.441534996 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.445768118 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.445791006 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.445883989 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.446368933 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.446379900 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.825620890 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.825649977 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.825706959 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.825826883 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.825939894 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.826524973 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.826538086 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.832134962 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.832182884 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:39.832279921 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.832470894 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:39.832496881 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:40.364876032 CET	443	49944	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.365288019 CET	49944	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:40.365298033 CET	443	49944	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.365674019 CET	443	49944	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.366040945 CET	49944	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:40.366103888 CET	443	49944	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.366385937 CET	49944	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:40.366399050 CET	49944	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:40.366410971 CET	443	49944	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.886148930 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.887032986 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:40.887044907 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.887454033 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.887542963 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:40.888175964 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.888243914 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:40.888659954 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:40.888722897 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.889097929 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:40.889105082 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:40.934010983 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:41.106533051 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.107110977 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.107129097 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.107598066 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.107601881 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.117017984 CET	443	49944	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:41.120012045 CET	443	49944	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:41.120090008 CET	49944	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:41.120424032 CET	49944	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:41.120441914 CET	443	49944	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:41.425077915 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.425625086 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.425652027 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.426088095 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.426094055 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.427508116 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.427886009 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.427894115 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.427918911 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.432487965 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.432492971 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.432514906 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.432531118 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.432950974 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.432955980 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.704946995 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:41.704982042 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:41.705106020 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:41.705117941 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:41.705971956 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:41.706017017 CET	443	49945	172.217.19.206	192.168.2.5
Nov 25, 2024 16:32:41.706075907 CET	49945	443	192.168.2.5	172.217.19.206
Nov 25, 2024 16:32:41.748893023 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.752566099 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.752645016 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.752733946 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.752757072 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.752774000 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.752782106 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.755606890 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.755639076 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.755738020 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.755882978 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.755896091 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.786298037 CET	49757	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:32:41.786343098 CET	49760	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:32:41.835125923 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.835791111 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.835809946 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.836277962 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.836283922 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.871606112 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.871630907 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.871716022 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.871730089 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.872169971 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.872176886 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.872190952 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.872389078 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.872438908 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.872487068 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.874948025 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.874960899 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.875226021 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.875226021 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.875248909 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.877772093 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.880880117 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.880939007 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.880978107 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.880985022 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.880995035 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.880999088 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.883464098 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.883865118 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.883893013 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.884059906 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.884284019 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.884295940 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.886605024 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.886709929 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.886710882 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.886750937 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.886765003 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.889463902 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.889475107 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.889556885 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.889750957 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:41.889764071 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:41.906864882 CET	80	49757	142.250.181.69	192.168.2.5
Nov 25, 2024 16:32:41.906944036 CET	49757	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:32:41.907385111 CET	80	49760	142.250.181.69	192.168.2.5
Nov 25, 2024 16:32:41.907571077 CET	49760	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:32:42.279016018 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:42.282306910 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:42.282358885 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:42.282373905 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:42.282464027 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:42.282661915 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:42.282671928 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:42.287465096 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:42.287501097 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:42.287566900 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:42.287713051 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:42.287724972 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.507877111 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.508450985 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.508467913 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.509042025 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.509049892 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.690252066 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.690767050 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.690782070 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.691374063 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.691379070 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.709832907 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.710422039 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.710428953 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.710881948 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.710886002 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.774271965 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.775041103 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.775058031 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.775655031 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.775660038 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.985907078 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.989408016 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.989475012 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.989494085 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.989538908 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.989589930 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.989626884 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.989649057 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.989722967 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.989729881 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.992623091 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.992665052 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:43.992758036 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.992940903 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:43.992960930 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.085388899 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.085968018 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.085983038 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.086571932 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.086577892 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.134413004 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.139513016 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.139611959 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.139672995 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.139689922 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.139715910 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.139720917 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.143225908 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.143270969 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.143357038 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.143554926 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.143568993 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.165996075 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.170140028 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.170269012 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.170382977 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.170388937 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.170399904 CET	49955	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.170406103 CET	443	49955	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.179956913 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.180001974 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.180073977 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.180212021 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.180229902 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.231183052 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.231215954 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.231270075 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.231307030 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.231353998 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.231621981 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.231621981 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.231641054 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.231651068 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.235044003 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.235104084 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.235194921 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.235390902 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.235405922 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.697060108 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.697082043 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.697261095 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.697293997 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.697571993 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.697593927 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.697613955 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.697803020 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.697841883 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.697882891 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.700705051 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.700742006 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.700839043 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.701033115 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:44.701049089 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:44.747802019 CET	49962	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:44.747826099 CET	443	49962	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:44.748090029 CET	49962	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:44.748366117 CET	49962	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:44.748399019 CET	443	49962	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:45.944304943 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:45.945403099 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:45.945426941 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:45.946029902 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:45.946036100 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.013858080 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.014484882 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.014506102 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.015079021 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.015084982 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.062268019 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.063074112 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.063108921 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.063653946 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.063662052 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.068380117 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.068948984 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.068963051 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.069411993 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.069417000 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.448532104 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.452979088 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.453093052 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.453150034 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.453186035 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.453274965 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.453299999 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.453315973 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.453324080 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.456161976 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.456204891 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.456300974 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.456415892 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.456429005 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.456881046 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.460146904 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.460196972 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.460213900 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.460248947 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.460313082 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.460331917 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.460341930 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.460347891 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.462723970 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.462765932 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.462837934 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.462974072 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.462989092 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.524666071 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.527684927 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.527774096 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.527834892 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.527853966 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.527868986 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.527874947 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.530493975 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.530512094 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.530805111 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.530805111 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.530836105 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.548393965 CET	443	49962	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:46.548813105 CET	49962	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:46.548825979 CET	443	49962	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:46.549168110 CET	443	49962	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:46.549489021 CET	49962	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:46.549561977 CET	443	49962	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:46.561903000 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.565084934 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.565190077 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.565381050 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.565395117 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.570650101 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.570697069 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.570835114 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.571247101 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.571269035 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.606077909 CET	49962	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:46.644356012 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.644956112 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.644974947 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:46.645431042 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:46.645438910 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:47.115923882 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:47.119014978 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:47.119163036 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:47.119276047 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:47.119299889 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:47.119360924 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:47.119369984 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:47.124031067 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:47.124080896 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:47.124227047 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:47.124721050 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:47.124738932 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.376974106 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.377727032 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.377753019 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.378320932 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.378333092 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.501519918 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.501530886 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.501779079 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.502722025 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.502741098 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.502801895 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.502825975 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.504177094 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.504180908 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.504311085 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.504317045 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.505055904 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.505070925 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.506308079 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.506313086 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.830029011 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.833458900 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.833595037 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.833623886 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.833756924 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.833913088 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.833933115 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.833966970 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.833973885 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.840528965 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.840553999 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.840703964 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.841080904 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.841094971 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.969131947 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.969248056 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.972383022 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.972429991 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.972456932 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.972503901 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.972558975 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.972565889 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.972578049 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.972584009 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.972676039 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.972723961 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.973767042 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.973784924 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.973794937 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.973800898 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.974311113 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.977313042 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.977335930 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.977415085 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.977561951 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.977615118 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.978492022 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.978504896 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.978596926 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.978601933 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.982280970 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.982291937 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.982366085 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.982464075 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.982480049 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.983217955 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.983230114 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:48.983278990 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.983509064 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:48.983520985 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:49.031915903 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:49.033065081 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:49.033086061 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:49.034504890 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:49.034511089 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:49.517802000 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:49.521070004 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:49.521119118 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:49.521162987 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:49.521289110 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:49.521471024 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:49.521490097 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:49.526613951 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:49.526638031 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:49.526752949 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:49.527195930 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:49.527210951 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.704729080 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.705296040 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:50.705331087 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.705770016 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:50.705775976 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.720798016 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.725145102 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:50.725158930 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.725735903 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:50.725740910 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.780931950 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.781920910 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:50.781954050 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.782407045 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:50.782421112 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.832088947 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.833092928 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:50.833115101 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:50.833571911 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:50.833580017 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.140285969 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.143373966 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.143553019 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.143671036 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.143686056 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.143711090 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.143719912 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.149074078 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.149118900 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.149266958 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.149666071 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.149683952 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.174757957 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.178391933 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.178514957 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.178600073 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.178613901 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.178642035 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.178647995 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.183629036 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.183670044 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.183804989 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.184246063 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.184262991 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.239373922 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.243094921 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.243244886 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.243417025 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.243442059 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.243474007 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.243482113 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.249610901 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.249635935 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.249769926 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.250129938 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.250144958 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.285624981 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.288748026 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.288820028 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.288881063 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.288902044 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.288917065 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.288924932 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.291650057 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.291682959 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.291800976 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.292227030 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.292242050 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.363363981 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.364428043 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.364447117 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.364908934 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.364917994 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.808723927 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.811841965 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.811940908 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.812005997 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.812024117 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.812036991 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.812043905 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.815922022 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.815968037 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:51.816042900 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.816214085 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:51.816227913 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.043704987 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.044476032 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.044498920 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.045871973 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.045877934 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.072931051 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.073641062 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.073653936 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.074021101 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.074027061 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.096415043 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.096796036 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.096831083 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.097166061 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.097173929 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.502263069 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.505531073 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.505650043 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.506881952 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.506895065 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.509812117 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.509835005 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.509922981 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.510088921 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.510104895 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.528115034 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.528567076 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.528595924 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.529011011 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.529017925 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.550143003 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.553200960 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.553299904 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.553299904 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.553322077 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.553333044 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.557254076 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.557297945 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.557455063 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.557902098 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.557919979 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.561306000 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.564413071 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.564471960 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.564513922 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.564539909 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.564608097 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.564625025 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.564636946 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.564644098 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.567464113 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.567496061 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.567579985 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.567724943 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.567740917 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.618005991 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.618741989 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.618752956 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.619364023 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:53.619369984 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:53.999787092 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.003010035 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.003057957 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.003163099 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.003278971 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.003432989 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.003449917 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.003473043 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.003479958 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.008905888 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.008949995 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.009077072 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.009557009 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.009571075 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.072325945 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.075598955 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.075658083 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.075732946 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.075845957 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.076030016 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.076044083 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.076055050 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.076061010 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.081415892 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.081437111 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:54.081629992 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.081990957 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:54.082005024 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.308634996 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.309422970 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.309452057 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.310794115 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.310806990 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.382255077 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.383162022 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.383177042 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.383651972 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.383657932 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.444461107 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.445537090 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.445549965 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.446110964 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.446125984 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.749406099 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.752547979 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.752712965 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.752825022 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.752872944 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.752907038 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.752926111 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.758153915 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.758209944 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.758328915 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.758779049 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.758793116 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.802473068 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.803328037 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.803342104 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.803777933 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.803782940 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.841332912 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.841507912 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.841641903 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.842046022 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.842058897 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.847244024 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.847271919 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.847392082 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.847810030 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.847822905 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.869563103 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.869957924 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.869983912 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.870393038 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.870400906 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.895371914 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.898582935 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.898637056 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.898685932 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.898813963 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.898961067 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.898979902 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.899008036 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.899013996 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.904589891 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.904623032 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:55.904757023 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.905119896 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:55.905136108 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.251144886 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.251173019 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.251354933 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.251378059 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.252011061 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.252032042 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.252089024 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.252211094 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.252253056 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.252368927 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.257761002 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.257792950 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.257946014 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.258222103 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.258233070 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.264193058 CET	443	49962	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:56.264251947 CET	443	49962	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:56.264333963 CET	49962	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:56.315525055 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.315550089 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.315717936 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.315753937 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.316368103 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.316386938 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.316415071 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.316577911 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.316615105 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.316710949 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.321075916 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.321108103 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.321219921 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.321410894 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:56.321428061 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:56.576143980 CET	49962	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:32:56.576155901 CET	443	49962	142.250.181.68	192.168.2.5
Nov 25, 2024 16:32:57.475815058 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:57.476761103 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:57.476784945 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:57.477204084 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:57.477210045 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:57.633804083 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:57.634306908 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:57.634321928 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:57.634928942 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:57.634936094 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:57.686635971 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:57.687161922 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:57.687196970 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:57.687694073 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:57.687700987 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:58.917253017 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:58.964880943 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:58.964904070 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:58.965164900 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:58.965178967 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:58.965195894 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:58.965394974 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:58.965429068 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:58.965473890 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:58.968111992 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:58.968156099 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:58.968254089 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:58.968369961 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:58.968383074 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.086199045 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.086236000 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.086285114 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.086311102 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.086347103 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.086369991 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.086433887 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.086594105 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.086594105 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.086617947 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.086626053 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.086637020 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.086649895 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.086663961 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.086671114 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.089673042 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.089710951 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.089734077 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.089767933 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.089788914 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.089864016 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.089996099 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.090017080 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.090054035 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.090071917 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.093091011 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.093472958 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.093482018 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.093895912 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.093902111 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.187197924 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.187699080 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.187715054 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.188127995 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.188136101 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.549519062 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.552561045 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.552649975 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.552691936 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.552701950 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.552711964 CET	49986	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.552716970 CET	443	49986	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.555537939 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.555567026 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.555694103 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.555835962 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.555856943 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.651895046 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.655126095 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.655184031 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.655184984 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.655241966 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.655303955 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.655320883 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.655333042 CET	49987	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.655339003 CET	443	49987	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.658210993 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.658250093 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 16:32:59.658340931 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.658507109 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:32:59.658525944 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:00.687225103 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:00.687845945 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:00.687861919 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:00.688285112 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:00.688292980 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:00.875518084 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:00.876061916 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:00.876075029 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:00.876498938 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:00.876512051 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.127914906 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.131051064 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.131128073 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.131295919 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.131297112 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.131320953 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.131330013 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.134212017 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.134279013 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.134360075 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.134521008 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.134538889 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.323231936 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.323396921 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.323889971 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.323903084 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.324481010 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.324486971 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.326395988 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.326463938 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.326601982 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.326601982 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.326617956 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.326631069 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.329502106 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.329540014 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.329643965 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.329816103 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.329833031 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.384104013 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.384715080 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.384741068 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.385162115 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.385169983 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.765575886 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.768711090 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.768770933 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.768796921 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.768848896 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.768917084 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.768935919 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.768948078 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.768954039 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.771822929 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.771857023 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.771930933 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.772084951 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.772102118 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.828973055 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.829046011 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.829111099 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.829272032 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.829293966 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.829310894 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.829318047 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.832117081 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.832168102 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:01.832273960 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.832422018 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:01.832443953 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:02.921386003 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:02.922039986 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:02.922056913 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:02.922489882 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:02.922494888 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.120665073 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.121440887 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.121470928 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.122215033 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.122222900 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.369263887 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.372410059 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.372546911 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.372602940 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.372626066 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.372648001 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.372656107 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.375554085 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.375593901 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.375684023 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.375818968 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.375830889 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.562402964 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.563033104 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.563070059 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.563488007 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.563496113 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.571023941 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.574219942 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.574327946 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.574336052 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.574418068 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.574749947 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.574810028 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.574843884 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.574861050 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.577485085 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.577524900 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.577800035 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.577800035 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.577831984 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.702219963 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.702754974 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.702770948 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.703206062 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.703211069 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.949578047 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.950154066 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.950165987 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:03.950608015 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:03.950613022 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.006799936 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.010021925 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.010122061 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.010155916 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.010173082 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.010184050 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.010190010 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.013221979 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.013254881 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.013351917 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.013583899 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.013597012 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.161305904 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.164525032 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.164632082 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.164685011 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.164700985 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.164714098 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.164720058 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.168119907 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.168175936 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.168272972 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.168467999 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.168484926 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.418023109 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.421256065 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.421303034 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.421346903 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.421431065 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.421473980 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.421473980 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.421489954 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.421494961 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.424185038 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.424225092 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:04.424308062 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.424488068 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:04.424499989 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.155508995 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.156024933 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:05.156035900 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.156495094 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:05.156500101 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.597889900 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.601058960 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.601125002 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.601250887 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:05.601336956 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:05.601355076 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.601367950 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:05.601373911 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.604053020 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:05.604089022 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.604161978 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:05.604291916 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:05.604306936 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.767106056 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.767819881 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:05.767859936 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:05.768295050 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:05.768301964 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.085020065 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.085720062 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.085750103 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.086184978 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.086191893 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.204487085 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.204535961 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.204601049 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.204754114 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.205032110 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.205060959 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.205076933 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.205084085 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.208111048 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.208156109 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.208268881 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.208434105 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.208445072 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.240397930 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.241086960 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.241126060 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.241543055 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.241549015 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.539748907 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.543143034 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.543309927 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.544012070 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.544060946 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.544086933 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.544106007 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.551274061 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.551316977 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.551383018 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.551536083 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.551553011 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.696702003 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.700200081 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.700316906 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.700381994 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.700402975 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.700417042 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.700423956 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.704967022 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.705012083 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:06.705212116 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.705573082 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:06.705590010 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:07.978010893 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:07.978929996 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:07.978971958 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:07.979379892 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:07.979393005 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.099890947 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.100784063 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.100799084 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.101186991 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.101191044 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.357337952 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.357922077 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.357954979 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.358385086 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.358391047 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.377088070 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.377696037 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.377712965 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.378004074 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.378009081 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.425548077 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.428689957 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.428754091 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.428781033 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.428836107 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.428884029 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.428910017 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.428927898 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.428936005 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.432311058 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.432415009 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.432509899 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.432658911 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.432693005 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.653529882 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.656863928 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.656970024 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.657052994 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.657052994 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.657059908 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.657066107 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.659897089 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.659934044 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.660089016 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.660598040 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.660612106 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.806920052 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.810031891 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.810239077 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.810239077 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.810239077 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.813246012 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.813342094 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.813460112 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.813627958 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.813661098 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.833373070 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.833554983 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.833637953 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.833693027 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.833703995 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.833739042 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.833748102 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.836524010 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.836572886 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:08.836759090 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.836936951 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:08.836956024 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.121620893 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:09.121671915 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.180691004 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.181329012 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:09.181361914 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.181720018 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:09.181725979 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.644362926 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.649746895 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.649796963 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.649843931 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:09.649874926 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:09.649940968 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:09.649960041 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.649970055 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:09.649976015 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.652590036 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:09.652650118 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:09.652728081 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:09.652863026 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:09.652872086 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.236588001 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.237242937 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.237272978 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.237803936 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.237812042 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.497147083 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.498009920 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.498039007 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.498452902 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.498461962 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.570064068 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.570672989 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.570709944 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.571086884 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.571100950 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.607858896 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.608334064 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.608376026 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.608782053 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.608788967 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.690404892 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.690707922 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.690807104 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.690895081 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.690895081 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.690922976 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.690937996 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.693595886 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.693629980 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.693706989 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.693881035 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.693893909 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.945755005 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.949346066 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.949400902 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.949506044 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.949579954 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.950103998 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.950135946 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.950169086 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.950179100 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.953535080 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.953593969 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:10.953706980 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.953918934 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:10.953933001 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.007751942 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.010915995 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.011007071 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.011096954 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.011126041 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.011141062 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.011148930 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.014142036 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.014193058 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.014283895 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.014420986 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.014431000 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.055432081 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.058814049 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.058903933 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.058931112 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.058939934 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.058950901 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.058955908 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.062153101 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.062180042 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.062252045 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.062400103 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.062417030 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.461230993 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.461812019 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.461834908 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.462331057 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.462337971 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.907110929 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.910356998 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.910439968 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.910495043 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.910495043 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.910515070 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.910526991 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.913316965 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.913363934 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:11.913439989 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.913605928 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:11.913619995 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:12.324825048 CET	49756	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:33:12.445698977 CET	80	49756	142.250.181.69	192.168.2.5
Nov 25, 2024 16:33:12.479360104 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:12.480508089 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:12.480519056 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:12.481266975 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:12.481271982 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:12.691297054 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:12.692379951 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:12.692395926 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:12.693716049 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:12.693721056 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:12.832039118 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:12.833297968 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:12.833365917 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:12.834626913 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:12.834645033 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.339457035 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.339488029 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.339544058 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.339670897 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.340215921 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.340241909 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.340260983 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.340269089 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.341427088 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.341861963 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.341886997 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.342457056 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.342463017 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.343323946 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.343364000 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.343442917 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.343569040 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.343575954 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.537276983 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.539983034 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.540534973 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.540601015 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.540647030 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.540662050 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.540674925 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.540682077 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.543915987 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.544034004 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.544120073 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.544120073 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.544162989 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.544193029 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.545751095 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.545795918 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.545922995 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.546247959 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.546264887 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.547606945 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.547643900 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.547759056 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.548110962 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.548125982 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.795471907 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.798643112 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.798697948 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.798754930 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.798881054 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.799029112 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.799047947 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.799082994 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.799088955 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.804260969 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.804316044 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.804447889 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.804888010 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.804912090 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.868799925 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.869345903 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.869357109 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:13.869824886 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:13.869828939 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:14.319227934 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:14.322922945 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:14.322973013 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:14.323003054 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:14.323144913 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:14.323277950 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:14.323283911 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:14.323335886 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:14.323342085 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:14.328572035 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:14.328608990 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:14.328743935 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:14.328979969 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:14.328994989 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.119227886 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.119800091 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.119822979 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.120471954 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.120480061 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.130001068 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.130530119 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.130613089 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.130892992 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.130912066 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.407526016 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.408369064 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.408400059 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.408917904 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.408926964 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.560292959 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.563298941 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.563384056 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.563429117 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.563442945 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.563455105 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.563460112 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.567697048 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.567790985 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.567878008 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.568083048 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.568108082 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.585189104 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.588082075 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.588198900 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.588330030 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.588382959 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.588426113 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.588443041 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.593154907 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.593179941 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.593307018 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.593650103 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.593666077 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.679260969 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.679868937 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.679908037 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.681143999 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.681153059 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.916968107 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.917032003 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.917192936 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.917527914 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.917541981 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.917553902 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.917560101 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.922034025 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.922056913 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:15.922149897 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.922414064 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:15.922430992 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.091965914 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.092870951 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.092883110 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.093353033 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.093358040 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.137382030 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.140321970 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.140371084 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.140424013 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.140561104 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.140604019 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.140624046 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.140639067 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.140645027 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.143172026 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.143192053 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.143289089 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.143413067 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.143424988 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.531035900 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.534451962 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.534584045 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.534693003 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.534709930 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.534759045 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.534765005 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.539891005 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.539937019 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:16.540071964 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.540446043 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:16.540462971 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.398255110 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.399203062 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.399243116 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.399657965 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.399676085 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.415213108 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.415780067 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.415798903 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.416141033 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.416146040 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.851284027 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.854387045 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.854469061 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.855906963 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.855930090 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.855943918 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.855952024 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.860652924 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.863698959 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.863758087 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.865003109 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.870362997 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.870381117 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.870390892 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.870397091 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.871993065 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.872031927 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.872586012 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.872600079 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.887216091 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.887258053 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.887334108 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.887341022 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.887382030 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.887451887 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.887598038 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.887612104 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.887820959 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.887840986 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.930769920 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.931206942 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.931215048 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:17.931703091 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:17.931706905 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.258936882 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.259891987 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.259905100 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.260298014 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.260303974 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.323373079 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.326545000 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.326749086 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.326749086 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.326749086 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.329864979 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.329901934 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.329998016 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.330209970 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.330221891 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.409446001 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.412635088 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.412750006 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.412863016 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.412868977 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.412925005 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.412930965 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.418123960 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.418145895 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.418279886 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.418596983 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.418608904 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.636816978 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.636889935 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.773608923 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.773684025 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.773825884 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.774404049 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.774427891 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.774447918 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.774458885 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.779706001 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.779787064 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:18.779942989 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.780389071 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:18.780437946 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:19.671662092 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:19.672399044 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:19.672420979 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:19.672847033 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:19.672853947 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:19.677151918 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:19.677472115 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:19.677500963 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:19.677824020 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:19.677829981 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.119175911 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.122340918 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.122514009 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.122627974 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.122642994 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.122693062 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.122709036 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.124682903 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.127710104 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.127826929 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.127897024 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.127976894 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.128041983 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.128041983 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.128058910 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.128063917 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.128504038 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.128545046 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.128658056 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.128990889 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.129008055 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.131242037 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.131356001 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.131474972 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.131800890 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.131833076 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.181768894 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.182480097 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.182491064 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.182917118 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.182920933 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.238692999 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.239475965 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.239490032 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.239872932 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.239876986 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.637758017 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.641155005 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.641309023 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.641493082 CET	50031	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.641505957 CET	443	50031	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.643354893 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.643769026 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.643795013 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.644207001 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.644217968 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.646821022 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.646843910 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.646994114 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.647450924 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.647464991 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.683386087 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.686961889 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.687009096 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.687011003 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.687072039 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.687167883 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.687180996 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.687191963 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.687196970 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.689963102 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.690018892 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:20.690114975 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.690256119 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:20.690273046 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.114392996 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.118027925 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.118145943 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:21.118331909 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:21.118367910 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.123460054 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:21.123497963 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.123620033 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:21.124056101 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:21.124073982 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.855575085 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.856448889 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:21.856473923 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.857814074 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:21.857821941 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.922936916 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.923779964 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:21.923808098 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:21.924185991 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:21.924191952 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.307451963 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.307480097 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.307521105 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.307740927 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.308341026 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.308356047 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.308407068 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.308413029 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.311964035 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.312001944 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.312205076 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.312283993 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.312294006 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.376194000 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.376347065 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.376454115 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.376929998 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.376987934 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.377027035 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.377044916 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.382241011 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.382333994 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.382474899 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.382909060 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.382944107 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.444716930 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.445609093 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.445631981 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.446058989 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.446063995 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.615425110 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.616303921 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.616319895 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.616895914 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.616903067 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.903491974 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.903594017 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.903738022 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.903948069 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.903969049 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.903980970 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.903987885 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.908015966 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.908051014 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.908195019 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.908603907 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.908616066 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.988470078 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.989113092 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.989132881 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:22.990466118 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:22.990473986 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.062465906 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.067090034 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.067193985 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.067291975 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.067316055 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.067336082 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.067354918 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.072511911 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.072603941 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.072750092 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.073196888 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.073231936 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.448210955 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.451479912 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.451550961 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.451581955 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.451709986 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.451900959 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.451919079 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.457128048 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.457179070 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:23.457448006 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.457693100 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:23.457707882 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.107973099 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.108922958 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.108942986 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.109368086 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.109381914 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.258059978 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.258802891 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.258845091 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.259268999 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.259305954 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.553587914 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.557367086 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.557611942 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.557713032 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.557713032 CET	50039	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.557732105 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.557740927 CET	443	50039	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.562757969 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.562804937 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.562896967 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.563097000 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.563112020 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.697359085 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.697777987 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.697802067 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.698261023 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.698268890 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.713113070 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.713195086 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.713257074 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.713500977 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.713500977 CET	50040	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.713546991 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.713577986 CET	443	50040	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.716890097 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.716933012 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.717078924 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.717166901 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.717174053 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.798051119 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.798551083 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.798615932 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:24.798984051 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:24.798999071 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.147275925 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.147299051 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.147382975 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.147439957 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.147685051 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.147716045 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.147732973 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.147906065 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.147943020 CET	443	50041	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.148015022 CET	50041	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.150809050 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.150856018 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.150938034 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.151115894 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.151129961 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.235537052 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.235626936 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.235712051 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.235954046 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.235970974 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.235984087 CET	50042	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.235990047 CET	443	50042	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.239252090 CET	50047	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.239300013 CET	443	50047	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.239381075 CET	50047	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.239590883 CET	50047	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.239603043 CET	443	50047	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.246525049 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.246953964 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.246989965 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.247451067 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.247534990 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.696182966 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.696214914 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.696271896 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.696293116 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.696599007 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.696616888 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.696638107 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.696796894 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.696834087 CET	443	50043	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.696878910 CET	50043	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.699271917 CET	50048	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.699318886 CET	443	50048	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:25.699382067 CET	50048	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.699513912 CET	50048	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:25.699523926 CET	443	50048	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.362354040 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.362987041 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.363028049 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.363488913 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.363496065 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.501780987 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.502738953 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.502783060 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.503213882 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.503221035 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.829303980 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.829330921 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.829386950 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.829389095 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.829443932 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.829698086 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.829719067 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.829730988 CET	50044	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.829736948 CET	443	50044	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.832839966 CET	50049	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.832886934 CET	443	50049	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.832973957 CET	50049	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.833157063 CET	50049	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.833168983 CET	443	50049	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.951301098 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.951347113 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.951458931 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.951493979 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.951705933 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.951721907 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.951735020 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.951901913 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.951941967 CET	443	50045	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.951988935 CET	50045	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.954452991 CET	50050	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.954509020 CET	443	50050	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:26.954586983 CET	50050	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.954726934 CET	50050	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:26.954735994 CET	443	50050	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.015728951 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.016539097 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.016565084 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.016994953 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.017000914 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.025279045 CET	443	50047	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.025823116 CET	50047	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.025867939 CET	443	50047	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.026104927 CET	50047	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.026112080 CET	443	50047	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.481678963 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.481700897 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.481827974 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.481857061 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.482301950 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.482316017 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.482389927 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.482501030 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.482541084 CET	443	50046	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.482593060 CET	50046	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.484013081 CET	443	50047	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.484080076 CET	443	50047	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.484143972 CET	50047	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.485368013 CET	50047	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.485399961 CET	443	50047	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.485410929 CET	50047	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.485419989 CET	443	50047	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.491584063 CET	50051	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.491662979 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.491810083 CET	50051	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.492455006 CET	50052	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.492486000 CET	50051	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.492495060 CET	443	50052	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.492503881 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.492655993 CET	50052	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.492655993 CET	50052	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.492687941 CET	443	50052	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.554841042 CET	443	50048	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.555939913 CET	50048	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.556005955 CET	443	50048	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:27.557291031 CET	50048	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:27.557307959 CET	443	50048	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.015988111 CET	443	50048	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.016053915 CET	443	50048	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.016144037 CET	50048	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.016335964 CET	50048	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.016335964 CET	50048	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.016382933 CET	443	50048	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.016412973 CET	443	50048	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.019248009 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.019299030 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.019396067 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.019553900 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.019566059 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.558307886 CET	443	50049	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.559093952 CET	50049	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.559114933 CET	443	50049	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.559559107 CET	50049	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.559562922 CET	443	50049	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.745923996 CET	443	50050	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.746634007 CET	50050	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.746659040 CET	443	50050	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.747068882 CET	50050	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.747073889 CET	443	50050	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.994652033 CET	443	50049	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.994826078 CET	443	50049	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.994904041 CET	50049	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.995034933 CET	50049	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.995057106 CET	443	50049	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.995069027 CET	50049	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.995074987 CET	443	50049	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.998096943 CET	50054	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.998151064 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:28.998238087 CET	50054	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.998402119 CET	50054	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:28.998418093 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.286415100 CET	443	50050	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.289669037 CET	443	50050	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.289793015 CET	50050	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.289834023 CET	50050	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.289834023 CET	50050	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.289855003 CET	443	50050	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.289866924 CET	443	50050	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.292695045 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.292747974 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.292839050 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.292984962 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.292996883 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.338805914 CET	443	50052	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.339441061 CET	50052	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.339476109 CET	443	50052	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.339993954 CET	50052	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.340002060 CET	443	50052	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.512139082 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.513519049 CET	50051	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.513541937 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.514897108 CET	50051	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.514904976 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.802452087 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.802999973 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.803036928 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.803467989 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.803478003 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.854448080 CET	443	50052	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.854480982 CET	443	50052	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.854549885 CET	443	50052	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.854645967 CET	50052	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.854743958 CET	50052	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.855341911 CET	50052	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.855360985 CET	443	50052	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.861373901 CET	50056	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.861414909 CET	443	50056	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.861481905 CET	50056	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.861608982 CET	50056	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.861624002 CET	443	50056	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.980710030 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.980735064 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.980967999 CET	50051	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.981002092 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.981049061 CET	50051	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.981350899 CET	50051	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.981350899 CET	50051	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.981363058 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.982337952 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.982376099 CET	443	50051	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.982492924 CET	50051	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.985506058 CET	50057	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.985621929 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:29.985799074 CET	50057	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.986264944 CET	50057	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:29.986303091 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.295264006 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.295295954 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.295319080 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.295443058 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.295470953 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.295490026 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.295535088 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.453979969 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.454065084 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.454238892 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.454341888 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.454364061 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.454377890 CET	50053	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.454390049 CET	443	50053	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.457330942 CET	50058	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.457384109 CET	443	50058	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.457449913 CET	50058	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.457602978 CET	50058	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.457621098 CET	443	50058	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.739958048 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.740619898 CET	50054	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.740644932 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:30.741379023 CET	50054	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:30.741389990 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.147433996 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.148238897 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.148274899 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.148756981 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.148763895 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.175168037 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.175230980 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.175546885 CET	50054	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.175581932 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.175825119 CET	50054	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.175833941 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.175854921 CET	50054	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.176220894 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.176314116 CET	443	50054	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.176373005 CET	50054	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.179560900 CET	50059	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.179641962 CET	443	50059	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.179765940 CET	50059	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.179994106 CET	50059	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.180013895 CET	443	50059	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.597943068 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.598572969 CET	50057	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.598611116 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.599100113 CET	50057	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.599107027 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.656549931 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.656575918 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.656591892 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.656694889 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.656727076 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.656877041 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.656877041 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.664717913 CET	443	50056	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.665312052 CET	50056	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.665344000 CET	443	50056	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.665899992 CET	50056	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.665904999 CET	443	50056	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.857125998 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.857183933 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.857233047 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.857273102 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.857343912 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.857528925 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.857544899 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.857558012 CET	50055	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.857563019 CET	443	50055	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.861294985 CET	50060	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.861331940 CET	443	50060	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:31.861433029 CET	50060	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.861644983 CET	50060	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:31.861660957 CET	443	50060	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.049576998 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.049604893 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.049707890 CET	50057	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.049738884 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.050118923 CET	50057	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.050122023 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.050149918 CET	50057	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.050154924 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.050173044 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.050206900 CET	50057	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.050210953 CET	443	50057	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.055743933 CET	50061	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.055788994 CET	443	50061	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.055975914 CET	50061	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.056447029 CET	50061	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.056458950 CET	443	50061	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.147749901 CET	443	50056	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.147772074 CET	443	50056	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.147845984 CET	443	50056	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.148047924 CET	50056	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.148562908 CET	50056	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.148581982 CET	443	50056	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.148634911 CET	50056	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.148642063 CET	443	50056	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.154670954 CET	50062	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.154717922 CET	443	50062	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.154850960 CET	50062	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.155214071 CET	50062	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.155229092 CET	443	50062	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.256400108 CET	443	50058	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.257100105 CET	50058	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.257122993 CET	443	50058	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.257479906 CET	50058	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.257486105 CET	443	50058	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.705873966 CET	443	50058	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.708966017 CET	443	50058	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.709199905 CET	50058	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.709199905 CET	50058	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.709199905 CET	50058	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.712497950 CET	50063	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.712543011 CET	443	50063	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:32.712775946 CET	50063	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.712872028 CET	50063	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:32.712888956 CET	443	50063	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.013262987 CET	50058	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.013290882 CET	443	50058	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.032536030 CET	443	50059	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.033268929 CET	50059	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.033282995 CET	443	50059	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.033776045 CET	50059	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.033781052 CET	443	50059	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.494712114 CET	443	50059	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.494924068 CET	443	50059	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.495079994 CET	50059	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.495496035 CET	50059	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.495536089 CET	443	50059	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.495562077 CET	50059	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.495579958 CET	443	50059	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.502401114 CET	50064	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.502466917 CET	443	50064	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.502592087 CET	50064	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.502808094 CET	50064	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.502827883 CET	443	50064	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.660042048 CET	443	50060	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.661210060 CET	50060	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.661245108 CET	443	50060	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:33.662591934 CET	50060	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:33.662606001 CET	443	50060	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.126832008 CET	443	50061	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.127868891 CET	50061	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.127880096 CET	443	50061	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.129004002 CET	50061	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.129009008 CET	443	50061	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.155002117 CET	443	50062	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.155868053 CET	50062	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.155900955 CET	443	50062	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.157043934 CET	50062	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.157049894 CET	443	50062	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.329513073 CET	443	50060	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.332448006 CET	443	50060	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.332541943 CET	50060	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.332614899 CET	50060	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.332636118 CET	443	50060	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.332647085 CET	50060	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.332653999 CET	443	50060	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.336239100 CET	50065	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.336292028 CET	443	50065	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.336397886 CET	50065	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.336652994 CET	50065	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.336673021 CET	443	50065	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.581387997 CET	443	50061	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.584573030 CET	443	50061	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.584721088 CET	50061	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.584750891 CET	50061	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.584762096 CET	443	50061	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.584779024 CET	50061	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.584784031 CET	443	50061	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.588037968 CET	50066	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.588080883 CET	443	50066	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.588171959 CET	50066	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.588370085 CET	50066	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.588380098 CET	443	50066	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.603423119 CET	443	50062	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.606529951 CET	443	50062	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.606606960 CET	443	50062	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.606718063 CET	50062	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.606766939 CET	50062	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.606920004 CET	50062	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.606940031 CET	443	50062	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.606966019 CET	50062	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.606973886 CET	443	50062	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.634604931 CET	443	50063	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.635468960 CET	50063	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.635488033 CET	443	50063	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:34.636073112 CET	50063	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:34.636080980 CET	443	50063	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:35.069971085 CET	443	50063	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:35.073371887 CET	443	50063	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:35.073669910 CET	50063	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:35.073669910 CET	50063	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:35.074362993 CET	50063	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:35.074382067 CET	443	50063	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:35.353240967 CET	443	50064	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:35.353918076 CET	50064	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:35.353943110 CET	443	50064	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:35.354397058 CET	50064	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:35.354410887 CET	443	50064	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:35.807509899 CET	443	50064	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:35.810740948 CET	443	50064	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:35.810893059 CET	50064	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:35.811070919 CET	50064	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:35.811089039 CET	443	50064	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:35.811119080 CET	50064	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:35.811125994 CET	443	50064	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.118483067 CET	443	50065	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.119216919 CET	50065	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:36.119250059 CET	443	50065	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.119637966 CET	50065	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:36.119645119 CET	443	50065	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.332613945 CET	443	50066	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.333673954 CET	50066	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:36.333712101 CET	443	50066	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.334110975 CET	50066	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:36.334119081 CET	443	50066	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.598340034 CET	443	50065	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.601423025 CET	443	50065	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.601550102 CET	50065	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:36.601711035 CET	50065	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:36.601731062 CET	443	50065	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.772376060 CET	443	50066	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.772548914 CET	443	50066	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.772655964 CET	50066	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:36.772820950 CET	50066	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:36.772870064 CET	443	50066	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:36.772900105 CET	50066	443	192.168.2.5	13.107.246.63
Nov 25, 2024 16:33:36.772921085 CET	443	50066	13.107.246.63	192.168.2.5
Nov 25, 2024 16:33:44.810910940 CET	50067	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:33:44.810928106 CET	443	50067	142.250.181.68	192.168.2.5
Nov 25, 2024 16:33:44.811059952 CET	50067	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:33:44.811480999 CET	50067	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:33:44.811491013 CET	443	50067	142.250.181.68	192.168.2.5
Nov 25, 2024 16:33:46.563199997 CET	443	50067	142.250.181.68	192.168.2.5
Nov 25, 2024 16:33:46.563920021 CET	50067	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:33:46.563947916 CET	443	50067	142.250.181.68	192.168.2.5
Nov 25, 2024 16:33:46.564312935 CET	443	50067	142.250.181.68	192.168.2.5
Nov 25, 2024 16:33:46.565165997 CET	50067	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:33:46.565229893 CET	443	50067	142.250.181.68	192.168.2.5
Nov 25, 2024 16:33:46.605614901 CET	50067	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:33:56.270885944 CET	443	50067	142.250.181.68	192.168.2.5
Nov 25, 2024 16:33:56.270963907 CET	443	50067	142.250.181.68	192.168.2.5
Nov 25, 2024 16:33:56.271142006 CET	50067	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:33:56.577292919 CET	50067	443	192.168.2.5	142.250.181.68
Nov 25, 2024 16:33:56.577338934 CET	443	50067	142.250.181.68	192.168.2.5
Nov 25, 2024 16:33:57.449789047 CET	49756	80	192.168.2.5	142.250.181.69
Nov 25, 2024 16:33:57.569976091 CET	80	49756	142.250.181.69	192.168.2.5
Nov 25, 2024 16:34:00.068135023 CET	50069	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:00.068200111 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:00.068387032 CET	50069	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:00.068489075 CET	50069	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:00.068500996 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:01.854976892 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:01.855276108 CET	50069	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:01.855365992 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:01.858544111 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:01.858923912 CET	50069	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:01.859091997 CET	50069	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:01.859091997 CET	50069	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:01.859122992 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:01.859183073 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:01.903337002 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:01.904128075 CET	50069	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:02.615679979 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:02.618387938 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:02.618587017 CET	50069	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:02.621555090 CET	50069	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:02.621599913 CET	443	50069	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:02.765368938 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:02.765419006 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:02.765492916 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:02.765737057 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:02.765762091 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:04.705872059 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:04.706260920 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:04.706293106 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:04.706835985 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:04.706918955 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:04.707858086 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:04.707917929 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:04.708072901 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:04.708157063 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:04.708254099 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:04.708266020 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:04.761486053 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:05.508162022 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:05.508270979 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:05.508342981 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:05.508428097 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:05.510083914 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:05.510178089 CET	443	50071	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:05.510246038 CET	50071	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:08.639887094 CET	50072	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:08.639938116 CET	443	50072	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:08.640028000 CET	50072	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:08.641602039 CET	50072	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:08.641625881 CET	443	50072	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:09.765285015 CET	50073	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:09.765372992 CET	443	50073	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:09.765480995 CET	50073	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:09.770005941 CET	50073	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:09.770030022 CET	443	50073	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:10.421652079 CET	443	50072	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:10.422040939 CET	50072	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:10.422064066 CET	443	50072	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:10.422415018 CET	443	50072	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:10.422883034 CET	50072	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:10.422940969 CET	443	50072	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:10.423054934 CET	50072	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:10.423078060 CET	50072	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:10.423082113 CET	443	50072	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:11.180187941 CET	443	50072	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:11.180309057 CET	443	50072	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:11.180362940 CET	50072	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:11.181507111 CET	50072	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:11.181526899 CET	443	50072	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:11.187688112 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:11.187721014 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:11.187776089 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:11.187987089 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:11.188003063 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:11.517935991 CET	443	50073	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:11.518337011 CET	50073	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:11.518357992 CET	443	50073	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:11.518762112 CET	443	50073	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:11.519083977 CET	50073	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:11.519156933 CET	443	50073	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:11.519278049 CET	50073	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:11.519304991 CET	50073	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:11.519310951 CET	443	50073	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:12.265589952 CET	443	50073	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:12.267954111 CET	443	50073	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:12.268049002 CET	50073	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:12.268584013 CET	50073	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:12.268620014 CET	443	50073	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:12.939861059 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:12.940661907 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:12.940694094 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:12.941128016 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:12.941216946 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:12.941837072 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:12.941930056 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:12.942127943 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:12.942190886 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:12.942320108 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:12.942332029 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:12.989898920 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:13.750514030 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:13.750551939 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:13.750607967 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:13.750623941 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:13.752538919 CET	50074	443	192.168.2.5	172.217.19.238
Nov 25, 2024 16:34:13.752609968 CET	443	50074	172.217.19.238	192.168.2.5
Nov 25, 2024 16:34:13.752675056 CET	50074	443	192.168.2.5	172.217.19.238

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 16:31:24.320836067 CET	62703	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:31:40.351130009 CET	54231	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:31:40.351449966 CET	58778	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:31:40.489921093 CET	53	54231	1.1.1.1	192.168.2.5
Nov 25, 2024 16:31:40.490258932 CET	53	64359	1.1.1.1	192.168.2.5
Nov 25, 2024 16:31:40.539650917 CET	53	53518	1.1.1.1	192.168.2.5
Nov 25, 2024 16:31:40.589385986 CET	53	58778	1.1.1.1	192.168.2.5
Nov 25, 2024 16:31:42.201323986 CET	56069	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:31:42.201699018 CET	49928	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:31:42.341521978 CET	53	56069	1.1.1.1	192.168.2.5
Nov 25, 2024 16:31:42.342148066 CET	53	49928	1.1.1.1	192.168.2.5
Nov 25, 2024 16:31:43.357893944 CET	53	49844	1.1.1.1	192.168.2.5
Nov 25, 2024 16:31:44.686217070 CET	65250	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:31:44.686369896 CET	54532	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:31:44.824973106 CET	53	65250	1.1.1.1	192.168.2.5
Nov 25, 2024 16:31:44.824987888 CET	53	54532	1.1.1.1	192.168.2.5
Nov 25, 2024 16:31:45.202178001 CET	53	54350	1.1.1.1	192.168.2.5
Nov 25, 2024 16:31:56.384290934 CET	53	56052	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:00.416752100 CET	53	59015	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:03.570152044 CET	53607	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:32:03.570437908 CET	54107	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:32:03.720453024 CET	53	54107	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:03.720702887 CET	53	53607	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:05.934844971 CET	52156	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:32:05.935157061 CET	61070	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:32:06.073791027 CET	53	61070	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:06.073827028 CET	53	52156	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:06.197258949 CET	53	56054	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:11.080337048 CET	65513	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:32:11.080495119 CET	51588	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:32:11.217847109 CET	53	65513	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:11.217888117 CET	53	51588	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:13.161003113 CET	52070	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:32:13.161154032 CET	55282	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:32:13.305742979 CET	53	55282	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:13.305757046 CET	53	52070	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:19.372694016 CET	53	64181	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:40.077841043 CET	53	56955	1.1.1.1	192.168.2.5
Nov 25, 2024 16:32:41.940005064 CET	53	49948	1.1.1.1	192.168.2.5
Nov 25, 2024 16:33:03.624857903 CET	53	60090	1.1.1.1	192.168.2.5
Nov 25, 2024 16:33:09.589750051 CET	53	58478	1.1.1.1	192.168.2.5
Nov 25, 2024 16:33:55.872196913 CET	53	59981	1.1.1.1	192.168.2.5
Nov 25, 2024 16:33:59.925447941 CET	50923	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:33:59.925575972 CET	57774	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:34:00.067464113 CET	53	50923	1.1.1.1	192.168.2.5
Nov 25, 2024 16:34:00.067682028 CET	53	57774	1.1.1.1	192.168.2.5
Nov 25, 2024 16:34:02.287566900 CET	53	52574	1.1.1.1	192.168.2.5
Nov 25, 2024 16:34:02.621558905 CET	51568	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:34:02.621675968 CET	55638	53	192.168.2.5	1.1.1.1
Nov 25, 2024 16:34:02.763221979 CET	53	51568	1.1.1.1	192.168.2.5
Nov 25, 2024 16:34:02.764848948 CET	53	55638	1.1.1.1	192.168.2.5
Nov 25, 2024 16:34:13.586513996 CET	53	65477	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 25, 2024 16:31:40.590209007 CET	192.168.2.5	1.1.1.1	c219	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 16:31:24.320836067 CET	192.168.2.5	1.1.1.1	0x13e3	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:31:40.351130009 CET	192.168.2.5	1.1.1.1	0xe043	Standard query (0)	gmail.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:31:40.351449966 CET	192.168.2.5	1.1.1.1	0x2295	Standard query (0)	gmail.com	65	IN (0x0001)	false
Nov 25, 2024 16:31:42.201323986 CET	192.168.2.5	1.1.1.1	0xd374	Standard query (0)	mail.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:31:42.201699018 CET	192.168.2.5	1.1.1.1	0xbded	Standard query (0)	mail.google.com	65	IN (0x0001)	false
Nov 25, 2024 16:31:44.686217070 CET	192.168.2.5	1.1.1.1	0x5173	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:31:44.686369896 CET	192.168.2.5	1.1.1.1	0x91c4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 16:32:03.570152044 CET	192.168.2.5	1.1.1.1	0x4822	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:03.570437908 CET	192.168.2.5	1.1.1.1	0xf32e	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Nov 25, 2024 16:32:05.934844971 CET	192.168.2.5	1.1.1.1	0x218	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:05.935157061 CET	192.168.2.5	1.1.1.1	0x7647	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 25, 2024 16:32:11.080337048 CET	192.168.2.5	1.1.1.1	0xf9e0	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:11.080495119 CET	192.168.2.5	1.1.1.1	0xc9e8	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 25, 2024 16:32:13.161003113 CET	192.168.2.5	1.1.1.1	0xed6e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:13.161154032 CET	192.168.2.5	1.1.1.1	0x1a5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 16:33:59.925447941 CET	192.168.2.5	1.1.1.1	0x4f60	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:33:59.925575972 CET	192.168.2.5	1.1.1.1	0x39bd	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 25, 2024 16:34:02.621558905 CET	192.168.2.5	1.1.1.1	0x9677	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:34:02.621675968 CET	192.168.2.5	1.1.1.1	0x532a	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 16:31:23.938642979 CET	1.1.1.1	192.168.2.5	0x6b4a	No error (0)	windowsupdatebg.s.llnwi.net		178.79.238.128	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:31:23.938642979 CET	1.1.1.1	192.168.2.5	0x6b4a	No error (0)	windowsupdatebg.s.llnwi.net		178.79.238.0	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:31:24.462054014 CET	1.1.1.1	192.168.2.5	0x13e3	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:31:40.489921093 CET	1.1.1.1	192.168.2.5	0xe043	No error (0)	gmail.com		142.250.181.69	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:31:42.341521978 CET	1.1.1.1	192.168.2.5	0xd374	No error (0)	mail.google.com		172.217.21.37	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:31:44.824973106 CET	1.1.1.1	192.168.2.5	0x5173	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:31:44.824987888 CET	1.1.1.1	192.168.2.5	0x91c4	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 16:32:03.720453024 CET	1.1.1.1	192.168.2.5	0xf32e	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:03.720702887 CET	1.1.1.1	192.168.2.5	0x4822	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:03.720702887 CET	1.1.1.1	192.168.2.5	0x4822	No error (0)	www3.l.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:06.073827028 CET	1.1.1.1	192.168.2.5	0x218	No error (0)	play.google.com		172.217.19.206	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:11.217847109 CET	1.1.1.1	192.168.2.5	0xf9e0	No error (0)	play.google.com		172.217.19.206	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:13.305742979 CET	1.1.1.1	192.168.2.5	0x1a5	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 16:32:13.305757046 CET	1.1.1.1	192.168.2.5	0xed6e	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:34:00.067464113 CET	1.1.1.1	192.168.2.5	0x4f60	No error (0)	play.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:34:02.763221979 CET	1.1.1.1	192.168.2.5	0x9677	No error (0)	play.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

https:

p13n.adobe.io

accounts.youtube.com

play.google.com

www.google.com

slscr.update.microsoft.com

otelrules.azureedge.net

mail.google.com

gmail.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49756	142.250.181.69	80	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 16:31:40.649410963 CET	424	OUT	GET / HTTP/1.1 Host: gmail.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 16:31:42.197951078 CET	606	IN	HTTP/1.1 301 Moved Permanently Location: https://mail.google.com/mail/u/0/ Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: sffe Content-Length: 230 X-XSS-Protection: 0 Date: Mon, 25 Nov 2024 15:25:38 GMT Expires: Mon, 25 Nov 2024 15:55:38 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 363 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 6d 61 69 6c 2f 75 2f 30 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://mail.google.com/mail/u/0/">here</A>.</BODY></HTML>
Nov 25, 2024 16:32:27.199390888 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 25, 2024 16:33:12.324825048 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 25, 2024 16:33:57.449789047 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49757	142.250.181.69	80	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 16:32:25.652139902 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49760	142.250.181.69	80	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 16:32:25.730376005 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49708	2.18.109.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 15:31:22 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=64862 Date: Mon, 25 Nov 2024 15:31:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	2.18.109.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 15:31:24 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=64917 Date: Mon, 25 Nov 2024 15:31:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 15:31:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	34.193.227.236	443	5776	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:25 UTC	1473	OUT	GET /psdk/v2/content?surfaceId=ACROBAT_READER_MASTER_SURFACEID&surfaceId=DC_READER_LAUNCH_CARD&surfaceId=DC_Reader_RHP_Banner&surfaceId=DC_Reader_RHP_Retention&surfaceId=Edit_InApp_Aug2020&surfaceId=DC_FirstMile_Right_Sec_Surface&surfaceId=DC_Reader_Upsell_Cards&surfaceId=DC_FirstMile_Home_View_Surface&surfaceId=DC_Reader_RHP_Intent_Banner&surfaceId=DC_Reader_Disc_LHP_Banner&surfaceId=DC_Reader_Edit_LHP_Banner&surfaceId=DC_Reader_Convert_LHP_Banner&surfaceId=DC_Reader_Sign_LHP_Banner&surfaceId=DC_Reader_More_LHP_Banner&surfaceId=DC_Reader_Disc_LHP_Retention&surfaceId=DC_Reader_Home_LHP_Trial_Banner&adcProductLanguage=en-us&adcVersion=23.6.20320&adcProductType=SingleClientMini&adcOSType=WIN&adcCountryCode=US&adcXAPIClientID=api_reader_desktop_win_23.6.20320&encodingScheme=BASE_64 HTTP/1.1 Host: p13n.adobe.io Connection: keep-alive sec-ch-ua: "Chromium";v="105" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 x-adobe-uuid: 89d789c4-e7e5-4f75-95a4-57139ab6811f x-adobe-uuid-type: visitorId x-api-key: AdobeReader9 sec-ch-ua-platform: "Windows" Origin: https://rna-resource.acrobat.com Accept-Language: en-US,en;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://rna-resource.acrobat.com/ Accept-Encoding: gzip, deflate, br
2024-11-25 15:31:25 UTC	608	IN	HTTP/1.1 200 Server: openresty Date: Mon, 25 Nov 2024 15:31:25 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 5339 Connection: close x-request-id: KpnAcErxdqlH9d6RmHbwUBRzjglPsyfl vary: accept-encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Headers: Authorization,Content-Type,X-Api-Key,cache-control,User-Agent,If-None-Match,x-adobe-uuid,x-adobe-uuid-type, X-Request-Id Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-request-id Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-11-25 15:31:25 UTC	5339	IN	Data Raw: 7b 22 73 75 72 66 61 63 65 73 22 3a 7b 22 44 43 5f 52 65 61 64 65 72 5f 48 6f 6d 65 5f 4c 48 50 5f 54 72 69 61 6c 5f 42 61 6e 6e 65 72 22 3a 7b 22 63 6f 6e 74 61 69 6e 65 72 73 22 3a 5b 7b 22 63 6f 6e 74 61 69 6e 65 72 49 64 22 3a 31 2c 22 63 6f 6e 74 61 69 6e 65 72 4c 61 62 65 6c 22 3a 22 4a 53 4f 4e 20 66 6f 72 20 44 43 5f 52 65 61 64 65 72 5f 48 6f 6d 65 5f 4c 48 50 5f 54 72 69 61 6c 5f 42 61 6e 6e 65 72 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 22 64 61 74 61 22 3a 22 65 79 4a 6a 64 47 45 69 4f 6e 73 69 64 47 56 34 64 43 49 36 49 6c 52 79 65 53 42 42 59 33 4a 76 59 6d 46 30 49 46 42 79 62 79 4a 39 4c 43 4a 31 61 53 49 36 65 79 4a 30 61 58 52 73 5a 56 39 7a 64 48 6c 73 61 57 35 6e 49 6a 70 37 49 6d Data Ascii: {"surfaces":{"DC_Reader_Home_LHP_Trial_Banner":{"containers":[{"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","dataType":"application/json","data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7Im

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:26 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EfeMOVL4ZVOW8Ag&MD=34rmAM78 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 15:31:27 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: a45ee0a5-5c45-46cc-8113-02322c0c60e8 MS-RequestId: bec5773c-b7ef-4274-b4c1-e83808986d6e MS-CV: /lDif3FIEUuOCgqU.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 15:31:26 GMT Connection: close Content-Length: 24490
2024-11-25 15:31:27 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 15:31:27 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:27 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:28 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:27 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: 19b35b80-c01e-0049-150a-3eac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153127Z-15b8b599d885ffrhhC1TEBtuv0000000068g000000003n8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:28 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 15:31:28 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-25 15:31:28 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-25 15:31:28 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-25 15:31:28 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-25 15:31:28 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-25 15:31:28 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-25 15:31:28 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-25 15:31:28 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-25 15:31:28 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:30 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:31 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c9502ca5-e01e-0033-0fb4-3e4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153131Z-178bfbc474bwlrhlhC1NYCy3kg00000007p000000000dpv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:31 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49729	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:30 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:31 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:31 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: e2d9d15e-301e-003f-65f5-3e266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153131Z-174c587ffdfcb7qhhC1TEB3x70000000065000000000mdtp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:31 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:30 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:31 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8db92378-201e-003f-2cbf-3e6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153131Z-178bfbc474bh5zbqhC1NYCkdug00000007p00000000043wn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:31 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:30 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:31 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153131Z-174c587ffdfb5q56hC1TEB04kg000000060000000000n2np x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:31 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:30 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:31 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5299024a-c01e-0079-4d47-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153131Z-174c587ffdfgcs66hC1TEB69cs000000060g000000009u97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:31 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:33 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:33 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: aad6ad68-f01e-0071-7110-3e431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153133Z-178bfbc474b9fdhphC1NYCac0n00000007gg00000000m64y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:33 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:33 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4bad8666-601e-0032-490e-3eeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153133Z-178bfbc474bv7whqhC1NYC1fg400000007rg0000000043hu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:33 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:33 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2eed8dc4-701e-0098-0dc6-3e395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153133Z-178bfbc474b9fdhphC1NYCac0n00000007kg00000000d6ts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:33 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:33 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 90d7dcde-101e-008e-3d03-3ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153133Z-178bfbc474bbbqrhhC1NYCvw7400000007sg00000000hg2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:33 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 51fbd25c-e01e-0020-5e4d-3cde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153133Z-15b8b599d88hd9g7hC1TEBp75c00000005zg00000000qdgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:35 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:35 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9bcae678-901e-007b-2946-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153135Z-15b8b599d889fz52hC1TEB59as000000063g00000000bgce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:35 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 464f6e4e-101e-005a-3b0e-3e882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153135Z-178bfbc474bfw4gbhC1NYCunf400000007sg000000000hq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:35 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 08b7745d-b01e-00ab-54e9-3edafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153135Z-15b8b599d88tmlzshC1TEB4xpn000000063g00000000326x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:35 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:35 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: aff2abcc-f01e-0003-4547-3c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153135Z-178bfbc474bfw4gbhC1NYCunf400000007r00000000068nt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:35 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:35 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: a9413e51-301e-0099-2c01-3f6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153135Z-15b8b599d882l6clhC1TEBxd5c00000005yg00000000k498 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:36 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:37 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:37 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 215cf067-501e-008c-5fe3-3ecd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153137Z-174c587ffdfn4nhwhC1TEB2nbc000000064g00000000q61t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:37 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:38 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153138Z-174c587ffdfx984chC1TEB676g000000064g00000000b3x2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:37 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4834b854-301e-005d-3ab8-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153138Z-178bfbc474btvfdfhC1NYCa2en00000007v00000000004q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:37 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 9bf3f441-f01e-003f-246b-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153138Z-178bfbc474bwlrhlhC1NYCy3kg00000007s00000000025g3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:37 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:38 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 190bcf01-801e-0078-3650-3cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153138Z-15b8b599d88hd9g7hC1TEBp75c00000005z000000000rzra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:38 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:39 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 44e9982d-301e-001f-6639-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153140Z-15b8b599d88s6mj9hC1TEBur3000000005v000000000qmqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:40 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:40 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 0d14cf85-a01e-0032-2ee6-3e1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153140Z-15b8b599d8885prmhC1TEBsnkw000000069g000000006uut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:40 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c77577e7-501e-0078-0da6-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153140Z-178bfbc474bq2pr7hC1NYCkfgg00000007q000000000pftf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:40 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:40 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f19b5380-801e-0015-2749-3cf97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153140Z-15b8b599d88qw29phC1TEB5zag000000063g00000000d2hx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:40 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:40 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: fe481865-f01e-0085-1c04-3f88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153140Z-15b8b599d88wn9hhhC1TEBry0g000000065g00000000dg6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:42 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ffa63380-201e-006e-3b6c-3dbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153142Z-15b8b599d885ffrhhC1TEBtuv0000000064g00000000kdrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:42 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:42 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 876f21bf-101e-007a-0bbf-3e047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153142Z-178bfbc474bxkclvhC1NYC69g400000007kg00000000ece4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:42 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ed298b8a-a01e-0002-322d-3c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153142Z-178bfbc474bbcwv4hC1NYCypys00000007eg00000000k53z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:42 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:42 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: e1811c2a-201e-00aa-06c6-3e3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153142Z-178bfbc474bwh9gmhC1NYCy3rs00000007v00000000000ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:42 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 47ff93a4-401e-0083-0f5d-3e075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153142Z-174c587ffdftjz9shC1TEBsh9800000005z000000000g5hn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49762	172.217.21.37	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:44 UTC	667	OUT	GET /mail/u/0/ HTTP/1.1 Host: mail.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:31:44 UTC	778	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Location: https://accounts.google.com/ServiceLogin?service=mail&passive=1209600&osid=1&continue=https://mail.google.com/mail/u/0/&followup=https://mail.google.com/mail/u/0/&emr=1 Strict-Transport-Security: max-age=10886400; includeSubDomains Cross-Origin-Resource-Policy: same-site Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Date: Mon, 25 Nov 2024 15:31:44 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:44 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:44 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: db42c49d-901e-007b-4a2f-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153144Z-178bfbc474brk967hC1NYCfu6000000007dg00000000gge8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:45 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:44 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:45 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 2160d4c7-701e-0021-5913-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153144Z-178bfbc474bv587zhC1NYCny5w00000007n0000000001tnt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:45 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:44 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3ac3f4da-f01e-001f-4c47-3c5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153144Z-15b8b599d88vp97chC1TEB5pzw000000060g00000000ncbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:44 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 16d74281-d01e-0066-164b-3cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153144Z-15b8b599d889gj5whC1TEBfyk000000005ug00000000txrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:45 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:44 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:45 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 09788b64-001e-0046-6eb7-3eda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153145Z-178bfbc474bvjk8shC1NYC83ns00000007k0000000005a7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:45 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:46 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:47 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 79f6ed77-701e-0021-554e-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153147Z-15b8b599d88l2dpthC1TEBmzr0000000061000000000hqy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:47 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:46 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:47 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 35c17bb4-f01e-0052-536c-3d9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153147Z-15b8b599d885ffrhhC1TEBtuv00000000680000000005nzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:47 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:46 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:47 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: a7985a29-001e-0046-374c-3cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153147Z-15b8b599d88pxmdghC1TEBux9c000000069g0000000077hs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:47 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:46 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:47 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 33a5509c-101e-00a2-2819-3d9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153147Z-178bfbc474bh5zbqhC1NYCkdug00000007n0000000008dat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:47 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:47 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:47 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153147Z-174c587ffdfx984chC1TEB676g000000061000000000qm2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:47 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:49 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: c4b984cf-b01e-001e-2446-3c0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153149Z-15b8b599d886w4hzhC1TEBb4ug000000067g0000000069nh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:49 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:49 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: fd91c27a-801e-0083-67e3-3ef0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153149Z-15b8b599d885v8r9hC1TEB104g000000063000000000nz1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:49 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:49 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 98e24ef8-f01e-0052-0940-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153149Z-15b8b599d885v8r9hC1TEB104g000000068000000000414g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:49 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:49 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 8b9ec706-101e-000b-544c-3c5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153149Z-15b8b599d88cn5thhC1TEBqxkn00000006200000000072wb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:49 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:49 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:49 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9b8b0684-e01e-001f-1ef5-3e1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153149Z-15b8b599d88pxmdghC1TEBux9c000000064g00000000pzuf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:50 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:51 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:51 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 79b51860-701e-0021-623a-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153151Z-174c587ffdfks6tlhC1TEBeza4000000062g00000000v0f3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:51 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:51 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:51 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a6b1c0e3-801e-002a-1ea2-3e31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153151Z-178bfbc474bgvl54hC1NYCsfuw00000007mg00000000ggp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:52 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:51 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:52 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 15dd4eb7-201e-0051-500a-3d7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153152Z-178bfbc474bgvl54hC1NYCsfuw00000007hg00000000p8nn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:52 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:51 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c2dc1527-b01e-0053-5db2-3bcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153152Z-174c587ffdf8fcgwhC1TEBnn7000000006a000000000a8ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:51 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 6917304d-001e-0079-0164-3d12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153152Z-15b8b599d88g5tp8hC1TEByx6w00000006600000000035vm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:53 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:54 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 40c83c0a-001e-00ad-1e79-3b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153154Z-174c587ffdfldtt2hC1TEBwv9c00000005ug00000000xudf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:54 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:53 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 6b91e280-c01e-00a2-4f0a-3d2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153154Z-178bfbc474bv7whqhC1NYC1fg400000007s0000000002ds1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:54 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:54 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2309915e-d01e-0014-6179-3eed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153154Z-15b8b599d885ffrhhC1TEBtuv0000000067g00000000724p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:54 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:54 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 08e3daf0-d01e-002b-25fd-3e25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153154Z-15b8b599d88phfhnhC1TEBr51n000000067g00000000e3kg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 15:31:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:54 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: ba3f3383-a01e-000d-6e55-3cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153154Z-15b8b599d88vp97chC1TEB5pzw000000064g000000008ghb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:56 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1b17855c-f01e-0099-1f6a-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153156Z-174c587ffdf89smkhC1TEB697s000000062g00000000w7ny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:56 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: ec805e8e-f01e-0020-2d6c-3d956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153156Z-15b8b599d885v8r9hC1TEB104g000000061g00000000tpka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:57 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:56 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 2145ee07-e01e-003c-0347-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153156Z-178bfbc474bv7whqhC1NYC1fg400000007p000000000cc3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:56 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 19a81fd9-501e-0078-66bc-3b06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153156Z-15b8b599d88z9sc7hC1TEBkr4w000000066000000000kw7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:57 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:56 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:56 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 7397a655-c01e-000b-4bbf-3ee255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153156Z-178bfbc474bfw4gbhC1NYCunf400000007pg00000000cdpy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:57 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:58 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c229ce53-501e-008f-23c3-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153159Z-15b8b599d88hr8sfhC1TEBbca400000005z000000000fwbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:59 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:58 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: c700c3f3-301e-0000-760a-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153159Z-15b8b599d88qw29phC1TEB5zag000000061g00000000km25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:59 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:58 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4f8b7288-601e-003e-66f5-3e3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153159Z-15b8b599d8885prmhC1TEBsnkw00000006b00000000022pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:59 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:58 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: d599eecb-401e-0083-1bb7-3e075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153159Z-178bfbc474bq2pr7hC1NYCkfgg00000007qg00000000nynw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:58 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:31:59 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: c9d02f83-e01e-0033-4d75-3b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153159Z-174c587ffdf9xbcchC1TEBxkz400000005v000000000x8bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:31:59 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:00 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9d7b10d0-e01e-0099-63bc-3bda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153201Z-15b8b599d88f9wfchC1TEBm2kc000000069g000000007dbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:01 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 93e7400e-201e-0003-07ae-3ef85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153201Z-178bfbc474bfw4gbhC1NYCunf400000007s0000000002fuq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:01 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:01 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 23cbbb45-601e-0084-4e3d-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153201Z-178bfbc474b9fdhphC1NYCac0n00000007p0000000004nze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:01 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:01 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:01 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 0c2ec4c8-201e-003c-0f17-3e30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153201Z-15b8b599d886w4hzhC1TEBb4ug0000000680000000004kds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:01 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:01 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:01 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8d306870-001e-0049-49bf-3e5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153201Z-178bfbc474bbcwv4hC1NYCypys00000007n00000000000e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:01 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:03 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:03 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3aa21312-901e-0016-730f-3defe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153203Z-178bfbc474bscnbchC1NYCe7eg00000007tg00000000e0hg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:03 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:03 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 524516d5-201e-0003-0afd-3df85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153204Z-178bfbc474bh5zbqhC1NYCkdug00000007mg000000009ze1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:03 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 00c17fdd-701e-000d-2f70-3c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153204Z-174c587ffdf6b487hC1TEBydsn000000062000000000eem7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:03 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153204Z-174c587ffdf4zw2thC1TEBu340000000068g000000005hr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:03 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:04 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 964846c7-701e-001e-36c3-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153204Z-15b8b599d88vp97chC1TEB5pzw00000005zg00000000raxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:04 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49844	172.217.19.238	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:05 UTC	1225	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1164913258&timestamp=1732548722798 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:06 UTC	1978	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-pub5-voCFsjnIjy1oBHXjA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 25 Nov 2024 15:32:05 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjctDikmJw0ZBikPj6kkkNiJ3SZ7AGALHx2vOsjkCc9O88awEQX-6-xHodiFV7LrEaA3GRxBXWBiAW4uH4umHSLjaBExd-nmNW0kvKL4zPTEnNK8ksqUzJz03MzEvOz8_OTC0uTi0qSy2KNzIwMjE0NDTXM7CILzAAAIq6MW8" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-25 15:32:06 UTC	1978	IN	Data Raw: 37 36 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 70 75 62 35 2d 76 6f 43 46 73 6a 6e 49 6a 79 31 6f 42 48 58 6a 41 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 7626<html><head><script nonce="pub5-voCFsjnIjy1oBHXjA">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-11-25 15:32:06 UTC	1978	IN	Data Raw: 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 0a 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 22 3a 61 3d 22 31 30 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 37 2e 30 22 3a 61 3d 22 31 31 2e 30 22 7d 65 6c 73 65 20 61 3d 22 37 2e 30 22 3b 65 6c 73 65 20 61 3d 63 5b 31 5d 3b 62 3d 61 7d 65 6c 73 65 20 62 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 64 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 28 2e 2a 3f 29 5c 5c 29 29 3f Data Ascii: \d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s(?:\$(.?)\$)?
2024-11-25 15:32:06 UTC	1978	IN	Data Raw: 3d 64 21 3d 6e 75 6c 6c 3f 64 3a 30 3b 61 3d 3d 6e 75 6c 6c 26 26 28 61 3d 79 61 29 3b 79 61 3d 76 6f 69 64 20 30 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 65 3d 39 36 3b 63 3f 28 61 3d 5b 63 5d 2c 65 7c 3d 35 31 32 29 3a 61 3d 0a 5b 5d 3b 62 26 26 28 65 3d 65 26 2d 33 33 35 32 31 36 36 35 7c 28 62 26 31 30 32 33 29 3c 3c 31 35 29 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 71 22 29 3b 65 3d 41 28 61 29 3b 69 66 28 65 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 74 22 29 3b 69 66 28 65 26 36 34 29 72 65 74 75 72 6e 20 61 3b 64 3d 3d 3d 31 7c 7c 64 3d 3d 3d 32 7c 7c 28 65 7c 3d 36 34 29 3b 69 66 28 63 26 26 28 65 7c 3d 35 31 32 2c 63 21 3d 3d 61 5b 30 5d 29 29 Data Ascii: =d!=null?d:0;a==null&&(a=ya);ya=void 0;if(a==null){var e=96;c?(a=[c],e\|=512):a=[];b&&(e=e&-33521665\|(b&1023)<<15)}else{if(!Array.isArray(a))throw Error("q");e=A(a);if(e&2048)throw Error("t");if(e&64)return a;d===1\|\|d===2\|\|(e\|=64);if(c&&(e\|=512,c!==a[0]))
2024-11-25 15:32:06 UTC	1978	IN	Data Raw: 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 44 3f 61 2e 4b 3a 4b 61 28 61 2e 4b 2c 4e 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 3b 76 61 72 20 62 3d 21 44 2c 63 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 61 5b 63 2d 31 5d 2c 65 3d 77 61 28 64 29 3b 65 3f 63 2d 2d 3a 64 3d 76 6f 69 64 20 30 3b 76 61 72 20 66 3d 0a 61 3b 69 66 28 65 29 7b 62 3a 7b 76 61 72 20 68 3d 64 3b 76 61 72 20 67 3b 76 61 72 20 6b 3d 21 31 3b 69 66 28 68 29 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 68 29 69 66 28 69 73 4e 61 4e 28 2b 6c 29 29 65 3d 76 6f 69 64 20 30 2c 28 28 65 3d 67 29 21 3d 6e 75 6c 6c 3f 65 3a 67 3d 7b 7d 29 5b 6c 5d 3d 68 5b 6c 5d 3b 65 6c 73 65 20 69 66 28 65 3d 68 5b 6c 5d 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 Data Ascii: ,Oa=function(a){a=D?a.K:Ka(a.K,Na,void 0,void 0,!1);var b=!D,c=a.length;if(c){var d=a[c-1],e=wa(d);e?c--:d=void 0;var f=a;if(e){b:{var h=d;var g;var k=!1;if(h)for(var l in h)if(isNaN(+l))e=void 0,((e=g)!=null?e:g={})[l]=h[l];else if(e=h[l],Array.isArray(
2024-11-25 15:32:06 UTC	1978	IN	Data Raw: 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 53 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 45 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 61 28 51 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 0a 76 61 72 20 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 Data Ascii: oat64Array".split(" "),c=0;c<b.length;c++){var d=Sa[b[c]];typeof d==="function"&&typeof d.prototype[a]!="function"&&E(d.prototype,a,{configurable:!0,writable:!0,value:function(){return Ta(Qa(this))}})}return a});var Ta=function(a){a={next:a};a[Symbol.ite
2024-11-25 15:32:06 UTC	1978	IN	Data Raw: 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6c 22 29 3b 64 28 6b 29 3b 69 66 28 21 48 28 6b 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6d 60 22 2b 6b 29 3b 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3d 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 48 28 6b 2c 66 29 3f 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 48 28 6b 2c 66 29 26 26 48 28 6b 5b 66 5d 2c 74 68 69 73 2e 67 Data Ascii: )}};g.prototype.set=function(k,l){if(!c(k))throw Error("l");d(k);if(!H(k,f))throw Error("m`"+k);k[f][this.g]=l;return this};g.prototype.get=function(k){return c(k)&&H(k,f)?k[f][this.g]:void 0};g.prototype.has=function(k){return c(k)&&H(k,f)&&H(k[f],this.g
2024-11-25 15:32:06 UTC	1978	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 3f 6c 3d 62 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 67 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 48 28 67 5b 30 5d 2c 6c 29 29 66 6f 72 28 67 3d 30 3b 67 3c 6d 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 76 3d 6d 5b 67 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 76 2e 6b 65 79 21 3d 3d 76 2e 6b 65 79 7c 7c 6b 3d 3d 3d 76 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 67 2c 6c 3a 76 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c Data Ascii: function(g,k){var l=k&&typeof k;l=="object"\|\|l=="function"?b.has(k)?l=b.get(k):(l=""+ ++h,b.set(k,l)):l="p_"+k;var m=g[0][l];if(m&&H(g[0],l))for(g=0;g<m.length;g++){var v=m[g];if(k!==k&&v.key!==v.key\|\|k===v.key)return{id:l,list:m,index:g,l:v}}return{id:l,
2024-11-25 15:32:06 UTC	1978	IN	Data Raw: 6c 79 28 61 2e 62 69 6e 64 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 29 7b 76 61 72 20 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 68 69 66 74 2e 61 70 70 6c 79 28 65 2c 64 29 3b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 2c 65 29 7d 7d 72 65 74 75 72 6e 20 Data Ascii: ly(a.bind,arguments)},hb=function(a,b,c){if(!a)throw Error();if(arguments.length>2){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return
2024-11-25 15:32:06 UTC	1978	IN	Data Raw: 63 3d 21 31 3b 74 72 79 7b 76 61 72 20 64 3d 61 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 61 2e 6c 69 6e 65 7c 7c 22 4e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 7d 63 61 74 63 68 28 66 29 7b 64 3d 22 4e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 63 3d 21 30 7d 74 72 79 7b 76 61 72 20 65 3d 61 2e 66 69 6c 65 4e 61 6d 65 7c 7c 0a 61 2e 66 69 6c 65 6e 61 6d 65 7c 7c 61 2e 73 6f 75 72 63 65 55 52 4c 7c 7c 71 2e 24 67 6f 6f 67 44 65 62 75 67 46 6e 61 6d 65 7c 7c 62 7d 63 61 74 63 68 28 66 29 7b 65 3d 22 4e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 63 3d 21 30 7d 62 3d 6e 62 28 61 29 3b 72 65 74 75 72 6e 21 63 26 26 61 2e 6c 69 6e 65 4e 75 6d 62 65 72 26 26 61 2e 66 69 6c 65 4e 61 6d 65 26 26 61 2e 73 74 61 63 6b 26 26 61 2e 6d 65 73 73 61 67 65 26 26 61 2e 6e 61 6d Data Ascii: c=!1;try{var d=a.lineNumber\|\|a.line\|\|"Not available"}catch(f){d="Not available",c=!0}try{var e=a.fileName\|\|a.filename\|\|a.sourceURL\|\|q.$googDebugFname\|\|b}catch(f){e="Not available",c=!0}b=nb(a);return!c&&a.lineNumber&&a.fileName&&a.stack&&a.message&&a.nam
2024-11-25 15:32:06 UTC	1978	IN	Data Raw: 29 7d 62 2e 70 75 73 68 28 61 29 3b 63 2e 70 75 73 68 28 22 29 5c 6e 22 29 3b 74 72 79 7b 63 2e 70 75 73 68 28 73 62 28 61 2e 63 61 6c 6c 65 72 2c 62 29 29 7d 63 61 74 63 68 28 68 29 7b 63 2e 70 75 73 68 28 22 5b 65 78 63 65 70 74 69 6f 6e 20 74 72 79 69 6e 67 20 74 6f 20 67 65 74 20 63 61 6c 6c 65 72 5d 5c 6e 22 29 7d 7d 65 6c 73 65 20 61 3f 63 2e 70 75 73 68 28 22 5b 2e 2e 2e 6c 6f 6e 67 20 73 74 61 63 6b 2e 2e 2e 5d 22 29 3a 63 2e 70 75 73 68 28 22 5b 65 6e 64 5d 22 29 3b 0a 72 65 74 75 72 6e 20 63 2e 6a 6f 69 6e 28 22 22 29 7d 2c 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4b 5b 61 5d 29 72 65 74 75 72 6e 20 4b 5b 61 5d 3b 61 3d 53 74 72 69 6e 67 28 61 29 3b 69 66 28 21 4b 5b 61 5d 29 7b 76 61 72 20 62 3d 2f 66 75 6e 63 74 69 6f 6e 5c 73 2b Data Ascii: )}b.push(a);c.push(")\n");try{c.push(sb(a.caller,b))}catch(h){c.push("[exception trying to get caller]\n")}}else a?c.push("[...long stack...]"):c.push("[end]");return c.join("")},ob=function(a){if(K[a])return K[a];a=String(a);if(!K[a]){var b=/function\s+

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:05 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:06 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 6f884587-b01e-0001-3155-3c46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153206Z-15b8b599d882zv28hC1TEBdchn00000005y000000000mhfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:06 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:06 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:06 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5493b62-c01e-0046-23bf-3e2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153206Z-178bfbc474b9xljthC1NYCtw9400000007f000000000pyv4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:06 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:06 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:06 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 198a258a-e01e-000c-1dbf-3e8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153206Z-178bfbc474bgvl54hC1NYCsfuw00000007mg00000000ghk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:06 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:06 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:06 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 512d0a55-c01e-0079-2cc0-3ee51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153206Z-15b8b599d88hr8sfhC1TEBbca400000005yg00000000hr2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:06 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:06 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:06 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:06 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: fa8f60f6-901e-0083-3159-3cbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153206Z-15b8b599d88z9sc7hC1TEBkr4w00000006bg000000000t2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:06 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49853	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:07 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EfeMOVL4ZVOW8Ag&MD=34rmAM78 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 15:32:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 6f95896d-2957-4e99-b426-3b7fea44df9b MS-RequestId: eb26696f-950b-40ca-92b8-3585b47d7107 MS-CV: DsxdJcl800KNRKcP.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 15:32:06 GMT Connection: close Content-Length: 30005
2024-11-25 15:32:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-25 15:32:07 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49856	172.217.19.206	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:07 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:08 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 25 Nov 2024 15:32:08 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49855	172.217.19.206	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:07 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:08 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 25 Nov 2024 15:32:08 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:08 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:08 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 14c1fdaf-501e-0029-4fb8-3ed0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153208Z-178bfbc474brk967hC1NYCfu6000000007fg0000000099va x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:08 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:08 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:08 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cd55988-601e-003e-4d0c-3d3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153208Z-178bfbc474bp8mkvhC1NYCzqnn00000007gg00000000as5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:08 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:08 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:08 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153208Z-178bfbc474bv7whqhC1NYC1fg400000007r0000000005qgv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:08 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:08 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:09 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:08 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153208Z-174c587ffdftv9hphC1TEBm29w00000005z000000000rqa5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:09 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:08 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:09 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:09 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: cf1029bf-101e-0017-7ef6-3e47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153209Z-174c587ffdfcb7qhhC1TEB3x70000000063000000000uhmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:09 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:10 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3994331f-f01e-0071-696c-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153210Z-174c587ffdf6b487hC1TEBydsn00000006400000000055rv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:10 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49866	172.217.19.206	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	1132	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 546 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:10 UTC	546	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 36 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 32 35 34 38 37 32 35 31 34 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"36",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1732548725145",null,null,n
2024-11-25 15:32:11 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=519=2lyKahjW_wzkYYlCPVzRmqv8cLpXEbMGclzMkOCxfafkKnnDr8A1hxOVcdlB8yA-xXtS3ElJP1glll9yuAqUj7CdAZzwJXpwIVA9Xhui3IxfEAD4Knwz8G_GoF-uxotDHD0T7vPujoX9roLy1d6B8ZN-kGQUi0s6nm5dzHwJy4Xi-hJ9LxjSLcs; expires=Tue, 27-May-2025 15:32:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 25 Nov 2024 15:32:10 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 25 Nov 2024 15:32:10 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-11-25 15:32:11 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-25 15:32:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49870	172.217.19.206	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	1132	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 547 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:10 UTC	547	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 36 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 32 35 34 38 37 32 35 31 39 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"36",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1732548725197",null,null,n
2024-11-25 15:32:11 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=519=I4dNTkfUnKXn9DRgtkstq15WrRV9-bcolD8RchE3mmpJYPnlMp6EHbBkP50A3CgQ7VZ3CIRHxoTeKWvYQ0xEtX2Xu_8mX2KRCn5x9zBoxwfa2Xv4tV_jy490SFFagBtdFxoFlMe_oej0d8-EpRkwB2i0CYu8sz5n8w6QllT0hFLAXnXj7l4UREQ; expires=Tue, 27-May-2025 15:32:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 25 Nov 2024 15:32:10 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 25 Nov 2024 15:32:10 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-11-25 15:32:11 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-25 15:32:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:11 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: eac37560-701e-001e-50bf-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153211Z-178bfbc474bscnbchC1NYCe7eg00000007vg000000006fza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:11 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:11 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 71a2c45e-801e-008c-45c1-3e7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153211Z-178bfbc474bfw4gbhC1NYCunf400000007q000000000ab4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:11 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:11 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:11 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: fde4123d-901e-00a0-613d-3c6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153211Z-178bfbc474b9fdhphC1NYCac0n00000007f000000000qu3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:11 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:11 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:11 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d0fe0868-a01e-006f-42ad-3e13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153211Z-178bfbc474bmqmgjhC1NYCy16c00000007rg00000000bzbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:11 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49875	172.217.19.206	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:12 UTC	579	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:12 UTC	550	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin Content-Type: text/plain; charset=UTF-8 Date: Mon, 25 Nov 2024 15:32:12 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49876	142.250.181.68	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:12 UTC	1025	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:13 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 24 Nov 2024 14:45:29 GMT Expires: Mon, 02 Dec 2024 14:45:29 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 89203 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 15:32:13 UTC	684	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-11-25 15:32:13 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<
2024-11-25 15:32:13 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-11-25 15:32:13 UTC	1390	IN	Data Raw: 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-11-25 15:32:13 UTC	576	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:12 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6b0db6fe-b01e-0084-64f5-3ed736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153212Z-15b8b599d886w4hzhC1TEBb4ug000000063000000000p3y3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:13 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:12 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:13 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 11574f01-801e-0067-6559-3cfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153213Z-174c587ffdfp4vpjhC1TEBybqw000000060g00000000u8mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49879	172.217.19.206	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:12 UTC	676	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=2lyKahjW_wzkYYlCPVzRmqv8cLpXEbMGclzMkOCxfafkKnnDr8A1hxOVcdlB8yA-xXtS3ElJP1glll9yuAqUj7CdAZzwJXpwIVA9Xhui3IxfEAD4Knwz8G_GoF-uxotDHD0T7vPujoX9roLy1d6B8ZN-kGQUi0s6nm5dzHwJy4Xi-hJ9LxjSLcs
2024-11-25 15:32:13 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 25 Nov 2024 15:32:13 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 15:32:13 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-25 15:32:13 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:13 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c57d99b7-c01e-0079-4efd-3de51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153213Z-178bfbc474bv7whqhC1NYC1fg400000007q0000000009y00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:13 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:13 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 19681afd-501e-005b-29d8-3ed7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153213Z-178bfbc474bpscmfhC1NYCfc2c00000006ag000000002u1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:13 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:13 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:13 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b43d4aba-301e-0020-1845-3c6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153213Z-15b8b599d88tmlzshC1TEB4xpn0000000640000000001cr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49884	172.217.19.206	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	1328	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 323 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Encoding: gzip sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/binary sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=I4dNTkfUnKXn9DRgtkstq15WrRV9-bcolD8RchE3mmpJYPnlMp6EHbBkP50A3CgQ7VZ3CIRHxoTeKWvYQ0xEtX2Xu_8mX2KRCn5x9zBoxwfa2Xv4tV_jy490SFFagBtdFxoFlMe_oej0d8-EpRkwB2i0CYu8sz5n8w6QllT0hFLAXnXj7l4UREQ
2024-11-25 15:32:14 UTC	323	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a dd 54 c1 4a c4 30 14 fc 15 c9 39 b6 79 49 d3 e4 29 1e d4 83 37 2f 8b 78 48 7b 58 76 6b 0d 6c 13 68 bb ea e7 fb da ed 22 b8 ea 76 3d 89 04 1e 65 3a 6f 3a 33 94 38 07 3c 6c 37 9b d9 c3 7d 05 b2 2a 9c 3f 2c d8 01 d7 39 76 17 63 bd a9 ce 6e 9f db d8 54 8c 33 00 c3 4a ee d8 7d ec 2f af af 6e da 65 58 13 6a 47 6c 24 f9 6d b3 a7 95 5c 70 f6 e8 c3 3a be 76 03 26 12 3a f4 f0 66 73 9a 3b 16 41 1a 95 4d 40 c9 41 23 a3 95 f1 94 b4 ad b5 25 0f 0c 8c 92 3a b3 06 50 08 71 60 f2 73 14 b7 4b 48 bd 14 6c b9 5a c5 6d e8 bb a4 1e 53 24 ab d8 a4 2f 2a ed 7c 1d 7c 48 fd ba 0a bd 7f f2 55 5b 4c aa ae 60 05 b9 a0 8f d3 32 20 1a cc 50 82 96 b9 d2 2a cb 2d 12 4f 4d 0d 16 6c 21 b5 d2 68 ac 56 17 7b 87 c2 a2 d5 02 15 89 94 c7 8c 82 a5 34 3f bc 1e 0a dd Data Ascii: TJ09yI)7/xH{Xvklh"v=e:o:38<l7}?,9vcnT3J}/neXjGl$m\p:v&:fs;AM@A#%:Pq`sKHlZmS$/\|\|HU[L`2 P*-OMl!hV{4?
2024-11-25 15:32:15 UTC	945	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=519=zFykNgFgZNLnED7rkjomTYwiV8rWhEFfAaNskTKpR2TX8ci3s7EV7s8P6qvqxAZpQJCaYCB7a0la5RwYUNUz1sv7y_JNpB7kM-7KcdzHPB2pNRD-JR6Mv7Ue8DFF7K3enDvqmZcsfZ0A1IGX_iBC7LtQHNKgX5Pod4w-BKwpICFx6aTs8FqCEDFXzL-_aKM; expires=Tue, 27-May-2025 15:32:15 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 25 Nov 2024 15:32:15 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 25 Nov 2024 15:32:15 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-11-25 15:32:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-25 15:32:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:15 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 080d0a10-601e-0050-16b6-3e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153215Z-178bfbc474bfw4gbhC1NYCunf400000007q000000000abnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49886	172.217.21.36	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:15 UTC	647	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=I4dNTkfUnKXn9DRgtkstq15WrRV9-bcolD8RchE3mmpJYPnlMp6EHbBkP50A3CgQ7VZ3CIRHxoTeKWvYQ0xEtX2Xu_8mX2KRCn5x9zBoxwfa2Xv4tV_jy490SFFagBtdFxoFlMe_oej0d8-EpRkwB2i0CYu8sz5n8w6QllT0hFLAXnXj7l4UREQ
2024-11-25 15:32:15 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 24 Nov 2024 14:45:29 GMT Expires: Mon, 02 Dec 2024 14:45:29 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 89206 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 15:32:15 UTC	684	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-11-25 15:32:15 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<
2024-11-25 15:32:15 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-11-25 15:32:15 UTC	1390	IN	Data Raw: 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-11-25 15:32:15 UTC	576	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:15 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:15 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:15 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 438064ab-f01e-00aa-59c1-3e8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153215Z-178bfbc474bwlrhlhC1NYCy3kg00000007sg000000000fet x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:15 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:15 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:15 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: d8182971-801e-0067-2581-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153215Z-174c587ffdf9xbcchC1TEBxkz400000005v000000000x9fy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49891	172.217.19.206	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:15 UTC	676	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=I4dNTkfUnKXn9DRgtkstq15WrRV9-bcolD8RchE3mmpJYPnlMp6EHbBkP50A3CgQ7VZ3CIRHxoTeKWvYQ0xEtX2Xu_8mX2KRCn5x9zBoxwfa2Xv4tV_jy490SFFagBtdFxoFlMe_oej0d8-EpRkwB2i0CYu8sz5n8w6QllT0hFLAXnXj7l4UREQ
2024-11-25 15:32:16 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 25 Nov 2024 15:32:16 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 15:32:16 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-25 15:32:16 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:15 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 1461fc14-a01e-000d-67bf-3ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153215Z-174c587ffdfx984chC1TEB676g000000061g00000000q0rq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:15 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 79a67e7b-b01e-0098-1dd0-3ecead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153215Z-15b8b599d88phfhnhC1TEBr51n00000006a0000000005g9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:16 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:17 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:17 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 8f21b959-301e-0096-6e6c-3de71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153217Z-15b8b599d889gj5whC1TEBfyk000000005vg00000000pm91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:17 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:18 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: c780bae6-901e-005b-04c5-3b2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153218Z-174c587ffdf6b487hC1TEBydsn000000062000000000efr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:17 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:18 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:18 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 2537bc41-601e-0050-496a-3c2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153218Z-174c587ffdfks6tlhC1TEBeza4000000064000000000qp19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:18 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:17 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:18 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:18 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 74bdb417-d01e-00ad-341a-3de942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153218Z-178bfbc474b7cbwqhC1NYC8z4n00000007f000000000pun4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:18 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:17 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:18 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:18 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ee240466-601e-00ab-24f2-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153218Z-178bfbc474btvfdfhC1NYCa2en00000007n000000000qrch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:18 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49897	172.217.19.206	443	3524	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:18 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=zFykNgFgZNLnED7rkjomTYwiV8rWhEFfAaNskTKpR2TX8ci3s7EV7s8P6qvqxAZpQJCaYCB7a0la5RwYUNUz1sv7y_JNpB7kM-7KcdzHPB2pNRD-JR6Mv7Ue8DFF7K3enDvqmZcsfZ0A1IGX_iBC7LtQHNKgX5Pod4w-BKwpICFx6aTs8FqCEDFXzL-_aKM
2024-11-25 15:32:19 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 25 Nov 2024 15:32:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 15:32:19 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-25 15:32:19 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:19 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:20 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 719deb7f-801e-008c-11bf-3e7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153220Z-178bfbc474bgvl54hC1NYCsfuw00000007gg00000000r8yn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:20 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:20 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:20 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: aaff583f-201e-003f-6a31-3e6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153220Z-15b8b599d88tr2flhC1TEB5gk4000000069g0000000073ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:20 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:20 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:20 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4a555c2b-b01e-0097-1e0f-3e4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153220Z-178bfbc474bxkclvhC1NYC69g400000007qg000000000sga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:20 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:20 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:20 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 6b735921-c01e-0066-37ca-3ba1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153220Z-174c587ffdfb74xqhC1TEBhabc000000065g000000008puv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:20 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:20 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:20 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 0f68d931-701e-0097-56c8-3eb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153220Z-178bfbc474bbbqrhhC1NYCvw7400000007x0000000001ea3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:20 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:22 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: da294107-101e-000b-45e2-3d5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153222Z-178bfbc474bq2pr7hC1NYCkfgg00000007pg00000000r40s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:22 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:22 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 01d403fe-801e-0078-7dbf-3ebac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153222Z-178bfbc474bv587zhC1NYCny5w00000007eg00000000pgn0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:22 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:22 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 77142413-201e-000c-6b0a-3d79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153222Z-178bfbc474bv7whqhC1NYC1fg400000007ng00000000f91w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49906	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:22 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:22 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 20b8ead9-d01e-0028-50c0-3e7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153222Z-178bfbc474bnwsh4hC1NYC2ubs00000007mg00000000rmw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:23 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49907	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:22 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 1aa9c07b-201e-0096-3276-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153222Z-174c587ffdftjz9shC1TEBsh98000000060000000000bt4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:23 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49908	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:24 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 7348a965-301e-001f-21bf-3eaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153224Z-178bfbc474bfw4gbhC1NYCunf400000007q000000000acax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:24 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:24 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 39e7be55-101e-008d-7d03-3d92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153224Z-178bfbc474bvjk8shC1NYC83ns00000007k0000000005d98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:24 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: f7275632-901e-00ac-0fb9-3eb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153225Z-178bfbc474b9fdhphC1NYCac0n00000007p0000000004qt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:24 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: fdb50a35-301e-005d-1e2f-3ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153225Z-178bfbc474bfw4gbhC1NYCunf400000007r0000000006c88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49912	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:25 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 8f39caa8-201e-0071-0a1b-3eff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153225Z-15b8b599d88f9wfchC1TEBm2kc000000067g00000000e3rz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49914	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:27 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:27 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8abb671b-d01e-0049-4b0c-3de7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153227Z-178bfbc474bnwsh4hC1NYC2ubs00000007ng00000000p45e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:27 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49913	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:27 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:27 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153227Z-174c587ffdf7t49mhC1TEB4qbg00000006400000000040qu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49915	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:27 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:27 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: ab1afa94-201e-0085-151a-3d34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153227Z-178bfbc474bh5zbqhC1NYCkdug00000007h000000000n8ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:27 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49916	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:27 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:27 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:27 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 55036ff3-c01e-00a1-5927-3e7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153227Z-15b8b599d88n8stkhC1TEBb78n00000000w000000000r9rn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:27 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49917	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:27 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:27 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: b5bbaf22-a01e-0070-528a-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153227Z-174c587ffdfp4vpjhC1TEBybqw0000000670000000001v9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:27 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49919	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:29 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:29 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:29 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3767267b-e01e-000c-0ca4-3e8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153229Z-178bfbc474bvjk8shC1NYC83ns00000007m0000000001tbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:29 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49918	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:29 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:29 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:29 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 2e331142-b01e-001e-697c-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153229Z-174c587ffdfl22mzhC1TEBk40c000000069000000000dg5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:29 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49921	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:29 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:29 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:29 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 36815d12-601e-0070-4763-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153229Z-178bfbc474bq2pr7hC1NYCkfgg00000007v0000000008f05 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:29 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49920	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:29 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:29 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:29 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 11fd19a1-001e-0046-3f80-3bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153229Z-174c587ffdfmlsmvhC1TEBvyks000000067g00000000kr9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:29 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49922	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:29 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:30 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:29 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153229Z-174c587ffdfb5q56hC1TEB04kg00000005y000000000u02b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:30 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49925	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:31 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:32 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:31 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c87fa586-301e-0052-7045-3c65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153231Z-15b8b599d88m7pn7hC1TEB4axw000000065g00000000ccc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Target ID:	0
Start time:	10:31:12
Start date:	25/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\ResumeKR.pdf"
Imagebase:	0x7ff686a00000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	10:31:13
Start date:	25/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	10:31:14
Start date:	25/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1344,i,7329765949995824427,13631409799317529830,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	10:31:37
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://mailto:rode.ketan98@gmail.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	10:31:38
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	10:32:05
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4776 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	10:32:05
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 --field-trial-handle=1908,i,17944162442744502737,18440682251375774626,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ResumeKR.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\3dfcb717-e783-4c7b-a61f-0e33f414a2e7.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7e348768-cd54-4b4c-bc8e-67250a2b3d10.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF564236.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241125153118Z-162.bmp

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.5664

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.5664

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Windows Analysis Report
ResumeKR.pdf