Edit tour

Windows Analysis Report
0029 .pdf

Overview

General Information

Sample name:	0029 .pdf
Analysis ID:	1571427
MD5:	d26456e9e9911d2734f8aaf241b6a738
SHA1:	8912ec729ee6b5fc3903aba74aaf68d23f872010
SHA256:	1c8d103791657581e8c440df28356e2bbe3f8e7359c3e6b89d2223c0c4800ea6
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 4988 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\0029 .pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 1016 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7172 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1520,i,17592372357962665421,1916247962855733663,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7588 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://mailto:urss.consolato@gmail.com" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4992 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7532 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4116 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: Title: Gmail does not match URL

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1607060051&timestamp=1733738947474
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1607060051&timestamp=1733738947474
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1225838328%3A1733738934763947&ddm=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.147.8:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.147.8:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.36.55:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.36.55:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.36.55:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.83:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.36.55:443 -> 192.168.2.6:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.187:443 -> 192.168.2.6:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.6:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.6:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.6:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:50097 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 23.47.168.24 23.47.168.24
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 52.6.155.20 52.6.155.20

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.8
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.36.55

Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241209T100813Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=0e44774ec2f243658ad9797c19bfcf20&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=620870&metered=false&nettype=ethernet&npid=sc-280815&oemName=VMware%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=VMware20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=620870&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: HGuePnZUAkyUg3ov.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241209T100813Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=97ab0944e20e4d65a9891b3004c57f42&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=620870&metered=false&nettype=ethernet&npid=sc-338387&oemName=VMware%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&sc-mode=0&scmid=Public&smBiosDm=VMware20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=620870&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: HGuePnZUAkyUg3ov.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241209T100813Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=6aa682a446e34455b4996f8077afce7f&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=620870&metered=false&nettype=ethernet&npid=sc-338388&oemName=VMware%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&scmid=Public&smBiosDm=VMware20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=620870&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: HGuePnZUAkyUg3ov.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239398630131_1CB6KQXGNLM1EBCZG&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239394254867_1F6ONY1CP3G3QNK5Y&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239337201808_1NREAF5SJS6TG8GUU&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239398630132_1ZBVZAVRHAL2Q9QL5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239394254868_1GI7NCR9RVLW4CPD2&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239398628025_15DMLIN1UWYBCWWBK&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239398628026_1EWIUP9AYMDP71JJ5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /psdk/v2/content?surfaceId=ACROBAT_READER_MASTER_SURFACEID&surfaceId=DC_READER_LAUNCH_CARD&surfaceId=DC_Reader_RHP_Banner&surfaceId=DC_Reader_RHP_Retention&surfaceId=Edit_InApp_Aug2020&surfaceId=DC_FirstMile_Right_Sec_Surface&surfaceId=DC_Reader_Upsell_Cards&surfaceId=DC_FirstMile_Home_View_Surface&surfaceId=DC_Reader_RHP_Intent_Banner&surfaceId=DC_Reader_Disc_LHP_Banner&surfaceId=DC_Reader_Edit_LHP_Banner&surfaceId=DC_Reader_Convert_LHP_Banner&surfaceId=DC_Reader_Sign_LHP_Banner&surfaceId=DC_Reader_More_LHP_Banner&surfaceId=DC_Reader_Disc_LHP_Retention&surfaceId=DC_Reader_Home_LHP_Trial_Banner&adcProductLanguage=en-us&adcVersion=23.6.20320&adcProductType=SingleClientMini&adcOSType=WIN&adcCountryCode=US&adcXAPIClientID=api_reader_desktop_win_23.6.20320&encodingScheme=BASE_64 HTTP/1.1Host: p13n.adobe.ioConnection: keep-alivesec-ch-ua: "Chromium";v="105"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01x-adobe-uuid: 0b65fa77-f9dd-4c6e-a1b5-fa4d63973307x-adobe-uuid-type: visitorIdx-api-key: AdobeReader9sec-ch-ua-platform: "Windows"Origin: https://rna-resource.acrobat.comAccept-Language: en-US,en;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://rna-resource.acrobat.com/Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sgUMWH4tFbHrZa7&MD=v2EvNTK5 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mail/u/0/ HTTP/1.1Host: mail.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000045&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241209T100844Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=dfd28f0742934775bc2d68966689dad6&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=620870&metered=false&nettype=ethernet&npid=sc-88000045&oemName=mqbyoj%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=mqbyoj20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=620870&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: v6qMyCyME0OMMjwl.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8XIUgC05jctREhm1Rv4IYmjVUCUzyVeps-p1BXHUW_21yfHdHWxsfdEuuihLY_XJ2POlvqBNyv1eCJKzkhkX7V2KFxpEH-jX0EQQQvY_1IeDfUOZyU7MzAcNge3yM-YKAdV4opnTrzUgNtjRdoW9cAIHfth34uxJIcEjSzYT9VdRDk2OC%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmZWRnZSUyZndpbmRvd3MtZWRnZSUzZmZvY3VzJTNkY29udmVuaW5jZSUyNnNvdXJjZSUzZGlwJTI2ZXMlM2QwJTI2Zm9ybSUzZE01MDBFNyUyNk9DSUQlM2RNNTAwRTc%26rlid%3D28211863fcaa17278e567f353d39cc96&TIME=20241209T100846Z&CID=531538185&EID=531538185&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: g.bing.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /aes/c.gif?RG=bd1d38db940b49e2a15b90c37678526d&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20241209T100846Z&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: www.bing.comConnection: Keep-AliveCookie: MUID=21883249D17D6262249E2719D01F6378
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000045&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241209T100849Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=f032904655b84821ae6ade874e5fb1d0&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=620870&metered=false&nettype=ethernet&npid=sc-88000045&oemName=mqbyoj%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=mqbyoj20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=620870&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: v6qMyCyME0OMMjwl.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8XIUgC05jctREhm1Rv4IYmjVUCUzyVeps-p1BXHUW_21yfHdHWxsfdEuuihLY_XJ2POlvqBNyv1eCJKzkhkX7V2KFxpEH-jX0EQQQvY_1IeDfUOZyU7MzAcNge3yM-YKAdV4opnTrzUgNtjRdoW9cAIHfth34uxJIcEjSzYT9VdRDk2OC%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmZWRnZSUyZndpbmRvd3MtZWRnZSUzZmZvY3VzJTNkY29udmVuaW5jZSUyNnNvdXJjZSUzZGlwJTI2ZXMlM2QwJTI2Zm9ybSUzZE01MDBFNyUyNk9DSUQlM2RNNTAwRTc%26rlid%3D28211863fcaa17278e567f353d39cc96&TIME=20241209T100847Z&CID=531538185&EID=&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: g.bing.comConnection: Keep-AliveCookie: MUID=21883249D17D6262249E2719D01F6378; _EDGE_S=SID=228EAE2958FD69642702BB7959F468CE; MR=0
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sgUMWH4tFbHrZa7&MD=v2EvNTK5 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=UhTqSKoMEwIN-rxUTptvC6w6B_0F0mvcsieTjFglPJO0WPL_kMl5aLGQKcH6rnFHbYHhK10UESLEQYov6_shHHBvLtja_PnSQeEY9OJ5nMlNPF7fpkgSGM1rTFMhOzB64xFmaWDx6oHxw9S6edhAgGfm59slgetRp6jCipu1mc6MWEUQGmUp-bs7
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gmail.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_267.15.dr

String found in binary or memory: _.Aq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.Aq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.Aq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.Aq(_.Jq(c))+"&hl="+_.Aq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.Aq(m)+"/chromebook/termsofservice.html?languageCode="+_.Aq(d)+"&regionCode="+_.Aq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: gmail.com
Source: global traffic	DNS traffic detected: DNS query: mail.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4831Host: login.live.com

Source: 2D85F72862B55C4EADD9E66E06947F3D0.3.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_267.15.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_267.15.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_263.15.dr, chromecache_288.15.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_267.15.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_288.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_288.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_267.15.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_267.15.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_267.15.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_dark_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2_darkmode.svg
Source: chromecache_263.15.dr, chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/speedbump/take_selfie.svg
Source: chromecache_263.15.dr, chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/speedbump/take_selfie_dark_mode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_263.15.dr, chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_288.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_267.15.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_263.15.dr, chromecache_288.15.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://www.google.com
Source: chromecache_267.15.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_288.15.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_288.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_288.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_288.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_288.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_288.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_275.15.dr, chromecache_267.15.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443

Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.147.8:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.147.8:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.36.55:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.36.55:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.36.55:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.83:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.36.55:443 -> 192.168.2.6:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.187:443 -> 192.168.2.6:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.6:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.6:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.6:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:50097 version: TLS 1.2

Source: classification engine

Classification label: clean2.winPDF@46/77@19/9

Source: 0029 .pdf

Initial sample: mailto:urss.consolato@gmail.com

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-09 05-08-23-852.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\0029 .pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1520,i,17592372357962665421,1916247962855733663,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://mailto:urss.consolato@gmail.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4992 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4116 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1520,i,17592372357962665421,1916247962855733663,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4992 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4116 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: 0029 .pdf	Initial sample: PDF keyword /JS count = 0
Source: 0029 .pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: 0029 .pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	1 Drive-by Compromise	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
www3.l.google.com	172.217.19.238	true	false	high
play.google.com	172.217.19.206	true	false	high
mail.google.com	172.217.21.37	true	false	high
www.google.com	142.250.181.68	true	false	high
gmail.com	142.250.181.69	true	false	high
accounts.youtube.com	unknown	unknown	false	high
x1.i.lencr.org	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://tse1.mm.bing.net/th?id=OADD2.10239398628025_15DMLIN1UWYBCWWBK&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false	high
https://tse1.mm.bing.net/th?id=OADD2.10239398630132_1ZBVZAVRHAL2Q9QL5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false	high
https://tse1.mm.bing.net/th?id=OADD2.10239394254867_1F6ONY1CP3G3QNK5Y&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false	high
https://tse1.mm.bing.net/th?id=OADD2.10239394254868_1GI7NCR9RVLW4CPD2&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false	high
https://mail.google.com/mail/u/0/	false	high
https://www.google.com/favicon.ico	false	high
https://tse1.mm.bing.net/th?id=OADD2.10239398628026_1EWIUP9AYMDP71JJ5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false	high
https://tse1.mm.bing.net/th?id=OADD2.10239398630131_1CB6KQXGNLM1EBCZG&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false	high
http://gmail.com/	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.3.dr	false	high
https://play.google/intl/	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://families.google.com/intl/	chromecache_267.15.dr	false	high
https://youtube.com/t/terms?gl=	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://policies.google.com/technologies/location-data	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://www.google.com/intl/	chromecache_267.15.dr	false	high
https://apis.google.com/js/api.js	chromecache_263.15.dr, chromecache_288.15.dr	false	high
https://policies.google.com/privacy/google-partners	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://play.google.com/work/enroll?identifier=	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://policies.google.com/terms/service-specific	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://g.co/recover	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://policies.google.com/privacy/additional	chromecache_267.15.dr	false	high
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_267.15.dr	false	high
https://policies.google.com/technologies/cookies	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://policies.google.com/terms	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_263.15.dr, chromecache_288.15.dr	false	high
https://www.google.com	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://play.google.com/log?format=json&hasfast=true	chromecache_267.15.dr	false	high
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://support.google.com/accounts?hl=	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://policies.google.com/terms/location	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://policies.google.com/privacy	chromecache_267.15.dr	false	high
https://support.google.com/accounts?p=new-si-ui	chromecache_275.15.dr, chromecache_267.15.dr	false	high
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_275.15.dr, chromecache_267.15.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
23.47.168.24	unknown	United States	16625	AKAMAI-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
169.254.100.229	unknown	Reserved	6966	USDOSUS	false
52.6.155.20	unknown	United States	14618	AMAZON-AESUS	false
142.250.181.69	gmail.com	United States	15169	GOOGLEUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
172.217.21.37	mail.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.9
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1571427
Start date and time:	2024-12-09 11:07:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	0029 .pdf
Detection:	CLEAN
Classification:	clean2.winPDF@46/77@19/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, BackgroundTransferHost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.218.208.137, 172.64.41.3, 162.159.61.3, 18.213.11.84, 54.224.241.105, 50.16.47.176, 34.237.241.83, 23.195.39.65, 23.32.239.9, 2.19.198.27, 192.229.221.95, 23.32.239.65, 216.58.208.227, 172.217.19.238, 64.233.162.84, 172.217.17.46, 142.250.181.74, 142.250.181.106, 142.250.181.138, 172.217.17.42, 172.217.17.74, 172.217.19.202, 142.250.181.10, 142.250.181.42, 172.217.21.42, 172.217.19.234, 172.217.21.35, 142.250.181.99, 216.58.208.234, 199.232.214.172, 172.217.17.35, 172.217.19.206
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, tse1.mm.bing.net, clientservices.googleapis.com, g.bing.com, arc.msn.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, www.gstatic.com, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, www.bing.com, clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, fonts.gstatic.com, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 0029 .pdf

Simulations

Behavior and APIs

Time	Type	Description
05:08:32	API Interceptor	1x Sleep call for process: AcroCEF.exe modified

Input	Output
URL: https://google.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://google.com
URL: https://www.gstatic.com/_/mss/boq-identity/_/js/k=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be legitimate Google sign-in UI code with standard DOM manipulation and form handling. It uses strict mode, contains typical UI component patterns, and interacts with expected form elements. The code follows good practices like type checking and safe DOM manipulation methods. No high-risk behaviors like eval() or suspicious data transmission are present." }
"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this; try{ _.SOa=_.z("SD8Jgb",[]); _.TW=function(a,b){if(typeof b==="string")a.zc(b);else if(b instanceof _.bq&&b.ia&&b.ia===_.C)b=_.Za(b.qw()),a.empty().append(b);else if(b instanceof _.Va)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("ng");};_.UW=function(a){var b=_.Gp(a,"[jsslot]");if(b.size()>0)return b;b=new _.Dp([_.zl("span")]);_.Hp(b,"jsslot","");a.empty().append(b);return b};_.GSb=function(a){return a===null\|\|typeof a==="string"&&_.jj(a)}; _.k("SD8Jgb"); _.ZW=function(a){_.W.call(this,a.La);this.Xa=a.controller.Xa;this.fd=a.controllers.fd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.Aa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.ZW,_.W);_.ZW.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.cw},header:{jsname:"tJHJj",ctor:_.cw},nav:{jsname:"DH6Rkf",ctor:_.cw}},controllers:{fd:{jsname:"rEuO1b",ctor:_.cw}}}};_.h=_.ZW.prototype; _.h.setTitle=function(a){var b=this.header.Pb("r4nke");_.TW(_.UW(b),a)};_.h.hp=function(a){var b=this.header.Pb("VdSJob");_.GSb(a)?b.empty():_.TW(_.UW(b),a)};_.h.YX=function(a){this.fd?this.fd.setContent(a):Promise.resolve(void 0)};_.h.setPrimaryActionLabel=function(a){this.nav.setPrimaryActionLabel(a)};_.h.Vo=function(){return!!this.nav.Vo()};_.h.setPrimaryActionEnabled=function(a){this.nav.setPrimaryActionEnabled(a)};_.h.Yl=function(){this.nav.Yl()};_.h.setSecondaryActionLabel=function(a){this.nav.setSecondaryActionLabel(a)}; _.h.Wo=function(){return!!this.nav.Wo()};_.h.setSecondaryActionEnabled=function(a){this.nav.setSecondaryActionEnabled(a)};_.h.So=function(){return!!this.nav.So()};_.h.Os=function(a){this.nav.Os(a)};_.h.To=function(){return!!this.nav.To()};_.h.Ps=function(a){this.nav.Ps(a)};_.h.Uo=function(){return!!this.nav.Uo()};_.h.Qs=function(a){this.nav.Qs(a)};_.h.setAllActionsEnabled=function(a){this.nav.setAllActionsEnabled(a)};_.h.Us=function(a,b){this.nav.Us(a,b)};_.X(_.ZW.prototype,"dhtxlf",function(){return this.Uo}); _.X(_.ZW.prototype,"SEKku",function(){return this.To});_.X(_.ZW.prototype,"UKeVrb",function(){return this.So});_.X(_.ZW.prototype,"ajMrU",function(){return this.Wo});_.X(_.ZW.prototype,"ZnXHXc",function(){return this.Yl});_.X(_.ZW.prototype,"W4Dqde",function(){return this.Vo});_.Z(_.SOa,_.ZW); _.l(); _.HRa=_.z("rmumx",[]); _.Je(_.Ie("tRszL"),_.qB,new _.qB); _.k("rmumx"); var HSb=function(a){_.W.call(this,a.La)};_.K(HSb,_.W);HSb.Ca=_.W.Ca;_.Z(_.HRa,HSb); _.l(); _.KRa=_.z("E87wgc",[]); _.k("E87wgc"); var VW=function(a){_.W.call(this,a.La)};_.K(VW,_.W);VW.Ca=_.W.Ca;VW.prototype.aa=function(){this.trigger(_.E1a)};_.X(VW.prototype,"pKJJqe",function(){return this.aa});_.Z(_.KRa,VW); _.l(); _.IRa=_.z("qPYxq",[_.In]); _.k("qPYxq"); var XSb=function(a){a=a\|\|{};return _.PWa(a.fd,a.Bn)},$W=function(a){_.W.call(this,a.La);this.Qa=a.Ya.Qa;this.form=this.Aa().find("form").first();this.Bn=_.Ji(this.Aa().getData("formActionUri"),"")};_.K($W,_.W);$W.Ca=function(){return{Ya:{Qa:_.Hu}}};$W.prototype.setContent=function(a){var b=this;return _.Hw(this).Ob(function(){a===null?b.form&&(b.form=null,b.Aa().empty()):(b.form\|\|(b.Aa().append(b.Qa.Bc(XSb,{Bn:b.Bn})),b.form=b.Aa().find("form").first()),_.TW(_.UW(b.form),a))}).build()()}; $W.prototype.setEnabled=function(a){var b=this;return _.Hw(this).Ob(function(){_.dw(b.Aa(),"RDPZE",!a);_.YF(b.Aa().el(),"disabled",!a)}).build()()};$W.prototype.aa=function(a){a.event.preventDefault()};_.X($W.prototype,"JM9m2e",function(){return this.aa});_.Z(_.IRa,$W); _.l(); _.k("FHru6e"); _.xIb={oqa:0,Osa:1,eua:2,Gra:3,Fsa:4};_.yIb={cra:0,Hqa:1,zra:2};_.zIb=_.Xo("u0AQve");_.AIb=_.Xo("kg58of");_.BIb=_.Xo("nd3iyc"); _.l(); _.jC=_.mr("wGM7Jc"); _.k("wGM7Jc"); _.BG=function(a){_.W.call(this,a.La)};_.K(_.BG,_.W);_.BG.Ca=_.W.Ca;_.BG.prototype.focus=function(){_.rF&&Z0a(this,!0)};_.BG.prototype.blur=function(){Z0a(this,!1)};_.BG.prototype.eb=f
URL: https://www.gstatic.com/_/mss/boq-identity/_/js/k=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be legitimate Google sign-in UI code. It uses strict mode, contains standard DOM manipulation and data handling patterns, and includes Google's copyright notice. While it contains some dynamic code loading patterns, these are typical for Google's modular JavaScript architecture and interact with known Google domains." }
"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this; try{ _.k("ZwDk9d"); var $A=function(){_.Xt.call(this)};_.K($A,_.Xu);$A.Ca=_.Xu.Ca;$A.prototype.xU=function(a){return _.hf(this,{Ya:{sV:_.cm}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.Mi(function(e){window._wjdc=function(f){d(f);e(iLa(f,b,a))}}):iLa(c,b,a)})};var iLa=function(a,b,c){return(a=a&&a[c])?a:b.Ya.sV.xU(c)}; $A.prototype.aa=function(a,b){var c=_.msa(b).Fl;if(c.startsWith("$")){var d=_.hn.get(a);_.Pq[b]&&(d\|\|(d={},_.hn.set(a,d)),d[c]=_.Pq[b],delete _.Pq[b],_.Qq--);if(d)if(a=d[c])b=_.lf(a);else throw Error("Vb`"+b);else b=null}else b=null;return b};_.$u(_.$fa,$A); _.l(); _.k("SNUn3"); _.hLa=new _.Af(_.Og); _.l(); _.k("RMhBfe"); var jLa=function(a){var b=_.Oq(a);return b?new _.Mi(function(c,d){var e=function(){b=_.Oq(a);var f=_.gga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata with id: "+b],a.hasAttribute("jscontroller")&&f.push("jscontroller: "+a.getAttribute("jscontroller")),a.hasAttribute("jsmodel")&&f.push("jsmodel: "+a.getAttribute("jsmodel")),d(Error(f.join("\n")))):_.mn(e,50)};_.mn(e,50)}):_.lf(a.getAttribute("jsdata"))},kLa=function(a){var b=_.Oq(a); return b?!_.gga(a,b):!1},lLa=function(a,b){a=_.lxa(a,b);return a.length==0?null:a[0].ctor},mLa=function(){return Object.values(_.At).reduce(function(a,b){return a+Object.keys(b).length},0)},nLa=function(){return Object.entries(_.At).reduce(function(a,b){var c=_.n(b);b=c.next().value;c=c.next().value;for(var d in c)a+=b+" -> "+d+"\n";return a},"")};_.Ng(_.Og);var aB=function(a){_.Xt.call(this);this.aa=a.Ea.sV;this.jd=null},bB,cB,pLa;_.K(aB,_.Xu);aB.Ca=function(){return{Ea:{sV:_.hLa}}};aB.prototype.resolve=function(a,b,c,d){d=d===void 0?!1:d;a=bB(this,a,b,0);return c!==void 0?a.then(function(e){return _.oLa?_.Kd(e):_.ud(e)}):a.then(function(e){return d?_.Kd(e):e.clone()})}; bB=function(a,b,c,d,e,f,g){for(var m={};b&&b.getAttribute;m={JT:void 0}){if(kLa(b))return jLa(b).then(function(){return bB(a,b,c,d,e,f,g)});var p=_.cya(b);m.JT=_.Ig(c);if(g){var q=_.qa(p,g);q!=-1&&(p=p.slice(0,q))}q=p.pop();if(d==0)for(;q;){f=q;e=_.Zt(q);if(m.JT==e.Eb)break;q=p.pop();if(!q)return _.Ni(Error("Hd`"+m.JT+"`"+e.Eb))}if(m=a.aa.aa(b,f))return m;m=b;b=b.parentElement\|\|null;if(q&&(p=cB(a,q,p,m,b,c,d,e,f)))return p}return _.Ni(Error("Id`"+f+"`"+(e&&e.Eb)+"`"+mLa()+"`"+nLa()))}; cB=function(a,b,c,d,e,f,g,m,p){if(g++==0){if(m.Fl)return a.aa.xU(m.Fl).then(function(r){return r?_.oxa(r,f):c.length>0?cB(a,c.pop(),c,d,e,f,g,m,p):bB(a,e,f,g,m,p)})}else if(b=_.Zt(b),b.Fl&&m.Fl!=b.Fl){var q=lLa(b.Eb,m.Eb);q\|\|m.Eb!=b.Eb\|\|m.id!=b.id\|\|(q=f);if(q)return pLa(a,d,p,m,q).then(function(r){return r?r:c.length>0?cB(this,c.pop(),c,d,e,f,g,m,p):bB(this,e,f,g,m,p)},null,a)}return c.length>0?cB(a,c.pop(),c,d,e,f,g,m,p):bB(a,e,f,g,m,p)}; pLa=function(a,b,c,d,e){return bB(a,b,e,0,void 0,void 0,c).then(function(f){return _.Bt(f,d.tW,d.Eb)})};_.oLa=!1;_.$u(_.Xfa,aB); _.l(); }catch(e){_._DumpException(e)} }).call(this,this.default_AccountsSignInUi); // Google Inc.
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Egregio signor Direttore Generale, Io, Console dell'URSS nella Repubblica di San Marino e nella Repubblica Italiana, Natalia Vasilievna Reznichenko, a nome del Governo dell'URSS Vi comunico nuovamente ufficialmente che non avete soddisfatto le richieste del Governo dell'URSS rif.N031 SM-0031/2024 del 12 novembre 2024, inviato il 12 novembre 2024 via e-mail, a fornire entro 10 giorni di calendario un estratto del conto bancario N3917772/4 (01.01.1924) inerente conto dell'importo del deposito iniziale, degli interessi maturati del 4% annuo per tutti gli anni di utilizzo del deposito e della ripartizione del movimento dei fondi dal conto di deposito e dal conto bancario in metallo.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&os Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.gstatic.com/_/mss/boq-identity/_/js/k=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be legitimate Google sign-in UI code with standard retry/error handling logic. It includes expected features like strict mode, error handling, and retry mechanisms. The code is minified but from a trusted source (Google Inc.), and contains no high-risk behaviors like eval() or suspicious data exfiltration. The only minor risk factors are DOM manipulation capabilities, but these are standard for UI components." }
"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this; try{ _.k("lOO0Vd"); _.i2a=new _.Af(_.En); _.l(); _.k("P6sQOc"); var o2a=!!(_.hi[0]>>28&1);var q2a=function(a,b,c,d,e){this.fa=a;this.Ba=b;this.oa=c;this.Da=d;this.Fa=e;this.aa=0;this.da=p2a(this)},r2a=function(a){var b={};_.Oa(a.ZU(),function(e){b[e]=!0});var c=a.KU(),d=a.SU();return new q2a(a.UR(),c.aa()1E3,a.oU(),d.aa()1E3,b)},p2a=function(a){return Math.random()Math.min(a.BaMath.pow(a.oa,a.aa),a.Da)},s2a=function(a,b){return a.aa>=a.fa?!1:b!=null?!!a.Fa[b]:!0};var t2a=function(a){_.Xt.call(this);this.da=a.Ea.LX;this.fa=a.Ea.metadata;a=a.Ea.Dja;this.fetch=a.fetch.bind(a)};_.K(t2a,_.Xu);t2a.Ca=function(){return{Ea:{LX:_.l2a,metadata:_.i2a,Dja:_.X1a}}};t2a.prototype.aa=function(a,b){if(this.fa.getType(a.Vd())!==1)return _.Pn(a);var c=this.da.eX;return(c=c?r2a(c):null)&&s2a(c)?_.Aza(a,u2a(this,a,b,c)):_.Pn(a)}; var u2a=function(a,b,c,d){return c.then(function(e){return e},function(e){if(o2a)if(e instanceof _.vf){if(!e.status\|\|!s2a(d,e.status.xc()))throw e;}else{if("function"==typeof _.Qs&&e instanceof _.Qs&&e.da!==103&&e.da!==7)throw e;}else if(!e.status\|\|!s2a(d,e.status.xc()))throw e;return _.of(d.da).then(function(){if(!s2a(d))throw Error("ke`"+d.fa);++d.aa;d.da=p2a(d);b=_.pm(b,_.Vka,d.aa);return u2a(a,b,a.fetch(b),d)})})};_.$u(_.ITa,t2a); _.l(); }catch(e){_._DumpException(e)} }).call(this,this.default_AccountsSignInUi); // Google Inc.
URL: https://www.gstatic.com/_/mss/boq-identity/_/js/k=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate Google Accounts UI component with standard DOM manipulation and event handling. It uses strict mode and follows good practices. While it includes DOM manipulation and event handling, these are typical for UI components. No high-risk behaviors like eval() or suspicious data transmission are present." }
"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this; try{ _.BOa=_.z("wg1P6b",[_.KB,_.Go,_.No]); _.k("wg1P6b"); var f$a;f$a=_.Ph(["aria-"]); _.$I=function(a){_.W.call(this,a.La);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Wc=a.Ea.dg;this.eb=a.Ea.focus;this.Lc=a.Ea.Lc;this.fa=this.Lj();a=-1*parseInt(_.zp(this.Lj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.zp(this.Lj().el(),"marginBottom")\|\|"0",10);this.Wa={top:a,right:0,bottom:b,left:0};a=_.nf(this.getData("isMenuDynamic"),!1);b=_.nf(this.getData("isMenuHoisted"),!1);this.Fa=a?1:b?2:0;this.oa=!1;this.Da=1;this.Fa!==1&&(this.aa=this.Sa("U0exHf").children().Rc(0),this.ej(g$a(this, this.aa.el())));_.SF(this.Aa())&&(a=this.Aa().el(),b=this.Le.bind(this),a.__soy_skip_handler=b)};_.K(_.$I,_.W);_.$I.Ca=function(){return{Ea:{dg:_.HF,focus:_.wF,Lc:_.ev}}};_.$I.prototype.kA=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.qB)?(a=a.data.qB,this.Da=a==="MOUSE"\|\|a==="TOUCH"?1:2):this.Da=b.Fa\|\|b.Wa?1:2;h$a(this)};_.$I.prototype.Mj=function(a){a=a.event;var b=a.keyCode;b===40?this.Da=2:b===38&&(this.Da=3);return b===40\|\|b===38?(a.preventDefault(),h$a(this),!1):!0}; var h$a=function(a){_.bi(function(b){a.aa?(a.ev().Ba=a.Da,a.Mi()):a.trigger(_.B9a);_.Th(b)})};_.$I.prototype.Mi=function(){i$a(this);this.da.Tf()?this.da.close():(this.Fa===2&&(j$a(this,this.aa.el()),k$a(this)),this.da.open())};_.$I.prototype.sA=function(a){if(a.source!==this.da)return!0;this.Pa&&this.Pa.Il?_.LF(this.Wc,this.fa,{Il:this.Pa.Il()}):_.LF(this.Wc,this.fa);return!0};_.$I.prototype.rA=function(){l$a(this);return!0}; var l$a=function(a){_.bi(function(b){if(a.pj())return b.return();a.Ce().activeElement!==a.fa.el()&&_.MF(a.Wc,a.fa);a.oa&&(a.Aa().el().removeAttribute("aria-owns"),a.Ma&&_.DZa(a.Ma,a.fa));a.Fa===1&&m$a(a);a.Fa===2&&(n$a(a,a.aa.el()),k$a(a),o$a(a));_.Th(b)})};_.h=_.$I.prototype;_.h.Xv=function(){return!0};_.h.pj=function(){var a,b;return(b=(a=this.da)==null?void 0:a.Tf())!=null?b:!1};_.h.bv=function(){if(!(this.da instanceof _.VI))throw Error("Fe");return this.da};_.h.ev=function(){i$a(this);return this.da}; _.h.av=function(){return this.Sa("WjL7X").children().Rc(0)};_.h.Lj=function(){return this.fa?this.fa:p$a(this)};_.h.dispose=function(){_.W.prototype.dispose.call(this);this.oa&&m$a(this)}; var p$a=function(a){a=a.av();_.nf(a.getData("isTooltipWrapper"),!1)&&(a=a.children().Rc(0));_.nf(a.getData("isTouchWrapper"),!1)&&(a=a.children().Rc(0));return a},j$a=function(a,b){a.Ba=new _.Ep(document.createElement("div"));b.getAttribute("id")\|\|b.setAttribute("id",_.ag((new _.Ep(b)).Eq("menuUid")));a.Aa().el().setAttribute("aria-owns",b.getAttribute("id"));a.Ba.append(b);var c=_.vg(a.Aa().el()).body;_.UI(c)?_.A9a(c,a.Ba.el()):c.appendChild(a.Ba.el());a.Ns(b,a.Sa("U0exHf"));a.oa=!0;a.aa=_.Wu(b)}, n$a=function(a,b){a.Sa("U0exHf").empty().append(b);a.oa=!1;a.aa=_.Wu(b)};_.$I.prototype.Ua=function(a){var b=b===void 0?{}:b;this.aa&&m$a(this);b.Oka?j$a(this,a):n$a(this,a);b.viewportElement&&(this.viewportElement=b.viewportElement);g$a(this,a)}; var g$a=function(a,b){return _.Ui(a.Zg(b),function(c){a.da=c;k$a(a);return a.da})},k$a=function(a){a.ev().Ba=a.Da;var b=a.da;b.oa=a.fa;if(!a.oa&&!b.Bs()){var c=a.Wa;b.aa.top=c.top\|\|0;b.aa.right=c.right\|\|0;b.aa.bottom=c.bottom\|\|0;b.aa.left=c.left\|\|0}b.Ua=a.oa;a.viewportElement&&(b.viewportElement=a.viewportElement);a.oa&&(a.Ma=b instanceof _.VI?b.dh().Aa():b.Aa(),_.CZa(a.eb,a.Ma,a.fa))},m$a=function(a){a.aa&&(a.aa.remove(),a.OC(),a.aa=null,o$a(a))},o$a=function(a){a.Ba&&(a.Ba.remove(),a.OC(),a.Ba= null)},i$a=function(a){if(!a.da)throw a=a.Aa().wb("jsname"),Error(a?"MenuButtonController: MenuSurfaceController not found (jsname="+a+").":"MenuButtonController: MenuSurfaceController not found.");};_.$I.prototype.Le=function(a,b){q$a(this,b);return!0}; var q$a=function(a,b){_.bi(function(c){var d=a.av().el();if(!d)throw Error("Ge");a.Lc.Uk(d,b.getContent());a.fa=p$a(a);if(a.Fa!==1&&b.data.menu){if(!a.aa)th
URL: https://www.gstatic.com/_/mss/boq-identity/_/js/k=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be legitimate Google sign-in UI code. It uses strict mode, contains standard Google code patterns, and interacts with expected authentication components. The code is minified but not maliciously obfuscated, and includes Google's copyright notice. Only low-risk indicators present: minification and DOM manipulation for authentication purposes." }
"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this; try{ _.k("w9hDv"); _.Ng(_.qma);_.YA=function(a){_.Xt.call(this);this.aa=a.Ya.cache};_.K(_.YA,_.Xu);_.YA.Ca=function(){return{Ya:{cache:_.Pt}}};_.YA.prototype.execute=function(a){_.Gb(a,function(b){var c;_.kf(b)&&(c=b.jb.jc(b.ob));c&&this.aa.fJ(c)},this);return{}};_.$u(_.wma,_.YA); _.l(); _.k("ZDZcre"); var a3a=function(a){_.Xt.call(this);this.aa=_.fH();this.Cn=a.Ea.Cn;this.d6=a.Ea.metadata};_.K(a3a,_.Xu);a3a.Ca=function(){return{Ea:{Cn:_.hH,metadata:_.i2a}}};a3a.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Gb(a,function(c){var d=b.d6.getType(c.Vd())===2?b.Cn.Ob(c):b.Cn.fetch(c);return _.sm(c,_.iH)?d.then(function(e){return _.Kd(e)}):d},this)};_.$u(_.Bma,a3a); _.l(); _.k("K5nYTd"); _.h2a=new _.Af(_.xma); _.l(); _.k("sP4Vbe"); _.l(); _.k("kMFpHd"); _.l(); _.k("A7fCU"); var m2a=function(a){_.Xt.call(this);this.aa=a.Ea.dT};_.K(m2a,_.Xu);m2a.Ca=function(){return{Ea:{dT:_.h2a,metadata:_.i2a},preload:{fJ:_.YA}}};m2a.prototype.execute=function(a){a=n2a(this,a);return this.aa.execute(a)}; var n2a=function(a,b){var c={};_.Gb(b,function(d,e){c[e]=d.jb.jc(d.ob);if(d.metadata){if(d.metadata.sideChannel)for(var f=_.n(d.metadata.sideChannel),g=f.next();!g.done;g=f.next())g=g.value,c[e]=_.zza(c[e],g.extension,g.message);if(d.metadata.kb)for(d=_.n(d.metadata.kb),f=d.next();!f.done;f=d.next())f=f.value,c[e]=_.pm(c[e],f.key,f.value)}},a);return c};_.$u(_.yma,m2a); _.l(); }catch(e){_._DumpException(e)} }).call(this,this.default_AccountsSignInUi); // Google Inc.
URL: https://www.gstatic.com/_/mss/boq-identity/_/js/k=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be legitimate Google sign-in UI code. It contains standard Google code patterns, error handling, and UI rendering logic. While it uses DOM manipulation, it's within expected bounds for a UI component. The code is minified but not maliciously obfuscated, and interacts only with internal Google components." }
"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this; try{ _.Ng(_.Zqa); _.k("sOXFj"); var gv=function(){_.Xt.call(this)};_.K(gv,_.Xu);gv.Ca=_.Xu.Ca;gv.prototype.aa=function(a){return a()};_.$u(_.Yqa,gv); _.l(); _.k("oGtAuc"); _.Cza=new _.Af(_.Zqa); _.l(); _.k("q0xTif"); var xAa=function(a){var b=function(d){_.Vo(d)&&(_.Vo(d).Nc=null,_.xv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])};_.Iv=function(a,b){a&&_.Cf.jc().register(a,b)};_.Jv=function(a){_.wv.call(this,a.La);var b=this,c=a.context.Uga;this.oa=c.Jr;this.jd=this.Pa=this.eb=this.Ba=null;this.Ma=a.Ea.Lc;this.Wa=a.Ea.dpa;a=this.oa.oa.then(function(d){b.Ba=d;d=b.oa.id.W6(d,b.oa.getParams());b.eb=d.variant});c=c.W1.then(function(d){b.Pa=d});this.Fa=this.Fa.bind(this);this.ej(_.Oi([a,c]))};_.K(_.Jv,_.wv);_.Jv.Ca=function(){return{context:{Uga:"FVxLkf"},Ea:{Lc:_.ev,component:_.Cv,dpa:_.Cza}}};_.Jv.prototype.aa=function(){return""};_.Jv.prototype.Da=function(){return!1}; _.Jv.prototype.Lp=function(){return this.oa};var Kv=function(a){var b=_.Gb(a.Pa,a.Fa);b={hb:a.oa.getParams(),Ufa:a.oa.Da,ab:{y6:!1,hb:a.oa.getParams(),Nb:a.oa.id.Fa,EP:a.oa.mJ,Ib:a.aa(),jsdata:_.Hb(a.Ba)},qc:b,xua:a.eb};Object.assign(b,a.Ba\|\|{});Object.assign(b,a.oa.da);Object.assign(b.ab,a.oa.da);return b};_.Jv.prototype.Fa=function(a,b){return Array.isArray(a)?a.length!=1\|\|(b=this.oa.id.getChildren()[b],b&&b.ny)?_.Rf(a,function(c){return Kv(c)}):Kv(a[0]):Kv(a)};_.Jv.prototype.fa=function(){return null}; var yAa=function(a){var b=a.da();return function(){var c=_.lb.apply(0,arguments);return a.Wa.aa(function(){return b.apply(null,_.Nh(c))})}},zAa=function(a){var b=a.fa();return b?function(){var c=_.lb.apply(0,arguments);return a.Wa.aa(function(){return b.apply(null,_.Nh(c))})}:b};_.Jv.prototype.render=function(){var a=Kv(this),b=yAa(this);b=this.Da()?AAa(this,b,a):this.Qa.Bc(b,a);this.fa()&&(a=BAa(this,a),b.appendChild(a));(a=this.oa.id.YU())&&a.length>0&&a.forEach(function(){});this.oa.aa(b);return b}; var BAa=function(a,b){var c=a.dom.aa.aa.createElement("view-header");c.style.display="none";var d=zAa(a);b={hb:a.oa.getParams()};a.Da()?a.Ma.nE(c,d,b):(a=a.Qa.YP(d,b),c.appendChild(a));return c},AAa=function(a,b,c){var d=a.dom.aa.aa.createElement("div");a.Ma.nE(d,b,c);return d.childNodes.length==1?d.firstChild:d};_.Jv.prototype.cX=function(a){var b=Kv(this),c=yAa(this);xAa(a);this.Ma.Uk(a,c,b);this.Lp().aa(a);this.fa()&&(b=BAa(this,b),b=(new _.Ep(b)).Lb(),_.sg(_.vg(a).body,_.wAa,b))};_.Iv(_.Hv,_.Jv); _.l(); _.YC=function(a){var b=_.D,c=_.vk(a.Ed,15);a=_.U("O",c!=null?c:null)(null,a);return b("<title>"+_.uq(a)+"</title>")}; _.T("La","",0,function(){return _.WC()}); _.T("La","",1,function(a){return a.x6?_.WC():""}); _.k("ZZ4WUe"); var gXa=function(a,b){var c=a.hb,d=_.D;a=a.ab;var e=_.D,f=(0,_.D)(""+_.N(_.qsa())),g=(0,_.D)(""+_.Vq({text:"",jsname:"H5iMZd"},b));c={x6:_.qk(c,1,!0)};c=_.U("La")(c,b);return d(_.RE({ab:a,jscontroller:"eVCnO",jsaction:"jiqeKb:UHZ0U;rcuQ6b:WYd",content:e(""+_.SE({title:"Something went wrong",subtitle:f,fd:g,Gd:c},b))},b))},hXa=function(a,b){return(0,_.D)(_.YC(b))},TE=function(a){_.Jv.call(this,a.La)};_.K(TE,_.Jv);TE.Ca=_.Jv.Ca;TE.prototype.aa=function(){return"ZZ4WUe"};TE.prototype.da=function(){return gXa}; TE.prototype.fa=function(){return hXa};_.Iv(_.lGa,TE);_.qv.ZZ4WUe=_.nGa; _.l(); }catch(e){_._DumpException(e)} }).call(this,this.default_AccountsSignInUi); // Google Inc.
URL: https://www.gstatic.com/_/mss/boq-identity/_/js/k=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be legitimate Google sign-in UI code with encryption key handling. While it includes sensitive operations (encryption key management), it's from a trusted source (Google Inc.), uses strict mode, and implements standard security practices. The code is minified but not maliciously obfuscated, and operations are contained within a controlled scope." }
"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this; try{ _.k("iAskyc"); _.eZ=function(a){_.Xt.call(this);this.window=a.Ea.window.get();this.kc=a.Ea.kc};_.K(_.eZ,_.Xu);_.eZ.Ca=function(){return{Ea:{window:_.dv,kc:_.qF}}};_.eZ.prototype.nq=function(){};_.eZ.prototype.addEncryptionRecoveryMethod=function(){};_.fZ=function(a){return(a==null?void 0:a.aq)\|\|function(){}};_.gZ=function(a){return(a==null?void 0:a.l5)\|\|function(){}};_.tWb=function(a){return(a==null?void 0:a.Sq)\|\|function(){}}; _.uWb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.vWb=function(a){setTimeout(function(){throw a;},0)};_.eZ.prototype.OQ=function(){return!0};_.hZ=function(a,b,c,d){c=c===void 0?"":c;a=a.kc;var e=a.HQ,f=new _.iF;b=_.Xj(f,7,_.CYa,b==null?b:_.Rc(b));e.call(a,305,b,d,void 0,void 0,_.mVb(new _.hF,_.lVb(new _.wY,c)))};_.$u(_.Eo,_.eZ); _.l(); _.k("ziXSP"); var AZ=function(a){_.eZ.call(this,a.La)};_.K(AZ,_.eZ);AZ.Ca=_.eZ.Ca;AZ.prototype.nq=function(a,b,c){var d;if((d=this.window.chrome)==null?0:d.setClientEncryptionKeys)_.fZ(c)(),this.window.chrome.setClientEncryptionKeys(_.tWb(c),a,b);else{var e;((e=this.window.chrome)==null?0:e.setSyncEncryptionKeys)?(_.fZ(c)(),d=gXb(b),b=b.get(_.qZ()),this.window.chrome.setSyncEncryptionKeys(_.tWb(c),a,d,b[b.length-1].epoch)):_.gZ(c)()}}; AZ.prototype.addEncryptionRecoveryMethod=function(a,b,c,d,e){if(!(b.length>0)\|\|b.includes(_.qZ())){var f;(f=this.window.chrome)!=null&&f.addTrustedSyncEncryptionRecoveryMethod?(_.fZ(e)(),this.window.chrome.addTrustedSyncEncryptionRecoveryMethod(_.tWb(e),a,_.rZ(c),d)):_.gZ(e)()}};AZ.prototype.OQ=function(){var a;return!((a=this.window.chrome)==null\|\|!a.setClientEncryptionKeys)};var gXb=function(a){return a.get(_.qZ()).map(function(b){return b.key})};_.$u(_.xMa,AZ); _.l(); }catch(e){_._DumpException(e)} }).call(this,this.default_AccountsSignInUi); // Google Inc.
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&os Model: Joe Sandbox AI	{ "brands": [ "Google" ] }

URL: https://www.gstatic.com/_/mss/boq-identity/_/js/k=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be legitimate Google sign-in UI code with standard performance monitoring and analytics. It contains typical telemetry collection (memory usage, navigation timing) and URL parsing functionality. The code is minified but not maliciously obfuscated, and interacts with expected domains. No high-risk behaviors like eval() or suspicious data exfiltration are present." }
"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this; try{ var NIa; _.PIa=function(){var a=NIa(_.Ie("xwAfE"),function(){return _.Ie("UUFaWc")}),b=NIa(_.Ie("xnI9P"),function(){return _.Ie("u4g7r")}),c,d,e,f;return(f=OIa)!=null?f:OIa=Object.freeze({isEnabled:function(g){return g===-1\|\|_.nf(_.Ie("iCzhFc"),!1)?!1:a.enabled\|\|b.enabled},environment:(c=_.kl(_.Ie("y2FhP")))!=null?c:void 0,TS:(d=_.kl(_.Ie("MUE6Ne")))!=null?d:void 0,Bt:(e=_.kl(_.Ie("cfb2h")))!=null?e:void 0,Wp:_.ml(_.Ie("yFnxrf"),-1),i2:_.tGa(_.Ie("fPDxwd")).map(function(g){return _.ml(g,0)}).filter(function(g){return g>0}), Z6:a,Wxa:b})};NIa=function(a,b){a=_.nf(a,!1);return{enabled:a,PX:a?_.Kd(_.nl(b(),_.Xz)):QIa()}};_.Xz=function(a){this.Ha=_.u(a)};_.K(_.Xz,_.v);var QIa=function(a){return function(){return _.nd(a)}}(_.Xz);var OIa; _.k("p3hmRc"); var yJa=function(a){a.Fa=!0;return a},zJa=function(a,b,c,d){this.transport=a;this.aa=b;this.da=c;this.environment=d;this.fa=Number(Date.now()).toString(36)+Math.random().toString(36).slice(2)};_.rA=function(){_.Xt.call(this);this.config=_.PIa();var a=this.config.Wp;this.config.isEnabled(a)&&(this.aa=AJa(this,a))};_.K(_.rA,_.Xu);_.rA.Ca=_.Xu.Ca;var AJa=function(a,b){var c=_.MIa().map(function(m){return _.wd(m)}),d,e=yJa(_.xJa(_.qA((new _.pA(b,_.vk(_.Me(),3,"0"))).fw(_.Rz(new _.Qz,a.config.i2)),(d=a.config.Bt)!=null?d:""),c)).build();switch(b){case 2082:var f=2;break;case 1884:f=1}var g;return new zJa(e,a.config.TS,f,(g=a.config.environment)!=null?g:"")};_.$u(_.uGa,_.rA); _.l(); var BJa=_.ea.URL,CJa,DJa,FJa,EJa;try{new BJa("http://example.com"),CJa=!0}catch(a){CJa=!1}DJa=CJa; FJa=function(a){var b=_.zl("A");try{_.Ae(b,_.fb(a));var c=b.protocol}catch(e){throw Error("Fd`"+a);}if(c===""\|\|c===":"\|\|c[c.length-1]!=":")throw Error("Fd`"+a);if(!EJa.has(c))throw Error("Fd`"+a);if(!b.hostname)throw Error("Fd`"+a);var d=b.href;a={href:d,protocol:b.protocol,username:"",password:"",hostname:b.hostname,pathname:"/"+b.pathname,search:b.search,hash:b.hash,toString:function(){return d}};EJa.get(b.protocol)===b.port?(a.host=a.hostname,a.port="",a.origin=a.protocol+"//"+a.hostname):(a.host= b.host,a.port=b.port,a.origin=a.protocol+"//"+a.hostname+":"+a.port);return a}; _.GJa=function(a){if(DJa){try{var b=new BJa(a)}catch(d){throw Error("Fd`"+a);}var c=EJa.get(b.protocol);if(!c)throw Error("Fd`"+a);if(!b.hostname)throw Error("Fd`"+a);b.origin=="null"&&(a={href:b.href,protocol:b.protocol,username:"",password:"",host:b.host,port:b.port,hostname:b.hostname,pathname:b.pathname,search:b.search,hash:b.hash},a.origin=c===b.port?b.protocol+"//"+b.hostname:b.protocol+"//"+b.hostname+":"+b.port,b=a)}else b=FJa(a);return b}; EJa=new Map([["http:","80"],["https:","443"],["ws:","80"],["wss:","443"],["ftp:","21"]]); _.k("LvGhrf"); var IJa=function(a){if(_.ea&&_.ea.performance&&_.ea.performance.memory){var b=_.ea.performance.memory;if(b){var c=new HJa;isNaN(b.jsHeapSizeLimit)\|\|_.Yz(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Yz(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Yz(c,3,Math.round(b.usedJSHeapSize).toString());_.ck(a,HJa,1,c)}}},LJa=function(a){if(JJa()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new sA;if(b=b[0]){switch(b.type){case "navigate":c.Vb(1); break;case "reload":c.Vb(2);break;case "back_forward":c.Vb(3);break;case "prerender":c.Vb(4);break;default:c.Vb(0)}var d=_.Gk(c,2,Math.round(b.startTime));d=_.Gk(d,3,Math.round(b.fetchStart));d=_.Gk(d,4,Math.round(b.domainLookupStart));d=_.Gk(d,5,Math.round(b.domainLookupEnd));d=_.Gk(d,6,Math.round(b.connectStart));d=_.Gk(d,7,Math.round(b.connectEnd));d=_.Gk(d,8,Math.round(b.requestStart));d=_.Gk(d,9,Math.round(b.responseStart));d=_.Gk(d,10,Math.round(b.responseEnd));var e=KJa(Math.round(b.domInteractive)); d=_.Gk(d,11,e);e=KJa(Math.round(b.domComplete));d=_.Gk(d,12,e);d=_.Gk(d,13,Math.round(b.loadEventStart));_.Gk(d,14,Math.round(b.loadEventEnd))}_.ck(a,sA,8,c)}}},KJa=fu
URL: https://www.gstatic.com/_/mss/boq-identity/_/js/k=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The code appears to be a legitimate Google authentication/sign-in UI implementation with standard networking and event handling. It includes expected features like XSRF protection, image loading for connectivity checks, and event listeners. While it uses some legacy practices and makes network requests, these are to Google domains and follow standard security patterns." }
"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this; try{ var Sua=function(a,b){this.da=a;this.fa=b;if(!c){var c=new _.cg("//www.google.com/images/cleardot.gif");_.Qm(c)}this.oa=c};_.h=Sua.prototype;_.h.jd=null;_.h.i0=1E4;_.h.lC=!1;_.h.XS=0;_.h.kM=null;_.h.dX=null;_.h.setTimeout=function(a){this.i0=a};_.h.start=function(){if(this.lC)throw Error("sc");this.lC=!0;this.XS=0;Tua(this)};_.h.stop=function(){Uua(this);this.lC=!1}; var Tua=function(a){a.XS++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.mn((0,_.Lg)(a.uJ,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.Lg)(a.uma,a),a.aa.onerror=(0,_.Lg)(a.tma,a),a.aa.onabort=(0,_.Lg)(a.sma,a),a.kM=_.mn(a.vma,a.i0,a),a.aa.src=String(a.oa))};_.h=Sua.prototype;_.h.uma=function(){this.uJ(!0)};_.h.tma=function(){this.uJ(!1)};_.h.sma=function(){this.uJ(!1)};_.h.vma=function(){this.uJ(!1)}; _.h.uJ=function(a){Uua(this);a?(this.lC=!1,this.da.call(this.fa,!0)):this.XS<=0?Tua(this):(this.lC=!1,this.da.call(this.fa,!1))};var Uua=function(a){a.aa&&(a.aa.onload=null,a.aa.onerror=null,a.aa.onabort=null,a.aa=null);a.kM&&(_.qn(a.kM),a.kM=null);a.dX&&(_.qn(a.dX),a.dX=null)};var Vua=function(){_.jn.call(this);this.aa=new Sua(this.yma,this);this.fa=51E3+Math.round(18E3*Math.random())};_.K(Vua,_.jn);_.h=Vua.prototype;_.h.yma=function(a){this.gW=Date.now();this.m5(a)};_.h.m5=function(a){this.X4=a;this.dispatchEvent("g")};_.h.jd=null;_.h.gW=0;_.h.X4=!0;var Wua=function(){this.aa=new Vua};_.Qe(_.Kn,Wua);_.Cb().Zk(function(a){var b=new Wua(a);_.Qp(a,_.Kn,b)}); _.k("byfTOb"); _.l(); _.k("lsjVmc"); var ws=function(a,b){b=b===void 0?!0:b;_.ni.call(this);this.Ba=a;this.da=new _.vs(this);b&&_.Xua(this);_.Gg(this,this.da)};_.xs=function(a){this.Ha=_.u(a,0,_.xs.messageId)};_.K(_.xs,_.v);_.xs.prototype.wy=_.ba(42);_.xs.messageId="xsrf";_.Yua=new _.al(48448350,_.xs);_.mi(ws,_.ni);ws.prototype.aa=null;ws.prototype.fa="at";ws.prototype.oa=null;_.Xua=function(a){var b=a.Ba.get(_.am);b.Ba.includes(a.da);b.oa(a.da)};ws.prototype.configure=function(a,b,c){this.aa=a;this.oa=b;c&&(this.fa=c)};_.vs=function(a){this.fa=a};_.mi(_.vs,_.Sf);_.vs.prototype.aa=_.ba(15);_.vs.prototype.da=_.ba(18);_.Qe(_.Ln,ws);_.Cb().Zk(function(a){var b=new ws(a,!1);_.Qp(a,_.Ln,b);b.configure(_.Ie("SNlM0e").string(null),_.Ie("S06Grb").string(null))}); _.l(); _.jf.prototype.dO=_.ca(6,function(){return this.ix});_.ys=function(a){var b=a.Vd().dO();if(b==null\|\|b<0)return null;var c=_.Kl[b];if(c){var d=Object.values(c)[0],e=_.sm(a,_.gm);c=_.sm(a,_.Pka);var f=_.sm(a,_.hm),g=_.sm(a,_.im),m=_.sm(a,_.Qka);b=_.Jl[b];a={Hn:d,Is:b?Object.values(b)[0]:void 0,request:a.mi(),nD:!!e};f&&(a.D1=f);g&&(a.E1=g);c&&(a.gB=c);m&&(a.gP=m);return a}return(c=_.Ll[b])?(c=Object.values(c)[0],b=_.Ml[b],{Hn:b?Object.values(b)[0]:void 0,lB:c,vW:a.mi()}):null}; _.Zua=function(a){return _.Cc(function(b){return b instanceof a&&!_.nc(b.Ha)})};_.$ua=function(a,b){a.sort(b\|\|_.Na)};_.zs=function(a,b){b in a&&delete a[b]};_.As=function(a,b){return a!==null&&b in a?a[b]:void 0};_.Un.prototype.xD=_.ca(21,function(){for(var a={},b=this.getAllResponseHeaders().split("\r\n"),c=0;c<b.length;c++)if(!_.jj(b[c])){var d=_.uka(b[c],":",1),e=d[0];d=d[1];if(typeof d==="string"){d=d.trim();var f=a[e]\|\|[];a[e]=f;f.push(d)}}return _.Gb(a,function(g){return g.join(", ")})}); _.Sn.prototype.Pm=_.ca(20,function(){return _.vk(this,3)});_.ava=function(a,b){return _.ve(a,2,b)};_.bva=function(a){var b=a.type;if(typeof b==="string")switch(b.toLowerCase()){case "checkbox":case "radio":return a.checked?a.value:null;case "select-one":return b=a.selectedIndex,b>=0?a.options[b].value:null;case "select-multiple":b=[];for(var c,d=0;c=a.options[d];d++)c.selected&&b.push(c.value);return b.length?b:null}return a.value!=null?a.value:null}; _.Bs=function(a){_.ni.call(this);this.pb=a;this.oa={}};_.mi(_.Bs,_.ni);var zva=[];_.Bs.prototype.listen=function(a,b,c,d){Array.isArray(b)\|\|(b&&(zva[0]=b.toString()),b=zva);for(var e=0;e<b.length;e++){var f=_.cn(a,b[e],c\|\|this.ha
URL: PDF document Model: Joe Sandbox AI	{ "brands": [ " ", " " ] }

URL: https://www.gstatic.com/_/mss/boq-identity/_/js/k=... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate Google Closure Library code with proper copyright notices and standard JavaScript practices. It contains initialization code and utility functions. While it includes some DOM manipulation capabilities, it's from a trusted source (Google) and follows strict security practices with 'use strict' declaration. No high-risk behaviors like eval() or suspicious data transmission are present." }
"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this; try{ _._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x24cc1989, 0x401a61, 0x1a70ff1, 0x91406f4, 0x3210, 0x0, 0x36000008, 0x22000000, 0xc3, ]); /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright 2024 Google, Inc SPDX-License-Identifier: MIT / / SPDX-License-Identifier: Apache-2.0 / / Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var baa,daa,Pa,Ua,gaa,iaa,jb,xaa,Eaa,Ab,Qaa,Saa,Vaa,Mb,Waa,Sb,Ub,Vb,Xaa,Yaa,Yb,Zaa,$aa,aba,bc,fba,hba,jc,kc,lc,lba,nba,oba,sba,uba,wba,xba,Bba,Eba,yba,Dba,Cba,Aba,zba,Fba,Iba,Lba,Nba,Oba,Kba,Qba,Mc,Sba,Yba,Zba,$ba,aca,bca,cca,Wba,Xba,eca,gca,jca,kca,lca,mca,nca,qca,sca,rca,uca,zd,xd,wca,vca,zca,yca,Bca,Dca,Eca,Gca,Id,Hca,Ica,Jca,Od,Pca,Qca,ae,Rca,Nd,Pd,Wca,le,ada,Vca,bda,dda,eda,hda,kda,lda,mda,pda,Hda,Jda,Oda,Ne,Qda,Oe,Rda,Tda,aea,mea,oea,pea,qea,rea,sea,tea,uea,xea,zea,Fea,Jea,Kea,Lea,Pea,Yea,Uea, afa,$ea,dg,dfa,gg,ffa,gfa,hfa,mfa,rfa,pfa,vfa,wfa,xfa,zfa,Afa,Bfa,Efa,Ffa,Lfa,Nfa,Ofa,Pfa,Qfa,Rfa,Sfa,Tfa,Vfa,Wfa,Yfa,bga,cga,ega,$g,ah,jga,lga,mga,nga,oga,qga,bh,sga,tga,dh,uga,vga,wga,zga,Aga,Bga,Ega,Fga,Gga,Iga,Mga,Qga,aaa,Vga,Ih,Wga,Kh,Xga,Yga,Zga,Oh,Qh,dha,iha,hha,ai,kha;_.ba=function(a){return function(){return aaa[a].apply(this,arguments)}};_.ca=function(a,b){return aaa[a]=b};_.ha=function(a){_.ea.setTimeout(function(){throw a;},0)};_.ia=function(a){a&&typeof a.dispose=="function"&&a.dispose()}; baa=function(a){for(var b=0,c=arguments.length;b<c;++b){var d=arguments[b];_.ka(d)?baa.apply(null,d):_.ia(d)}};_.la=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.la);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b);this.aa=!0};_.ma=function(a){return a[a.length-1]};_.na=function(a,b,c){for(var d=typeof a==="string"?a.split(""):a,e=a.length-1;e>=0;--e)e in d&&b.call(c,d[e],e,a)}; _.pa=function(a,b,c){b=_.oa(a,b,c);return b<0?null:typeof a==="string"?a.charAt(b):a[b]};_.oa=function(a,b,c){for(var d=a.length,e=typeof a==="string"?a.split(""):a,f=0;f<d;f++)if(f in e&&b.call(c,e[f],f,a))return f;return-1};_.ra=function(a,b){return(0,_.qa)(a,b)>=0};_.sa=function(a){if(!Array.isArray(a))for(var b=a.length-1;b>=0;b--)delete a[b];a.length=0};_.ta=function(a,b){_.ra(a,b)\|\|a.push(b)};_.ya=function(a,b){b=(0,_.qa)(a,b);var c;(c=b>=0)&&_.wa(a,b);return c}; _.wa=function(a,b){return Array.prototype.splice.call(a,b,1).length==1};_.Ca=function(a){return Array.prototype.concat.apply([],arguments)};_.Da=function(a){var b=a.length;if(b>0){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};_.Ea=function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(_.ka(d)){var e=a.length\|\|0,f=d.length\|\|0;a.length=e+f;for(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}}; _.caa=function(a,b,c){return arguments.length<=2?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)};_.Ka=function(a,b){b=b\|\|a;for(var c=0,d=0,e={};d<a.length;){var f=a[d++],g=_.Ha(f)?"o"+_.Ja(f):(typeof f).charAt(0)+f;Object.prototype.hasOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};_.La=function(a,b){if(!_.ka(a)\|\|!_.ka(b)\|\|a.length!=b.length)return!1;for(var c=a.length,d=daa,e=0;e<c;e++)if(!d(a[e],b[e]))return!1;return!0};_.Na=function(a,b){return a>b?1:a<b?-1:0}; daa=function(a,b){return a===b};_.eaa=function(a,b){var c={};(0,_.Oa)(a,function(d,e){c[b.call(void 0,d,e,a)]=d});return c};Pa=function(a){return a.toString().indexOf("`")===-1};_.Ta=function(a){return new _.Qa(_.Sa,a[0].toLowerCase())};Ua=function(a){return{valueOf:a}.valueOf()};gaa=function(){var a=null;if(!faa)return a;try{var b=function(c){return c};a=faa.createPolicy("AccountsSignInUi#html",{createHTML:b,createScript:b,createScr
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&os Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&os Model: Joe Sandbox AI	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&os Model: Joe Sandbox AI	{ "brands": [ "Google" ] }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&os Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&os Model: Joe Sandbox AI	{ "brands": [ "Google" ] }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=AcMMx-cul1LYvhcJkDFcgHTD30mG12a9C59CdlnJU4rE2aLxBsvhnaYZIZorkKqlqpJ7kZ4fDRBI5w&os Model: Joe Sandbox AI	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
23.47.168.24	Msig Insurance Europe.pdf	Get hash	malicious	Unknown	Browse
	zZeXr4mg0S.exe	Get hash	malicious	Lokibot	Browse
	BACS190027-01.pdf	Get hash	malicious	Unknown	Browse
	letter_olivia.law_mercerhole.co.uk.pdf	Get hash	malicious	HTMLPhisher	Browse
	Contract Proposal Documents.pdf	Get hash	malicious	Unknown	Browse
	invoice-6483728493.pdf	Get hash	malicious	Unknown	Browse
	Scan_6090402.pdf	Get hash	malicious	Unknown	Browse
	Company Booklet.lnk.download.lnk	Get hash	malicious	Ducktail	Browse
	FACTURE NON PAYEE.pdf	Get hash	malicious	Unknown	Browse
	Scan_6090402.pdf	Get hash	malicious	Unknown	Browse
239.255.255.250	https://www.drvhub.net	Get hash	malicious	Unknown	Browse
	https://sites.google.com/view/messageimportant09122024/accueil	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	https://www.drvhub.net	Get hash	malicious	Unknown	Browse
	https://sites.google.com/view/messageimportant09122024/accueil	Get hash	malicious	Unknown	Browse
	https://www.drvhub.net	Get hash	malicious	Unknown	Browse
	https://www.drvhub.net	Get hash	malicious	Unknown	Browse
	https://inboxsender.gxsearch.club/redir6/serial.php	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
52.6.155.20	payload8.pdf	Get hash	malicious	Unknown	Browse
	kingsmaker_4.ca.ps1	Get hash	malicious	Ducktail	Browse
	kingsmaker_6.ca.ps1	Get hash	malicious	Ducktail	Browse
	Demande de proposition du Accueil-Parrainage Outaouais.pdf	Get hash	malicious	Unknown	Browse
	cgoaudit Files.pdf	Get hash	malicious	Unknown	Browse
	method-statement-for-valve-installation_compress.pdf	Get hash	malicious	Unknown	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:EU:98ca4a25-984a-4511-9eb1-b7e6c5c56a12	Get hash	malicious	HTMLPhisher	Browse
	Fw INVOICE TEST-4 - INTUIT QUICKBOOKS - 399.00 USD.zip	Get hash	malicious	Unknown	Browse
	EXTERN Zahlungsbest#U00e4tigung.msg	Get hash	malicious	CVE-2024-21412	Browse
	Please_Docusign_this_document_July 2024_2471.pdf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
play.google.com	https://sites.google.com/view/messageimportant09122024/accueil	Get hash	malicious	Unknown	Browse	142.250.105.102
	https://sites.google.com/view/messageimportant09122024/accueil	Get hash	malicious	Unknown	Browse	172.217.19.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.217.19.238
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.217.19.238
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.217.19.206
	file.exe	Get hash	malicious	Amadey, CredGrabber, LummaC Stealer, Meduza Stealer, Stealc, Vidar	Browse	172.217.19.238
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.217.19.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.217.19.206
	https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=71STY9b6g0G2TUGL0emS8wWPU1E0zmFNnR9SsYf1SC9UREdRTE8xR1FQUFdYSk5WRlZXQ0ZJSlg4NS4u	Get hash	malicious	HTMLPhisher	Browse	172.217.19.206
	Distribution Agreement -21_12_48-December 6, 2024-be1f31b3a4b24beb88d27adfd723203e.pdf	Get hash	malicious	Unknown	Browse	172.217.19.238
www3.l.google.com	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.217.17.78
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.217.19.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.217.19.206
	file.exe	Get hash	malicious	Amadey, DCRat, DarkVision Rat, LummaC Stealer, Stealc, Vidar	Browse	142.250.181.142
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	142.250.181.142
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	142.250.181.142
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.217.19.206
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse	142.250.181.142
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.217.19.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	142.250.181.142

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-AESUS	Owari.sh4.elf	Get hash	malicious	Unknown	Browse	54.54.152.22
	Owari.arm.elf	Get hash	malicious	Unknown	Browse	54.32.27.106
	Owari.m68k.elf	Get hash	malicious	Unknown	Browse	34.204.5.251
	Owari.mpsl.elf	Get hash	malicious	Unknown	Browse	54.62.131.211
	0jNz7djbpp.exe	Get hash	malicious	Python Stealer	Browse	34.224.200.202
	7EznMik8Fw.exe	Get hash	malicious	Python Stealer	Browse	34.224.200.202
	MkWMm5piE5.exe	Get hash	malicious	Python Stealer	Browse	34.224.200.202
	okG6LaM2yP.exe	Get hash	malicious	Python Stealer	Browse	34.224.200.202
	JxrkpYVdCp.exe	Get hash	malicious	Python Stealer, Babadeda	Browse	34.224.200.202
	u08NgsGNym.exe	Get hash	malicious	Python Stealer	Browse	34.224.200.202
USDOSUS	main_ppc.elf	Get hash	malicious	Mirai	Browse	169.253.100.14
	main_x86.elf	Get hash	malicious	Mirai	Browse	169.253.124.33
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	169.253.33.15
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	169.253.124.10
	hPIF0APgJk.elf	Get hash	malicious	Unknown	Browse	169.252.158.224
	WNHEP77Hem.elf	Get hash	malicious	Unknown	Browse	169.252.158.236
	maFblK3Sr8.exe	Get hash	malicious	MyDoom	Browse	169.254.121.164
	47PFA9WHXN.exe	Get hash	malicious	Unknown	Browse	169.254.1.1
	http://www.fotoschuppen.net/	Get hash	malicious	Unknown	Browse	169.254.254.254
	OptimusSetup.exe	Get hash	malicious	Unknown	Browse	169.254.169.254
AKAMAI-ASUS	Owari.ppc.elf	Get hash	malicious	Unknown	Browse	104.82.208.161
	Owari.arm7.elf	Get hash	malicious	Mirai	Browse	72.247.212.137
	contents.exe	Get hash	malicious	Unknown	Browse	88.221.168.226
	Msig Insurance Europe.pdf	Get hash	malicious	Unknown	Browse	23.47.168.24
	cllmxIZWcQ.lnk	Get hash	malicious	Unknown	Browse	104.126.112.182
	Y5kEUsYDFr.exe	Get hash	malicious	Unknown	Browse	69.192.108.223
	sora.ppc.elf	Get hash	malicious	Mirai	Browse	84.53.135.142
	sora.mips.elf	Get hash	malicious	Mirai	Browse	104.84.160.234
	zZeXr4mg0S.exe	Get hash	malicious	Lokibot	Browse	23.47.168.24
	meerkat.mpsl.elf	Get hash	malicious	Mirai	Browse	104.116.11.255

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://www.drvhub.net	Get hash	malicious	Unknown	Browse	172.202.163.200 20.109.210.53 13.107.246.63 23.218.208.109 20.190.147.8
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 20.109.210.53 13.107.246.63 23.218.208.109 20.190.147.8
	https://www.drvhub.net	Get hash	malicious	Unknown	Browse	172.202.163.200 20.109.210.53 13.107.246.63 23.218.208.109 20.190.147.8
	https://sites.google.com/view/messageimportant09122024/accueil	Get hash	malicious	Unknown	Browse	172.202.163.200 20.109.210.53 13.107.246.63 23.218.208.109 20.190.147.8
	https://www.drvhub.net	Get hash	malicious	Unknown	Browse	172.202.163.200 20.109.210.53 13.107.246.63 23.218.208.109 20.190.147.8
	https://inboxsender.gxsearch.club/redir6/serial.php	Get hash	malicious	Unknown	Browse	172.202.163.200 20.109.210.53 13.107.246.63 23.218.208.109 20.190.147.8
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.202.163.200 20.109.210.53 13.107.246.63 23.218.208.109 20.190.147.8
	http://www.sbh.co.uk/	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	172.202.163.200 20.109.210.53 13.107.246.63 23.218.208.109 20.190.147.8
	IABrPTTzHo.exe	Get hash	malicious	Unknown	Browse	172.202.163.200 20.109.210.53 13.107.246.63 23.218.208.109 20.190.147.8
	http://pl14492706.effectivecpmcontent.com/b4/69/f0/b469f01aac640a5d89dbc7f68f092bba.js	Get hash	malicious	Unknown	Browse	172.202.163.200 20.109.210.53 13.107.246.63 23.218.208.109 20.190.147.8
6271f898ce5be7dd52b0fc260d0662b3	https://www.drvhub.net	Get hash	malicious	Unknown	Browse	150.171.27.10 2.16.158.187 20.223.36.55 2.16.158.83
	http://74.50.69.234/	Get hash	malicious	Unknown	Browse	150.171.27.10 2.16.158.187 20.223.36.55 2.16.158.83
	TRANSFERENCIA COMPROBANTES.lnk	Get hash	malicious	XenoRAT	Browse	150.171.27.10 2.16.158.187 20.223.36.55 2.16.158.83
	TRANSFERENCIA COMPROBANTES.lnk	Get hash	malicious	Unknown	Browse	150.171.27.10 2.16.158.187 20.223.36.55 2.16.158.83
	TRANSFERENCIA COMPROBANTES.lnk	Get hash	malicious	Unknown	Browse	150.171.27.10 2.16.158.187 20.223.36.55 2.16.158.83
	TRANSFERENCIA COMPROBANTES.lnk	Get hash	malicious	XenoRAT	Browse	150.171.27.10 2.16.158.187 20.223.36.55 2.16.158.83
	Transferencia.lnk	Get hash	malicious	XenoRAT	Browse	150.171.27.10 2.16.158.187 20.223.36.55 2.16.158.83
	Software_Tool.exe	Get hash	malicious	Unknown	Browse	150.171.27.10 2.16.158.187 20.223.36.55 2.16.158.83
	file.exe	Get hash	malicious	LummaC Stealer	Browse	150.171.27.10 2.16.158.187 20.223.36.55 2.16.158.83
	https://u48644047.ct.sendgrid.net/ls/click?upn=u001.3irT40U-2BlTtWVjPO1bgMkUPMRV7HMaBj-2FcZe3i1L5jDR7G1Ks0wP9YDqpnyIpxjZeIBaCeYZtGJgliwzSaJhwg-3D-3Dg90K_vPQ7onHR3f0o8KfOdBDFScd6URBvV6dRJTvL1FnCMOJp3bqQS0z8XYrmZvQsYKgv9M18uyN4otj9SHTsh0jVVVuVPoownVxKSao-2Fy-2F5zkA0ggrGoSd-2BVIld1mpIeS3DUcNNIvsq7yFDKM7DHebzUtokLUwZtE0mCsLz1Bm0-2B1LrSQGv4FTM1s6ckzg8R6Atlvbv-2BxwILwC6PQXifnpXLjP04W47PCxVuKYY5jyS-2FXWc-3D	Get hash	malicious	HTMLPhisher	Browse	150.171.27.10 2.16.158.187 20.223.36.55 2.16.158.83
3b5074b1b5d032e5620f69f9f700ff0e	9QwZPBACyK.exe	Get hash	malicious	Unknown	Browse	20.198.118.190
	https://www.drvhub.net	Get hash	malicious	Unknown	Browse	20.198.118.190
	http://www.sbh.co.uk/	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	20.198.118.190
	jKDBppzWTb.exe	Get hash	malicious	AgentTesla	Browse	20.198.118.190
	enyi.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	20.198.118.190
	Lenticels.exe	Get hash	malicious	Snake Keylogger	Browse	20.198.118.190
	http://74.50.69.234/	Get hash	malicious	Unknown	Browse	20.198.118.190
	proforma invoice.exe	Get hash	malicious	AgentTesla	Browse	20.198.118.190
	Request for Quotation New collaboration.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	20.198.118.190
	REQUEST FOR QUOATION AND PRICES 01306-24_pdf.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	20.198.118.190

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.189391586926299
Encrypted:	false
SSDEEP:	6:OJ2YVq2PN72nKuAl9OmbnIFUt8PJXgZmw+P8+IkwON72nKuAl9OmbjLJ:OMYVvVaHAahFUt8P1g/+P8+I5OaHAaSJ
MD5:	42F6AD4E2B49332F8EC5531D5999596B
SHA1:	F261F2DC620C8C0663F7E0BA0717EA2B9813764D
SHA-256:	F83A785D21E61855E8F4C944DEF3A4F438D9C4275C7CA1BDF6857AD8F44535B7
SHA-512:	AA3F230D796999B36F7CA4B4D28B9367CA9F2A3841FECB27AA0960850FD77E2B9F1B1658F2C8466E6606A6286827B5C2150B3EB44B1B6BCED6548945DCA23710
Malicious:	false
Reputation:	low
Preview:	2024/12/09-05:08:21.467 440 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/09-05:08:21.469 440 Recovering log #3.2024/12/09-05:08:21.470 440 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.189391586926299
Encrypted:	false
SSDEEP:	6:OJ2YVq2PN72nKuAl9OmbnIFUt8PJXgZmw+P8+IkwON72nKuAl9OmbjLJ:OMYVvVaHAahFUt8P1g/+P8+I5OaHAaSJ
MD5:	42F6AD4E2B49332F8EC5531D5999596B
SHA1:	F261F2DC620C8C0663F7E0BA0717EA2B9813764D
SHA-256:	F83A785D21E61855E8F4C944DEF3A4F438D9C4275C7CA1BDF6857AD8F44535B7
SHA-512:	AA3F230D796999B36F7CA4B4D28B9367CA9F2A3841FECB27AA0960850FD77E2B9F1B1658F2C8466E6606A6286827B5C2150B3EB44B1B6BCED6548945DCA23710
Malicious:	false
Reputation:	low
Preview:	2024/12/09-05:08:21.467 440 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/09-05:08:21.469 440 Recovering log #3.2024/12/09-05:08:21.470 440 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	342
Entropy (8bit):	5.125723984057497
Encrypted:	false
SSDEEP:	6:Oa4vlyq2PN72nKuAl9Ombzo2jMGIFUt8PxY11Zmw+P4cRkwON72nKuAl9Ombzo23:OnIvVaHAa8uFUt8PxC1/+P4s5OaHAa8z
MD5:	776A3D4A882E2EDF56B6F7FA9A876566
SHA1:	F645E10E1CC13E72443D3D3350944D83AEA7EA1C
SHA-256:	7E5590826108B9ED6071D6FF12968FE9343DC2A7890BBF0EEA979146FB93D832
SHA-512:	AEEC1E94D852A35F8265130F7CB175E3B51ECF1B968087B559EA7A5C249E3497066ACBB09016631A0CD16E6D36EF407C7A0DAD20B710560A5D77D3A6F414307C
Malicious:	false
Reputation:	low
Preview:	2024/12/09-05:08:21.519 1c50 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/09-05:08:21.521 1c50 Recovering log #3.2024/12/09-05:08:21.522 1c50 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	342
Entropy (8bit):	5.125723984057497
Encrypted:	false
SSDEEP:	6:Oa4vlyq2PN72nKuAl9Ombzo2jMGIFUt8PxY11Zmw+P4cRkwON72nKuAl9Ombzo23:OnIvVaHAa8uFUt8PxC1/+P4s5OaHAa8z
MD5:	776A3D4A882E2EDF56B6F7FA9A876566
SHA1:	F645E10E1CC13E72443D3D3350944D83AEA7EA1C
SHA-256:	7E5590826108B9ED6071D6FF12968FE9343DC2A7890BBF0EEA979146FB93D832
SHA-512:	AEEC1E94D852A35F8265130F7CB175E3B51ECF1B968087B559EA7A5C249E3497066ACBB09016631A0CD16E6D36EF407C7A0DAD20B710560A5D77D3A6F414307C
Malicious:	false
Preview:	2024/12/09-05:08:21.519 1c50 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/09-05:08:21.521 1c50 Recovering log #3.2024/12/09-05:08:21.522 1c50 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\499196d2-7a41-4f21-88c6-f8124d631879.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.967506845539302
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqYQGEsBdOg2Hrccaq3QYiubcP7E4TX:Y2sRdsfpdMHrf3QYhbA7n7
MD5:	3A3CE1992C4AD1F206DED22007E4BAC4
SHA1:	047D8AC1DC560AC0FA40525F98B794455F8EC929
SHA-256:	8A8EB8D328CD2A66588E384EFA9743F2106103D9CA9C1560A3E264DCCDA50232
SHA-512:	8CE10C6D90580F0BC1BD81C71FBDDEFBD6042C1FEF51F2ACBDB470041B33C9921A2E20F077E1C0CDE90B7DC76B901B9C9B6D2114BCDE6599FCAC016F45C2FBAE
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13378298913421260","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":586643},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.6","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.971824627296864
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq1ZhsBdOg2HIJnAcaq3QYiubcP7E4TX:Y2sRdswydMH0r3QYhbA7n7
MD5:	F326539D084B03D88254A74D6018F692
SHA1:	395B367E0E3554C3E78A8211F2D4B9F0F427CA87
SHA-256:	9379694CADD7846403E1B6975502326FBC619E0E3A873BBB7BC2C03EE3623007
SHA-512:	C8B5B1DD28605D3FCD9EF4A28BE1125137E6B3CB967F59CB2113656C8EFFFB3842115962DF8B25E9C3FA504F5E1B0A116D780326B1AB8062DC6AC0D80E7C3539
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341048370594526","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":151499},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.6","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF3f584f.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.971824627296864
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq1ZhsBdOg2HIJnAcaq3QYiubcP7E4TX:Y2sRdswydMH0r3QYhbA7n7
MD5:	F326539D084B03D88254A74D6018F692
SHA1:	395B367E0E3554C3E78A8211F2D4B9F0F427CA87
SHA-256:	9379694CADD7846403E1B6975502326FBC619E0E3A873BBB7BC2C03EE3623007
SHA-512:	C8B5B1DD28605D3FCD9EF4A28BE1125137E6B3CB967F59CB2113656C8EFFFB3842115962DF8B25E9C3FA504F5E1B0A116D780326B1AB8062DC6AC0D80E7C3539
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341048370594526","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":151499},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.6","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\ea758914-00fc-48c6-81b6-9544325e7c70.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.971824627296864
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq1ZhsBdOg2HIJnAcaq3QYiubcP7E4TX:Y2sRdswydMH0r3QYhbA7n7
MD5:	F326539D084B03D88254A74D6018F692
SHA1:	395B367E0E3554C3E78A8211F2D4B9F0F427CA87
SHA-256:	9379694CADD7846403E1B6975502326FBC619E0E3A873BBB7BC2C03EE3623007
SHA-512:	C8B5B1DD28605D3FCD9EF4A28BE1125137E6B3CB967F59CB2113656C8EFFFB3842115962DF8B25E9C3FA504F5E1B0A116D780326B1AB8062DC6AC0D80E7C3539
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341048370594526","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":151499},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.6","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	5859
Entropy (8bit):	5.246057780827268
Encrypted:	false
SSDEEP:	96:av+Nkkl+2GAouz3z3xfNLUS3vHp5OuDzUrMzh28qXAXFP74LRXOtW7ANwE7F6Kn7:av+Nkkl+2G1uz3zhfZUyPp5OuDzUwzh3
MD5:	98C6664610B229B0D77FEC7AA2AF2A2C
SHA1:	82DCA2C7DB683D87BE9B32921F51579FDA46DD3F
SHA-256:	3F80117AC205EB94869E6B5A0FF04C797FBD4E73FD29001E709E37D4210396AB
SHA-512:	75EB60406013463642FF27A89C3DA132C9F9880BEC9C2981B5B27B33AF3BE89F07F9AE7134589670A22C9C3C7843CBFA238D38E9A40CD5528B2308F9C799D8AC
Malicious:	false
Preview:	*...#................version.1..namespace-.X.Bo................next-map-id.1.Pnamespace-c291b69d_46f8_4b09_b54e_d05df8a1271d-https://rna-resource.acrobat.com/.0.>j.r................next-map-id.2.Snamespace-63b958a8_6f71_4fde_913c_6518794b9fd1-https://rna-v2-resource.acrobat.com/.1.J.4r................next-map-id.3.Snamespace-37e4c694_2a8d_4b31_9eb8_e65c5f9e16d5-https://rna-v2-resource.acrobat.com/.2..J.o................next-map-id.4.Pnamespace-d7426d52_3038_4cd9_b9cc_897232425509-https://rna-resource.acrobat.com/.3..M.^...............Pnamespace-c291b69d_46f8_4b09_b54e_d05df8a1271d-https://rna-resource.acrobat.com/..d.^...............Pnamespace-d7426d52_3038_4cd9_b9cc_897232425509-https://rna-resource.acrobat.com/.u..a...............Snamespace-63b958a8_6f71_4fde_913c_6518794b9fd1-https://rna-v2-resource.acrobat.com/..`aa...............Snamespace-37e4c694_2a8d_4b31_9eb8_e65c5f9e16d5-https://rna-v2-resource.acrobat.com/`v.Yo................next-map-id.5.Pnamespace-30587558_ed88_4bd8_adc0_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	5.1501625780506455
Encrypted:	false
SSDEEP:	6:O/UJcyq2PN72nKuAl9OmbzNMxIFUt8P/WK11Zmw+P/klRkwON72nKuAl9OmbzNMT:O/cRvVaHAa8jFUt8P/WK11/+P/g5OaHP
MD5:	9420F44788F64F339A67CAAC26211D66
SHA1:	5B5AE954C050FA94B12B34972267CFBD162B1E3A
SHA-256:	4655118BD2E8491D6F69E7BBEADE01E41D92DB53B73EFDAF6A32CFCC7A1AE03A
SHA-512:	DC0896F8E4541E06003D8CFD8DDED8EE59EBDA4321861153B6F2C965C441AE27254F8416D5EF8734F5DFD54B5A0B75E2F9E84BE7F8DB537B31893CA00E6244EE
Malicious:	false
Preview:	2024/12/09-05:08:21.841 1c50 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/09-05:08:21.843 1c50 Recovering log #3.2024/12/09-05:08:21.844 1c50 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	5.1501625780506455
Encrypted:	false
SSDEEP:	6:O/UJcyq2PN72nKuAl9OmbzNMxIFUt8P/WK11Zmw+P/klRkwON72nKuAl9OmbzNMT:O/cRvVaHAa8jFUt8P/WK11/+P/g5OaHP
MD5:	9420F44788F64F339A67CAAC26211D66
SHA1:	5B5AE954C050FA94B12B34972267CFBD162B1E3A
SHA-256:	4655118BD2E8491D6F69E7BBEADE01E41D92DB53B73EFDAF6A32CFCC7A1AE03A
SHA-512:	DC0896F8E4541E06003D8CFD8DDED8EE59EBDA4321861153B6F2C965C441AE27254F8416D5EF8734F5DFD54B5A0B75E2F9E84BE7F8DB537B31893CA00E6244EE
Malicious:	false
Preview:	2024/12/09-05:08:21.841 1c50 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/09-05:08:21.843 1c50 Recovering log #3.2024/12/09-05:08:21.844 1c50 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241209100825Z-194.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	1.4930569514874925
Encrypted:	false
SSDEEP:	96:SG9MMTNBnNil/ZTDu+qEgP+lU7MSMMMghMbB1+uGMM9VdMVMb4MMcMMiIOMVTO9Z:+Sxr+lN0x8PLWPI
MD5:	6B22B7EE608A9396143AC717773C5248
SHA1:	67168E419FBA7BA626B38BD099D7D0E57F56FC0E
SHA-256:	551F0520F4EE3441E5F4032742C6453897604722C4A1E79417917CA75D465FC0
SHA-512:	641EB8DA84A137E60D114338DF8A1F94A286614F89F6C5C3ABF8A136DA9B608375A4ABFB2FF12347DEC77C64A5F8D1CEB00AB3C34CDF5BD42B8597644620ECDF
Malicious:	false
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 11, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 11
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.444863072657831
Encrypted:	false
SSDEEP:	384:ye6ci5tRiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:mis3OazzU89UTTgUL
MD5:	76785267E7777EF9EE656A20D6916F0C
SHA1:	CC58244FBE4841687183DF2170AA569007ACBD6F
SHA-256:	C19CBBCE3E680C09525C65C22719AA06DF8FA5A07480B8F76EECDD2EC871CAB3
SHA-512:	69599E58F56408CBD868F085BD59E55C26BB96EFC6C4A71AD1E090B667A3ADACF03DCC24222587480B405C82690A47ACE24D94C4021A59F9367A6E8D0F713266
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7693169836449107
Encrypted:	false
SSDEEP:	48:7MHJioyVqRioyFyoy1C7oy16oy1ToKOioy1noy1AYoy1Wioy1oioykioyBoy1no7:7AJuqRejM8XjBimb9IVXEBodRBkb
MD5:	1E4F9D5AE00BD2EAF840B82582C36C5C
SHA1:	6AB58D98F8E38CA5D2487C21DA4618B13932F1D8
SHA-256:	C969814E5CCADE6DA623FC470A21A686D40F144B532CFDF42243838D781E1AE9
SHA-512:	69C8B511F7A5213F2F7DE9FA44DB5F772FBC15039A3DC13EA51A0EF27F2793569865E1E4C02E58F9F4E191CD33788D9FDD696606C4ED7319D6985EB35E1789F3
Malicious:	false
Preview:	.... .c.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b.r.l...t...}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.731398464046725
Encrypted:	false
SSDEEP:	3:kkFklh3WBl/tfllXlE/HT8kkIJ/tNNX8RolJuRdxLlGB9lQRYwpDdt:kKVT/eT86J7NMa8RdWBwRd
MD5:	9DEF33BC24D8511B3D48590035A195C1
SHA1:	8DF0E40293BC49EB81B7E87CDF70F68BCA2E934F
SHA-256:	844CEC1A17D15444A00E5D200FF874AB8DE6B24783C9302267061A8B03F80CCE
SHA-512:	D0251349796EAA6CF3361CE245310F4A1B601414DDF37D253394C2E78540FB071943F7CFDD79A1A0434E5CEE13E878AE16D541AD108A6CC6B1AFAA1E64F88D98
Malicious:	false
Preview:	p...... ..........M"J..(....................................................... ..........W....................o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6532

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.6532

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	227002
Entropy (8bit):	3.392780893644728
Encrypted:	false
SSDEEP:	1536:qKPC4iyzDtrh1cK3XEivK7VK/3AYvYwgF/rRoL+sn:XPCaJ/3AYvYwglFoL+sn
MD5:	265E3E1166312A864FB63291EA661C6A
SHA1:	80DFF3187FF929596EB22E1DB9021BAD6F97178C
SHA-256:	C13E08B1887A4E44DC39609D7234E8D732A6BC11313B55D6F4ECFB060CD87728
SHA-512:	48776A2BFE8F25E5601DCC0137F7AB103D5684517334B806E3ACF61683DD9B283828475FC85CE0CBE4E8AF88E6F8B25EED0A77640E2CFFF2CC73708726519AFA
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2145
Entropy (8bit):	5.071937699993352
Encrypted:	false
SSDEEP:	48:Yc/pOrY21a4hbtC3dci5WXjJ0vS/PbMa7:OB0tWTJDnbMo
MD5:	15767E85F68124B2C20E811D1ADA8CC3
SHA1:	ED7156EDCD0BD963D005AD14B795C001C6D15180
SHA-256:	BB1309EC79B0D1C63B63C50CD905023B02528C2F3FBC6871D68B5EC71523CDFB
SHA-512:	CCD37864DC199FDBBDEE292546737A51342BCCBD031ECD6D1B4EE7F6C8E594FCFDA668EB3DEA130AA5826A0D5EF2B8DDCFA1CF2831D46C435C6D1F7F4F115DFD
Malicious:	false
Preview:	{"all":[{"id":"TESTING","info":{"dg":"DG","sid":"TESTING"},"mimeType":"file","size":4,"ts":1733738904000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"380dd703fc581680761b4186c45e2d38","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1696488387000},{"id":"DC_FirstMile_Right_Sec_Surface","info":{"dg":"35166e54b6efd9393ba2006ee9cc09b6","sid":"DC_FirstMile_Right_Sec_Surface"},"mimeType":"file","size":294,"ts":1696488385000},{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"f776fac6300c02bf0731dc513183b5e8","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1250,"ts":1696488373000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"78cf3d8961acebfb4fcfb54de4ad804c","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1250,"ts":1696486847000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"4bd607a1e654cbca833e725de7ae4339","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1255,"ts":1696486847000},{"id":"DC_Reader_Edit_LHP_Banner"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 24, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 24
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.1465295782042673
Encrypted:	false
SSDEEP:	24:TLhx/XYKQvGJF7urs/MWkKxRZXcMRZXcMZgux3Fmu3n9u1oGuDyIX4uDyvuOudIz:TFl2GL7ms/p9Xc+XcGNFlRYIX2v3k0pD
MD5:	279A6ED8E9DB9714439D79089F7952DC
SHA1:	32CC32D2FBBCA19590DECA0C8F4039674C0F4F65
SHA-256:	71CADC093FB8ADA31297E2A1876DDCF66F0E104FABEA15C65612BE37A0409696
SHA-512:	538AE7884F881A6FC3C518C297CBF7706DDCE16DAA91BF3D5F5347781DA23F49A8D8139661C91BDC008B680CAD621B6AF5A41CDA407CB0AAEFB4CAC47E9CDA0F
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.5520624840015282
Encrypted:	false
SSDEEP:	24:7+tYMWkKxUXcMRZXcMZgux3Fmu3n9u1oGuDyIX4uDyvuOudIUudcHRuLuxDqLxxT:7MYpiXc+XcGNFlRYIX2vWqVl2GL7msJ
MD5:	EA9B32E30F21615924FC792D51815884
SHA1:	0DFC9F47AFB97FEBB4F065E077978348E6C86320
SHA-256:	D64453F447F4A8E263B6CDB9CF297A0237A82158A7A23039E1C21FD42C369C64
SHA-512:	537DD4F0FD043E9F4978709752C1BF25E43033B8B11C6ED1CF449BF50EA70F50AEBCF38F3A79638FF89550D018C793C442D37A80A6D4F1CB10CAE29E651A3188
Malicious:	false
Preview:	.... .c.....}.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................b..b.b.b.b.b.b.b.b.b.b.b.b.b..................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEggawpBP0Cy6GHCcRTimKsayG+PlYyu:6a6TZ44ADEgawT0Cy6Lc0L+PlK
MD5:	B96576BA04820984123E9171A1767611
SHA1:	B918FD27D4A299326F9275918EA66D74897E8200
SHA-256:	16E52DEA91CB1C67EA8A084CF04BA2777BD810991221C9AE171B31AA732C4E00
SHA-512:	94732907CD32BA9EC6530C5C10D3B181CEC18283AD44DD4DFF688B18F1E5B1305D18A9E062D362DA69769E441F3E15CB637BFED57135B7F382A124FBDB1B275C
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSIf277b.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5325285763919316
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K88hlAmfPElPwlYH:Qw946cPbiOxDlbYnuRKrLcl4lYH
MD5:	615F750A49136425B17A3204BD2972D9
SHA1:	832D131EC3DC435D482FBBB0E0C6BEE78CD380D4
SHA-256:	0DDBAEFE955C3D484BF893925346C52801AB1EEA95CDD9D24D3BCB918EF149DE
SHA-512:	703A838EB0A936576020043A0289733C5302605254440A827613235DFEDC33224ECC4AE660F813980854EC0DE252C9AA4145E007F15151A60723D833CB30E389
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .0.9./.1.2./.2.0.2.4. . .0.5.:.0.8.:.3.0. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-09 05-08-23-852.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.338264912747007
Encrypted:	false
SSDEEP:	384:lH4ZASLaTgKoBKkrNdOZTfUY9/B6u6AJ8dbBNrSVNspYiz5LkiTjgjQLhDydAY8s:kIb
MD5:	128A51060103D95314048C2F32A15C66
SHA1:	EEB64761BE485729CD12BF4FBF7F2A68BA1AD7DB
SHA-256:	601388D70DFB723E560FEA6AE08E5FEE8C1A980DF7DF9B6C10E1EC39705D4713
SHA-512:	55099B6F65D6EF41BC0C077BF810A13BA338C503974B4A5F2AA8EB286E1FCF49DF96318B1DA691296FB71AA8F2A2EA1406C4E86F219B40FB837F2E0BF208E677
Malicious:	false
Preview:	SessionID=e060408f-9833-415c-bd59-cc59ace6b516.1696488385066 Timestamp=2023-10-05T08:46:25:066+0200 ThreadID=6912 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=e060408f-9833-415c-bd59-cc59ace6b516.1696488385066 Timestamp=2023-10-05T08:46:25:066+0200 ThreadID=6912 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=e060408f-9833-415c-bd59-cc59ace6b516.1696488385066 Timestamp=2023-10-05T08:46:25:067+0200 ThreadID=6912 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=e060408f-9833-415c-bd59-cc59ace6b516.1696488385066 Timestamp=2023-10-05T08:46:25:067+0200 ThreadID=6912 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=e060408f-9833-415c-bd59-cc59ace6b516.1696488385066 Timestamp=2023-10-05T08:46:25:067+0200 ThreadID=6912 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	16603
Entropy (8bit):	5.334106742163597
Encrypted:	false
SSDEEP:	384:zisHU6V1890M/nfz0qr/75yyOR45qzP4aN0AqOg6gXOSK/oMXL1wsP6b6POQu7HD:t+Jj
MD5:	A941D7DB4394D5ED3068D057A5BFB3A3
SHA1:	1E0B2426E277994DEF36A746F985A89B0C339D5D
SHA-256:	BB700D0C0C67D1AE478E304F935A41030E578FF58AE2624C4DA7AF577C2C6689
SHA-512:	974BE7826FA7DEB8D603BA214F27341E34168676AF7B0F68551F097C8E194A1D78E33FCA4EC72AFD7EE914FA14C88FBECD63FF72430711B17023C1C23F4AB9B4
Malicious:	false
Preview:	SessionID=2f441ef2-aa1e-4098-a444-b27144877fab.1733738903865 Timestamp=2024-12-09T05:08:23:865-0500 ThreadID=4060 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=2f441ef2-aa1e-4098-a444-b27144877fab.1733738903865 Timestamp=2024-12-09T05:08:23:870-0500 ThreadID=4060 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=2f441ef2-aa1e-4098-a444-b27144877fab.1733738903865 Timestamp=2024-12-09T05:08:23:870-0500 ThreadID=4060 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=2f441ef2-aa1e-4098-a444-b27144877fab.1733738903865 Timestamp=2024-12-09T05:08:23:870-0500 ThreadID=4060 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=2f441ef2-aa1e-4098-a444-b27144877fab.1733738903865 Timestamp=2024-12-09T05:08:23:870-0500 ThreadID=4060 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.398616911721039
Encrypted:	false
SSDEEP:	192:acb4I3dcbPcbaIO4cbYcbqnIdjcb6acbaIewcbslacbULISwcb26:V3fOCIdJDeOlU8So6
MD5:	93DBBCCDA893D1208BB12C6BC509CE01
SHA1:	4FF18000FEA94E4E52DE6358F3CA7854FBADDD80
SHA-256:	7FDFCA8D0C7F93948C8B578D7017591A556F3EA2C9E62CC221F8D83080BA45B2
SHA-512:	B0892BC59D6C003381D9B7DBF5D1B61CF23DEB4594C8255F68D1CC225E01F534DD9238CA643D9E98FED2FCE296FBFD77DDF05C782A521CC7406392068CCB14D0
Malicious:	false
Preview:	05-10-2023 08:20:22:.---2---..05-10-2023 08:20:22:.AcroNGL Integ ADC-4240758 : *************************************..05-10-2023 08:20:22:.AcroNGL Integ ADC-4240758 : ***********************************..05-10-2023 08:20:22:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..05-10-2023 08:20:22:.AcroNGL Integ ADC-4240758 : Starting NGL..05-10-2023 08:20:22:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...05-10-2023 08:20:22:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..05-10-2023 08:20:22:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..05-10-2023 08:20:22:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..05-10-2023 08:20:22:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..05-10-2023 08:20:22:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..05-10-2023 08:20:22:.Closing File..05-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\90c1252d-6c2b-4764-9d6e-c5c428729edd.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\91f2c495-4b40-40c2-a7f8-e7b536afb607.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\e556d388-6659-4086-8c06-0a66170c473d.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/M7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZjZwYIGNPJe:RB3mlind9i4ufFXpAXkrfUs03WLaGZje
MD5:	716C2C392DCD15C95BBD760EEBABFCD0
SHA1:	4B4CE9C6AED6A7F809236B2DAFA9987CA886E603
SHA-256:	DD3E6CFC38DA1B30D5250B132388EF73536D00628267E7F9C7E21603388724D8
SHA-512:	E164702386F24FF72111A53DA48DC57866D10DAE50A21D4737B5687E149FF9D673729C5D2F2B8DA9EB76A2E5727A2AFCFA5DE6CC0EEEF7D6EBADE784385460AF
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\eb1850c9-fadc-4a3c-94cf-444a2d13f251.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/gW8ZwYIGNPB07oYGZfPdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:4W8ZwZGbxYGZn3mlind9i4ufFXpAXkru
MD5:	CE6C2A8BCD4BB6551A15D0C266B4EE06
SHA1:	B75FBCFC15568638BBC06F877439FA96DCB09E07
SHA-256:	82705A9BB65F9BEA25AD9912A45926470BDA1CD49858E142634D8E7436CFC97E
SHA-512:	FA44F6210BC5E0F6AF127654CC4DC15AC1CE8A2F5B5BA2181A4CF17BAEDC3CEA14BBDD496D78CB8FADAA92F05ECDF17AAD65946500109DD4501A7BA24A3E6F60
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (722)
Category:	downloaded
Size (bytes):	3492
Entropy (8bit):	5.372083074521932
Encrypted:	false
SSDEEP:	48:o6Yydme0Ueem0YnXGUXGyX79i0grGB0ysF7OoYlCPk2fueIZdLOkTSrw:oDOLpm0uFRZUGmyo0cnWvTuw
MD5:	8761EB18A064547CC89C4853CD2A7262
SHA1:	6C8FD1E5E5888BCA54A26D7E1B6FE2576B985C51
SHA-256:	D99D59A6FB5015E45BBC3BD890E4069936664631BFE0CD7C63CD1FDEFCB2343A
SHA-512:	B36E039D4C6200A8207204BBE8D4EFF9D6817554C7BB48EBACCCA7C76B563377AA277EFEC6D7E343EDA73B3D5DBDE50F45F28EC78751DB6627BB1B6862E1C6D6
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Ng(_.Zqa);._.k("sOXFj");.var gv=function(){_.Xt.call(this)};_.K(gv,_.Xu);gv.Ca=_.Xu.Ca;gv.prototype.aa=function(a){return a()};_.$u(_.Yqa,gv);._.l();._.k("oGtAuc");._.Cza=new _.Af(_.Zqa);._.l();._.k("q0xTif");.var xAa=function(a){var b=function(d){_.Vo(d)&&(_.Vo(d).Nc=null,_.xv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])};_.Iv=function(a,b){a&&_.Cf.jc().register(a,b)};_.Jv=function(a){_.wv.call(this,a.La);var b=this,c=a.context.Uga;this.oa=c.Jr;this.jd=this.Pa=this.eb=this.Ba=null;this.Ma=a.Ea.Lc;this.Wa=a.Ea.dpa;a=this.oa.oa.then(function(d){b.Ba=d;d=b.oa.id.W6(d,b.oa.getParams());b.eb=d.variant});c=c.W1.then(function(d){b.Pa=d});this.Fa=this.Fa.bind(this);this.ej(_.Oi([a,c]))};_.K(_.Jv,_.wv);_.Jv.Ca=function(){return{context:{Uga:"FVxLkf"},Ea:{Lc:_.ev,component:_.Cv,dpa:_.Cza}}};_.Jv.prototype.aa=function(){ret

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (518)
Category:	dropped
Size (bytes):	778838
Entropy (8bit):	5.7915148400792615
Encrypted:	false
SSDEEP:	3072:7/dtBQLm8fWyKGoZyzgNx2BP5cw0msoSdwkKHU3nhPaKNs8P5rgP6Uvvi1wiOn6c:Px8fWQSx657KUkK6p5c6UcDe1zVZX
MD5:	FEBEE3BD380FC3960798B1928308408A
SHA1:	59930DDC16D7A8C610E9030BFA306865F8A55B21
SHA-256:	EEF906D80F071870D59A32059987BECEDCB17A852D9DFF0A50D6A68711097962
SHA-512:	8F450296417B9CFF39F291908BCC4865A88CCE852F277446F9074F4E0D7221F82BCEB7FB3BFA7664AE021A2FDC0FD9A6BD350CE872F4D9E2CF75ED9E78A6C92C
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x24cc1989, 0x401a61, 0x1a70ff1, 0x91406f4, 0x3210, 0x0, 0x36000008, 0x22000000, 0xc3, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Pa,Ua,gaa,iaa,jb,xaa,Eaa,Ab,Qaa,Saa,Vaa,Mb,Waa,Sb,Ub,Vb,Xaa,Yaa,Yb,Zaa,$aa,aba,bc,fba,hba,jc,kc,lc,lba,nba,oba,sba,uba,wba,xba,Bba,Eba,yba,Dba,Cba,Aba,zba,Fba,Iba,Lba,Nba,Oba,Kba,Qba,Mc,Sba,Yba,Zba,$ba,aca,bca,cca,Wba,Xba,eca,gca,jca,kca,lca,mca,nca,qca,sca,rca,uca,zd,xd,wca,vca,

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (761)
Category:	downloaded
Size (bytes):	1470
Entropy (8bit):	5.269357547653974
Encrypted:	false
SSDEEP:	24:kMYD7DrNuEOZ4NKKNL0YwzSh/cSQQ13HKo7MPZGbAxwGbZSFPVfOOWA3prGJ:o7DrAEOmwV1S3qWEZGbAxwGbZSJVzZrw
MD5:	E09635757542C838F9EA2DDAC72D5E0F
SHA1:	F324B989FC2057B1BF326B41B0745A67625B9D24
SHA-256:	03EE6D0BCC991399B0A9C07217CD484E0A23595E82056FB43B67727BFB1B4A55
SHA-512:	3F29C17C796910A0D4769DCFA55EE9F4D48690A3390A5E621EF0618CCDD98595E3CCA28FED239885AB0A97FFE885998E9B12C9A47666DE1479497957ACA196E4
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.i2a=new _.Af(_.En);._.l();._.k("P6sQOc");.var o2a=!!(_.hi[0]>>28&1);var q2a=function(a,b,c,d,e){this.fa=a;this.Ba=b;this.oa=c;this.Da=d;this.Fa=e;this.aa=0;this.da=p2a(this)},r2a=function(a){var b={};_.Oa(a.ZU(),function(e){b[e]=!0});var c=a.KU(),d=a.SU();return new q2a(a.UR(),c.aa()1E3,a.oU(),d.aa()1E3,b)},p2a=function(a){return Math.random()Math.min(a.BaMath.pow(a.oa,a.aa),a.Da)},s2a=function(a,b){return a.aa>=a.fa?!1:b!=null?!!a.Fa[b]:!0};var t2a=function(a){_.Xt.call(this);this.da=a.Ea.LX;this.fa=a.Ea.metadata;a=a.Ea.Dja;this.fetch=a.fetch.bind(a)};_.K(t2a,_.Xu);t2a.Ca=function(){return{Ea:{LX:_.l2a,metadata:_.i2a,Dja:_.X1a}}};t2a.prototype.aa=function(a,b){if(this.fa.getType(a.Vd())!==1)return _.Pn(a);var c=this.da.eX;return(c=c?r2a(c):null)&&s2a(c)?_.Aza(a,u2a(this,a,b,c)):_.Pn(a)};.var u2a=function(a,b,c,d){return c.then(function(e){return e},funct

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2768)
Category:	downloaded
Size (bytes):	21434
Entropy (8bit):	5.420916288066369
Encrypted:	false
SSDEEP:	384:ZfQwYyxEZiPTuu4q5oaTm1Khf8MswPU8o0SIpYLOkng/PVMA1ZjqJDLA:ZfQwFxE+Tuu4q5oaT/f8Mswc8o0bpkWf
MD5:	A50F25F3558A48C97AC10BC122D08631
SHA1:	AFDF7068C22087084FA077CFF79078A781AA0365
SHA-256:	B3F402942E0BDCCCADE3DDE8FCC066AAC386F47A9A58ABCC47385DF60C7D9D8D
SHA-512:	3DAB9C81A4E85E0DA17EE88B9F574880571E5964F94BC31F5947533C269E4084FC4F77C9C8D40E55CE62C945B834672C3560E71EEBFB3E185E19881E842CE429
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=p3hmRc,LvGhrf,RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var NIa;._.PIa=function(){var a=NIa(_.Ie("xwAfE"),function(){return _.Ie("UUFaWc")}),b=NIa(_.Ie("xnI9P"),function(){return _.Ie("u4g7r")}),c,d,e,f;return(f=OIa)!=null?f:OIa=Object.freeze({isEnabled:function(g){return g===-1\|\|_.nf(_.Ie("iCzhFc"),!1)?!1:a.enabled\|\|b.enabled},environment:(c=_.kl(_.Ie("y2FhP")))!=null?c:void 0,TS:(d=_.kl(_.Ie("MUE6Ne")))!=null?d:void 0,Bt:(e=_.kl(_.Ie("cfb2h")))!=null?e:void 0,Wp:_.ml(_.Ie("yFnxrf"),-1),i2:_.tGa(_.Ie("fPDxwd")).map(function(g){return _.ml(g,0)}).filter(function(g){return g>0}),.Z6:a,Wxa:b})};NIa=function(a,b){a=_.nf(a,!1);return{enabled:a,PX:a?_.Kd(_.nl(b(),_.Xz)):QIa()}};_.Xz=function(a){this.Ha=_.u(a)};_.K(_.Xz,_.v);var QIa=function(a){return function(){return _.nd(a)}}(_.Xz);var OIa;._.k("p3hmRc");.var yJa=function(a){a.Fa=!0;return a},zJa=function(a,b,c,d){this.transport=a;this.aa=b;this.da=c;this.environment=d;this.fa=Number

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	dropped
Size (bytes):	708867
Entropy (8bit):	5.592765027486603
Encrypted:	false
SSDEEP:	6144:TnrlGrRzL/FN/F9X5WxUsjzVEN+JW3kuaxSejqWzbA+o05lupJKPMlnoV4HYv:TBGdzL/FN/FlpZuSejqWXVp
MD5:	2B03466D8AD546F6D03ED3CCD674F081
SHA1:	2FE48B00EA939E47209B1A277B0630DC6DB9C70E
SHA-256:	CEB9F4BF5E8CED8C3FC53FF79CDB62F5A832D712B47930C546C4412B1CA18469
SHA-512:	8C046D7F4355C0EA0CBE91824D6CFF2D81D6F84502B09C9C596DE99E649697BEC99E12412815B22052CFC4F71A9F20958EA9ED787933C4C9145A44E67457942D
Malicious:	false
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	33469
Entropy (8bit):	5.395821579200296
Encrypted:	false
SSDEEP:	768:YZRPxAbRiJI+WhSXlnoZSQAenNKnCts4bheoi7a7W4udMUZgJ:YZPlnoxNKnCtss+OfD
MD5:	D416F54668CFD497178784ABEF5553C5
SHA1:	A5481D1E1566DCFD59BA7813BD3FEDE1F001CEBF
SHA-256:	73BA641A8114D56C7A8E1F6B75E2750D66D22C17F02820AADC6CB48EE2E5B71C
SHA-512:	784F16A57CF5B0C17B52D8F36317B2EFC7F772A76E5847DD91D3546CE485324B875DCEF74D6F901A9D48641947FBF869A3A76E253CACAA3D86784566197F443B
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Sua=function(a,b){this.da=a;this.fa=b;if(!c){var c=new _.cg("//www.google.com/images/cleardot.gif");_.Qm(c)}this.oa=c};_.h=Sua.prototype;_.h.jd=null;_.h.i0=1E4;_.h.lC=!1;_.h.XS=0;_.h.kM=null;_.h.dX=null;_.h.setTimeout=function(a){this.i0=a};_.h.start=function(){if(this.lC)throw Error("sc");this.lC=!0;this.XS=0;Tua(this)};_.h.stop=function(){Uua(this);this.lC=!1};.var Tua=function(a){a.XS++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.mn((0,_.Lg)(a.uJ,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.Lg)(a.uma,a),a.aa.onerror=(0,_.Lg)(a.tma,a),a.aa.onabort=(0,_.Lg)(a.sma,a),a.kM=_.mn(a.vma,a.i0,a),a.aa.src=String(a.oa))};_.h=Sua.prototype;_.h.uma=function(){this.uJ(!0)};_.h.tma=function(){this.uJ(!1)};_.h.sma=function(){this.uJ(!1)};_.h.vma=function(){this.uJ(!1)};._.h.uJ=function(a){Uua(this);a?(this.lC=!1,this.da.call(this.fa,!0)):this.XS<=0?Tua(this):(this.lC=!1,

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (469)
Category:	downloaded
Size (bytes):	2028
Entropy (8bit):	5.291191440678704
Encrypted:	false
SSDEEP:	48:o7Y081jEDL3AouFdOm2cJ9ChlO77O90if03i7/rsJB2/brw:ocZ1wLjuFdP2cPCgy90kf7c8/Hw
MD5:	64186F222BC81CB7F86AF8F50E7C19FB
SHA1:	1447865C6D30534BE0BDBDA38DD15EE038FB5D1A
SHA-256:	EBC4E52CEC3D96374736FC7350CF15E98231E95CAE2D933185F438B948C83E25
SHA-512:	2BE94B8534AF2FDD6ED4384F7FC184505A3294ACCD72ADDBEAB0F4AE52398225B7880A58888BB46DD2A0D68CBD76570A8401BCEDF11AE9A3F283B0A53AFBA46D
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,q0xTif,qPYxq,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.eZ=function(a){_.Xt.call(this);this.window=a.Ea.window.get();this.kc=a.Ea.kc};_.K(_.eZ,_.Xu);_.eZ.Ca=function(){return{Ea:{window:_.dv,kc:_.qF}}};_.eZ.prototype.nq=function(){};_.eZ.prototype.addEncryptionRecoveryMethod=function(){};_.fZ=function(a){return(a==null?void 0:a.aq)\|\|function(){}};_.gZ=function(a){return(a==null?void 0:a.l5)\|\|function(){}};_.tWb=function(a){return(a==null?void 0:a.Sq)\|\|function(){}};._.uWb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.vWb=function(a){setTimeout(function(){throw a;},0)};_.eZ.prototype.OQ=function(){return!0};_.hZ=function(a,b,c,d){c=c===void 0?"":c;a=a.kc;var e=a.HQ,f=new _.iF;b=_.Xj(f,7,_.CYa,b==null?b:_.Rc(b));e.call(a,305,b,d,void 0,void 0,_.mVb(new _.hF,_.lVb(new _.wY,c)))};_.$

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3464
Entropy (8bit):	5.529918689437186
Encrypted:	false
SSDEEP:	96:oBWZKGhe/W+qPEsiZo5GF5tViJknaqZHB26WPUX9r0eew:zZThe/lPzVZh2bMXxz
MD5:	2FB0B8EFABBE22EE459F7B520E3EF289
SHA1:	E39F3587D826D5AC62E790E88DBA4FBDBC68B871
SHA-256:	7915E57CD771AD759D0A4BF835815844C9462AA086451A5CDFA70F8DD166C9C9
SHA-512:	F0E010E05751477FBECBDFF30EBC16151F11B8E8FB347770984AFF0AF00ACC14D3FD6A4560109C516BD76496003529F394A3D454FDDEE8C13DFF3BA586B67905
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,q0xTif,qPYxq,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var hza=function(){var a=_.Me();return _.vk(a,1)},Ou=function(a){this.Ha=_.u(a,0,Ou.messageId)};_.K(Ou,_.v);Ou.prototype.Ga=function(){return _.hk(this,1)};Ou.prototype.Ta=function(a){return _.Fk(this,1,a)};Ou.messageId="f.bo";var Pu=function(){_.jn.call(this)};_.K(Pu,_.jn);Pu.prototype.Id=function(){this.NV=!1;iza(this);_.jn.prototype.Id.call(this)};Pu.prototype.aa=function(){jza(this);if(this.dF)return kza(this),!1;if(!this.VX)return Qu(this),!0;this.dispatchEvent("p");if(!this.dS)return Qu(this),!0;this.tP?(this.dispatchEvent("r"),Qu(this)):kza(this);return!1};.var lza=function(a){var b=new _.cg(a.X6);a.aT!=null&&_.fg(b,"authuser",a.aT);return b},kza=function(a){a.dF=!0;var b=lza(a),c="rt=r&f_uid="+_.dl(a.dS);_.Wn(b,(0,_.Lg)(a.fa,a),"POST",c)};.Pu.prototype.fa=function(a){a=a.target;jza(this);if(_.Zn(a)){this.XM=0;if(this.tP)this.dF=!1,this.dispatchEvent("r"

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (722)
Category:	dropped
Size (bytes):	3492
Entropy (8bit):	5.372083074521932
Encrypted:	false
SSDEEP:	48:o6Yydme0Ueem0YnXGUXGyX79i0grGB0ysF7OoYlCPk2fueIZdLOkTSrw:oDOLpm0uFRZUGmyo0cnWvTuw
MD5:	8761EB18A064547CC89C4853CD2A7262
SHA1:	6C8FD1E5E5888BCA54A26D7E1B6FE2576B985C51
SHA-256:	D99D59A6FB5015E45BBC3BD890E4069936664631BFE0CD7C63CD1FDEFCB2343A
SHA-512:	B36E039D4C6200A8207204BBE8D4EFF9D6817554C7BB48EBACCCA7C76B563377AA277EFEC6D7E343EDA73B3D5DBDE50F45F28EC78751DB6627BB1B6862E1C6D6
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Ng(_.Zqa);._.k("sOXFj");.var gv=function(){_.Xt.call(this)};_.K(gv,_.Xu);gv.Ca=_.Xu.Ca;gv.prototype.aa=function(a){return a()};_.$u(_.Yqa,gv);._.l();._.k("oGtAuc");._.Cza=new _.Af(_.Zqa);._.l();._.k("q0xTif");.var xAa=function(a){var b=function(d){_.Vo(d)&&(_.Vo(d).Nc=null,_.xv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])};_.Iv=function(a,b){a&&_.Cf.jc().register(a,b)};_.Jv=function(a){_.wv.call(this,a.La);var b=this,c=a.context.Uga;this.oa=c.Jr;this.jd=this.Pa=this.eb=this.Ba=null;this.Ma=a.Ea.Lc;this.Wa=a.Ea.dpa;a=this.oa.oa.then(function(d){b.Ba=d;d=b.oa.id.W6(d,b.oa.getParams());b.eb=d.variant});c=c.W1.then(function(d){b.Pa=d});this.Fa=this.Fa.bind(this);this.ej(_.Oi([a,c]))};_.K(_.Jv,_.wv);_.Jv.Ca=function(){return{context:{Uga:"FVxLkf"},Ea:{Lc:_.ev,component:_.Cv,dpa:_.Cza}}};_.Jv.prototype.aa=function(){ret

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (388)
Category:	dropped
Size (bytes):	1600
Entropy (8bit):	5.247229270443317
Encrypted:	false
SSDEEP:	24:kMYD7OMKu41UNSltNuZuMxZzKTBuVDD8lU5/6fuRUuwZxUZAuRYAVj5EW6y/3DUT:o7T2Vl2YBSDBRjMxIFdFn7DUvbOrw
MD5:	0B9B70A4EE2DDE5E7BF9DB6383E7CD4D
SHA1:	A7DA1CBC0FBD21470EC5E9D235A41DB70BE3793D
SHA-256:	C5ADDA6E5DDCEA82A16A7BCC8816F8CD3ECB06463FA4E267CEBA714E21C5EB29
SHA-512:	9D517432EAF2A564A8C10450FF01FEE8E47B22D8BDD34758361942EF50EB33DA0DE491ED8E1311E93639AF801CBEBD64E873F6F9D0B1E01A348547956B2D993B
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Ng(_.qma);_.YA=function(a){_.Xt.call(this);this.aa=a.Ya.cache};_.K(_.YA,_.Xu);_.YA.Ca=function(){return{Ya:{cache:_.Pt}}};_.YA.prototype.execute=function(a){_.Gb(a,function(b){var c;_.kf(b)&&(c=b.jb.jc(b.ob));c&&this.aa.fJ(c)},this);return{}};_.$u(_.wma,_.YA);._.l();._.k("ZDZcre");.var a3a=function(a){_.Xt.call(this);this.aa=_.fH();this.Cn=a.Ea.Cn;this.d6=a.Ea.metadata};_.K(a3a,_.Xu);a3a.Ca=function(){return{Ea:{Cn:_.hH,metadata:_.i2a}}};a3a.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Gb(a,function(c){var d=b.d6.getType(c.Vd())===2?b.Cn.Ob(c):b.Cn.fetch(c);return _.sm(c,_.iH)?d.then(function(e){return _.Kd(e)}):d},this)};_.$u(_.Bma,a3a);._.l();._.k("K5nYTd");._.h2a=new _.Af(_.xma);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var m2a=function(a){_.Xt.call(this);this.aa=a.Ea.dT};_.K(m2a,_.Xu);m2a.Ca=function(){ret

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	downloaded
Size (bytes):	708867
Entropy (8bit):	5.592765027486603
Encrypted:	false
SSDEEP:	6144:TnrlGrRzL/FN/F9X5WxUsjzVEN+JW3kuaxSejqWzbA+o05lupJKPMlnoV4HYv:TBGdzL/FN/FlpZuSejqWXVp
MD5:	2B03466D8AD546F6D03ED3CCD674F081
SHA1:	2FE48B00EA939E47209B1A277B0630DC6DB9C70E
SHA-256:	CEB9F4BF5E8CED8C3FC53FF79CDB62F5A832D712B47930C546C4412B1CA18469
SHA-512:	8C046D7F4355C0EA0CBE91824D6CFF2D81D6F84502B09C9C596DE99E649697BEC99E12412815B22052CFC4F71A9F20958EA9ED787933C4C9145A44E67457942D
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,niKKCd,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,oqkvIf,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (761)
Category:	dropped
Size (bytes):	1470
Entropy (8bit):	5.269357547653974
Encrypted:	false
SSDEEP:	24:kMYD7DrNuEOZ4NKKNL0YwzSh/cSQQ13HKo7MPZGbAxwGbZSFPVfOOWA3prGJ:o7DrAEOmwV1S3qWEZGbAxwGbZSJVzZrw
MD5:	E09635757542C838F9EA2DDAC72D5E0F
SHA1:	F324B989FC2057B1BF326B41B0745A67625B9D24
SHA-256:	03EE6D0BCC991399B0A9C07217CD484E0A23595E82056FB43B67727BFB1B4A55
SHA-512:	3F29C17C796910A0D4769DCFA55EE9F4D48690A3390A5E621EF0618CCDD98595E3CCA28FED239885AB0A97FFE885998E9B12C9A47666DE1479497957ACA196E4
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.i2a=new _.Af(_.En);._.l();._.k("P6sQOc");.var o2a=!!(_.hi[0]>>28&1);var q2a=function(a,b,c,d,e){this.fa=a;this.Ba=b;this.oa=c;this.Da=d;this.Fa=e;this.aa=0;this.da=p2a(this)},r2a=function(a){var b={};_.Oa(a.ZU(),function(e){b[e]=!0});var c=a.KU(),d=a.SU();return new q2a(a.UR(),c.aa()1E3,a.oU(),d.aa()1E3,b)},p2a=function(a){return Math.random()Math.min(a.BaMath.pow(a.oa,a.aa),a.Da)},s2a=function(a,b){return a.aa>=a.fa?!1:b!=null?!!a.Fa[b]:!0};var t2a=function(a){_.Xt.call(this);this.da=a.Ea.LX;this.fa=a.Ea.metadata;a=a.Ea.Dja;this.fetch=a.fetch.bind(a)};_.K(t2a,_.Xu);t2a.Ca=function(){return{Ea:{LX:_.l2a,metadata:_.i2a,Dja:_.X1a}}};t2a.prototype.aa=function(a,b){if(this.fa.getType(a.Vd())!==1)return _.Pn(a);var c=this.da.eX;return(c=c?r2a(c):null)&&s2a(c)?_.Aza(a,u2a(this,a,b,c)):_.Pn(a)};.var u2a=function(a,b,c,d){return c.then(function(e){return e},funct

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9198
Entropy (8bit):	5.415214855258686
Encrypted:	false
SSDEEP:	192:NeiLP/tLiG45ej8rjZGOY86K3/OsyS/npikAV9jb:NeAliGYfY8H/1t/p8V9jb
MD5:	052274F3075EC3C088B670C1D7E0B2E7
SHA1:	5788B3535481B7C4E1F1178B3B13A33C833E1181
SHA-256:	DAC1F43BCA5E5DAEBB32F402289FC159AC3724DCC9CEF97DD6F75EFDFC39BEE8
SHA-512:	9705DEC7C1DE00F3F0E4877D96A06028E3A54E7EBFDB244FDEF7F2DA9A6B406669433D4C5F34AF25EFD73317C08073E4154809B6A80B4F8D2257BD16D9A35C25
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.SOa=_.z("SD8Jgb",[]);._.TW=function(a,b){if(typeof b==="string")a.zc(b);else if(b instanceof _.bq&&b.ia&&b.ia===_.C)b=_.Za(b.qw()),a.empty().append(b);else if(b instanceof _.Va)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("ng");};_.UW=function(a){var b=_.Gp(a,"[jsslot]");if(b.size()>0)return b;b=new _.Dp([_.zl("span")]);_.Hp(b,"jsslot","");a.empty().append(b);return b};_.GSb=function(a){return a===null\|\|typeof a==="string"&&_.jj(a)};._.k("SD8Jgb");._.ZW=function(a){_.W.call(this,a.La);this.Xa=a.controller.Xa;this.fd=a.controllers.fd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.Aa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.ZW,_.W);_.ZW.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.cw},header:{jsname:"tJHJj",ctor:_.cw},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	5046
Entropy (8bit):	5.306853582799112
Encrypted:	false
SSDEEP:	96:oMIgPsHTroaMC/sdg+x9MxJNzLm5y9jh1UXR4jDTvzy/uw:0EWTsoElx9awyoR4TbyD
MD5:	7A008C3A4D56183D3E9901E0AB46F37C
SHA1:	7C3138CA50FA1741F62DB4A697379C5BFB540534
SHA-256:	72CCF3AB6A11ED2F3235E2F9A695B52ADCBF4AF84505DCB3761E78E6305CD662
SHA-512:	26C81EE7AA3FC3F1B581EE9A8B9A5CA06887B8A75D381952C8450E58BB760DC9CCD60DBACD783DC9D46AEEF269C3D8489935C114EC27E936242DDAE05941BA80
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,q0xTif,qPYxq,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.BOa=_.z("wg1P6b",[_.KB,_.Go,_.No]);._.k("wg1P6b");.var f$a;f$a=_.Ph(["aria-"]);._.$I=function(a){_.W.call(this,a.La);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Wc=a.Ea.dg;this.eb=a.Ea.focus;this.Lc=a.Ea.Lc;this.fa=this.Lj();a=-1*parseInt(_.zp(this.Lj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.zp(this.Lj().el(),"marginBottom")\|\|"0",10);this.Wa={top:a,right:0,bottom:b,left:0};a=_.nf(this.getData("isMenuDynamic"),!1);b=_.nf(this.getData("isMenuHoisted"),!1);this.Fa=a?1:b?2:0;this.oa=!1;this.Da=1;this.Fa!==1&&(this.aa=this.Sa("U0exHf").children().Rc(0),this.ej(g$a(this,.this.aa.el())));_.SF(this.Aa())&&(a=this.Aa().el(),b=this.Le.bind(this),a.__soy_skip_handler=b)};_.K(_.$I,_.W);_.$I.Ca=function(){return{Ea:{dg:_.HF,focus:_.wF,Lc:_.ev}}};_.$I.prototype.kA=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.qB)?(a=a.data.qB,this.Da=a==="MOUSE"

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (388)
Category:	downloaded
Size (bytes):	1600
Entropy (8bit):	5.247229270443317
Encrypted:	false
SSDEEP:	24:kMYD7OMKu41UNSltNuZuMxZzKTBuVDD8lU5/6fuRUuwZxUZAuRYAVj5EW6y/3DUT:o7T2Vl2YBSDBRjMxIFdFn7DUvbOrw
MD5:	0B9B70A4EE2DDE5E7BF9DB6383E7CD4D
SHA1:	A7DA1CBC0FBD21470EC5E9D235A41DB70BE3793D
SHA-256:	C5ADDA6E5DDCEA82A16A7BCC8816F8CD3ECB06463FA4E267CEBA714E21C5EB29
SHA-512:	9D517432EAF2A564A8C10450FF01FEE8E47B22D8BDD34758361942EF50EB33DA0DE491ED8E1311E93639AF801CBEBD64E873F6F9D0B1E01A348547956B2D993B
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Ng(_.qma);_.YA=function(a){_.Xt.call(this);this.aa=a.Ya.cache};_.K(_.YA,_.Xu);_.YA.Ca=function(){return{Ya:{cache:_.Pt}}};_.YA.prototype.execute=function(a){_.Gb(a,function(b){var c;_.kf(b)&&(c=b.jb.jc(b.ob));c&&this.aa.fJ(c)},this);return{}};_.$u(_.wma,_.YA);._.l();._.k("ZDZcre");.var a3a=function(a){_.Xt.call(this);this.aa=_.fH();this.Cn=a.Ea.Cn;this.d6=a.Ea.metadata};_.K(a3a,_.Xu);a3a.Ca=function(){return{Ea:{Cn:_.hH,metadata:_.i2a}}};a3a.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Gb(a,function(c){var d=b.d6.getType(c.Vd())===2?b.Cn.Ob(c):b.Cn.fetch(c);return _.sm(c,_.iH)?d.then(function(e){return _.Kd(e)}):d},this)};_.$u(_.Bma,a3a);._.l();._.k("K5nYTd");._.h2a=new _.Af(_.xma);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var m2a=function(a){_.Xt.call(this);this.aa=a.Ea.dT};_.K(m2a,_.Xu);m2a.Ca=function(){ret

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (469)
Category:	dropped
Size (bytes):	2028
Entropy (8bit):	5.291191440678704
Encrypted:	false
SSDEEP:	48:o7Y081jEDL3AouFdOm2cJ9ChlO77O90if03i7/rsJB2/brw:ocZ1wLjuFdP2cPCgy90kf7c8/Hw
MD5:	64186F222BC81CB7F86AF8F50E7C19FB
SHA1:	1447865C6D30534BE0BDBDA38DD15EE038FB5D1A
SHA-256:	EBC4E52CEC3D96374736FC7350CF15E98231E95CAE2D933185F438B948C83E25
SHA-512:	2BE94B8534AF2FDD6ED4384F7FC184505A3294ACCD72ADDBEAB0F4AE52398225B7880A58888BB46DD2A0D68CBD76570A8401BCEDF11AE9A3F283B0A53AFBA46D
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.eZ=function(a){_.Xt.call(this);this.window=a.Ea.window.get();this.kc=a.Ea.kc};_.K(_.eZ,_.Xu);_.eZ.Ca=function(){return{Ea:{window:_.dv,kc:_.qF}}};_.eZ.prototype.nq=function(){};_.eZ.prototype.addEncryptionRecoveryMethod=function(){};_.fZ=function(a){return(a==null?void 0:a.aq)\|\|function(){}};_.gZ=function(a){return(a==null?void 0:a.l5)\|\|function(){}};_.tWb=function(a){return(a==null?void 0:a.Sq)\|\|function(){}};._.uWb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.vWb=function(a){setTimeout(function(){throw a;},0)};_.eZ.prototype.OQ=function(){return!0};_.hZ=function(a,b,c,d){c=c===void 0?"":c;a=a.kc;var e=a.HQ,f=new _.iF;b=_.Xj(f,7,_.CYa,b==null?b:_.Rc(b));e.call(a,305,b,d,void 0,void 0,_.mVb(new _.hF,_.lVb(new _.wY,c)))};_.$

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2768)
Category:	dropped
Size (bytes):	21434
Entropy (8bit):	5.420916288066369
Encrypted:	false
SSDEEP:	384:ZfQwYyxEZiPTuu4q5oaTm1Khf8MswPU8o0SIpYLOkng/PVMA1ZjqJDLA:ZfQwFxE+Tuu4q5oaT/f8Mswc8o0bpkWf
MD5:	A50F25F3558A48C97AC10BC122D08631
SHA1:	AFDF7068C22087084FA077CFF79078A781AA0365
SHA-256:	B3F402942E0BDCCCADE3DDE8FCC066AAC386F47A9A58ABCC47385DF60C7D9D8D
SHA-512:	3DAB9C81A4E85E0DA17EE88B9F574880571E5964F94BC31F5947533C269E4084FC4F77C9C8D40E55CE62C945B834672C3560E71EEBFB3E185E19881E842CE429
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var NIa;._.PIa=function(){var a=NIa(_.Ie("xwAfE"),function(){return _.Ie("UUFaWc")}),b=NIa(_.Ie("xnI9P"),function(){return _.Ie("u4g7r")}),c,d,e,f;return(f=OIa)!=null?f:OIa=Object.freeze({isEnabled:function(g){return g===-1\|\|_.nf(_.Ie("iCzhFc"),!1)?!1:a.enabled\|\|b.enabled},environment:(c=_.kl(_.Ie("y2FhP")))!=null?c:void 0,TS:(d=_.kl(_.Ie("MUE6Ne")))!=null?d:void 0,Bt:(e=_.kl(_.Ie("cfb2h")))!=null?e:void 0,Wp:_.ml(_.Ie("yFnxrf"),-1),i2:_.tGa(_.Ie("fPDxwd")).map(function(g){return _.ml(g,0)}).filter(function(g){return g>0}),.Z6:a,Wxa:b})};NIa=function(a,b){a=_.nf(a,!1);return{enabled:a,PX:a?_.Kd(_.nl(b(),_.Xz)):QIa()}};_.Xz=function(a){this.Ha=_.u(a)};_.K(_.Xz,_.v);var QIa=function(a){return function(){return _.nd(a)}}(_.Xz);var OIa;._.k("p3hmRc");.var yJa=function(a){a.Fa=!0;return a},zJa=function(a,b,c,d){this.transport=a;this.aa=b;this.da=c;this.environment=d;this.fa=Number

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	5046
Entropy (8bit):	5.306853582799112
Encrypted:	false
SSDEEP:	96:oMIgPsHTroaMC/sdg+x9MxJNzLm5y9jh1UXR4jDTvzy/uw:0EWTsoElx9awyoR4TbyD
MD5:	7A008C3A4D56183D3E9901E0AB46F37C
SHA1:	7C3138CA50FA1741F62DB4A697379C5BFB540534
SHA-256:	72CCF3AB6A11ED2F3235E2F9A695B52ADCBF4AF84505DCB3761E78E6305CD662
SHA-512:	26C81EE7AA3FC3F1B581EE9A8B9A5CA06887B8A75D381952C8450E58BB760DC9CCD60DBACD783DC9D46AEEF269C3D8489935C114EC27E936242DDAE05941BA80
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.BOa=_.z("wg1P6b",[_.KB,_.Go,_.No]);._.k("wg1P6b");.var f$a;f$a=_.Ph(["aria-"]);._.$I=function(a){_.W.call(this,a.La);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Wc=a.Ea.dg;this.eb=a.Ea.focus;this.Lc=a.Ea.Lc;this.fa=this.Lj();a=-1*parseInt(_.zp(this.Lj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.zp(this.Lj().el(),"marginBottom")\|\|"0",10);this.Wa={top:a,right:0,bottom:b,left:0};a=_.nf(this.getData("isMenuDynamic"),!1);b=_.nf(this.getData("isMenuHoisted"),!1);this.Fa=a?1:b?2:0;this.oa=!1;this.Da=1;this.Fa!==1&&(this.aa=this.Sa("U0exHf").children().Rc(0),this.ej(g$a(this,.this.aa.el())));_.SF(this.Aa())&&(a=this.Aa().el(),b=this.Le.bind(this),a.__soy_skip_handler=b)};_.K(_.$I,_.W);_.$I.Ca=function(){return{Ea:{dg:_.HF,focus:_.wF,Lc:_.ev}}};_.$I.prototype.kA=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.qB)?(a=a.data.qB,this.Da=a==="MOUSE"

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3464
Entropy (8bit):	5.529918689437186
Encrypted:	false
SSDEEP:	96:oBWZKGhe/W+qPEsiZo5GF5tViJknaqZHB26WPUX9r0eew:zZThe/lPzVZh2bMXxz
MD5:	2FB0B8EFABBE22EE459F7B520E3EF289
SHA1:	E39F3587D826D5AC62E790E88DBA4FBDBC68B871
SHA-256:	7915E57CD771AD759D0A4BF835815844C9462AA086451A5CDFA70F8DD166C9C9
SHA-512:	F0E010E05751477FBECBDFF30EBC16151F11B8E8FB347770984AFF0AF00ACC14D3FD6A4560109C516BD76496003529F394A3D454FDDEE8C13DFF3BA586B67905
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var hza=function(){var a=_.Me();return _.vk(a,1)},Ou=function(a){this.Ha=_.u(a,0,Ou.messageId)};_.K(Ou,_.v);Ou.prototype.Ga=function(){return _.hk(this,1)};Ou.prototype.Ta=function(a){return _.Fk(this,1,a)};Ou.messageId="f.bo";var Pu=function(){_.jn.call(this)};_.K(Pu,_.jn);Pu.prototype.Id=function(){this.NV=!1;iza(this);_.jn.prototype.Id.call(this)};Pu.prototype.aa=function(){jza(this);if(this.dF)return kza(this),!1;if(!this.VX)return Qu(this),!0;this.dispatchEvent("p");if(!this.dS)return Qu(this),!0;this.tP?(this.dispatchEvent("r"),Qu(this)):kza(this);return!1};.var lza=function(a){var b=new _.cg(a.X6);a.aT!=null&&_.fg(b,"authuser",a.aT);return b},kza=function(a){a.dF=!0;var b=lza(a),c="rt=r&f_uid="+_.dl(a.dS);_.Wn(b,(0,_.Lg)(a.fa,a),"POST",c)};.Pu.prototype.fa=function(a){a=a.target;jza(this);if(_.Zn(a)){this.XM=0;if(this.tP)this.dF=!1,this.dispatchEvent("r"

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	9198
Entropy (8bit):	5.415214855258686
Encrypted:	false
SSDEEP:	192:NeiLP/tLiG45ej8rjZGOY86K3/OsyS/npikAV9jb:NeAliGYfY8H/1t/p8V9jb
MD5:	052274F3075EC3C088B670C1D7E0B2E7
SHA1:	5788B3535481B7C4E1F1178B3B13A33C833E1181
SHA-256:	DAC1F43BCA5E5DAEBB32F402289FC159AC3724DCC9CEF97DD6F75EFDFC39BEE8
SHA-512:	9705DEC7C1DE00F3F0E4877D96A06028E3A54E7EBFDB244FDEF7F2DA9A6B406669433D4C5F34AF25EFD73317C08073E4154809B6A80B4F8D2257BD16D9A35C25
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.SOa=_.z("SD8Jgb",[]);._.TW=function(a,b){if(typeof b==="string")a.zc(b);else if(b instanceof _.bq&&b.ia&&b.ia===_.C)b=_.Za(b.qw()),a.empty().append(b);else if(b instanceof _.Va)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("ng");};_.UW=function(a){var b=_.Gp(a,"[jsslot]");if(b.size()>0)return b;b=new _.Dp([_.zl("span")]);_.Hp(b,"jsslot","");a.empty().append(b);return b};_.GSb=function(a){return a===null\|\|typeof a==="string"&&_.jj(a)};._.k("SD8Jgb");._.ZW=function(a){_.W.call(this,a.La);this.Xa=a.controller.Xa;this.fd=a.controllers.fd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.Aa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.ZW,_.W);_.ZW.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.cw},header:{jsname:"tJHJj",ctor:_.cw},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	5.058292698794709
Encrypted:	false
SSDEEP:	3:fnSVyJuVUhVTScsROTNnG+yKAhP:P7JuKhVTIOhbZAhP
MD5:	A05EF77E39699B1EB6D4E7E5E4D59997
SHA1:	9BA7E72086A8440E9448CB2039629099938F28C8
SHA-256:	228227CDBC1F58E157921F8ECBAF9D39653E0909D82732C25F9072C4E8108224
SHA-512:	97C40FE14487A9E238263F046F051D96D695F944AA5782BF83A77239F6F1B2E5F1B342F00A3E9D7AD02395B3667C8EB5BF3FEBFFFC8FB7FB32E1E41E5586CEB6
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Cj4KBw0ZARP6GgAKKg3oIX6GGgQISxgCKh0IClIZCg9AIS4kI18qLSY/LyslLF4QARj/////DwoHDdOYqAcaAA==

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (680)
Category:	downloaded
Size (bytes):	3125
Entropy (8bit):	5.384578907977569
Encrypted:	false
SSDEEP:	48:o78L4GXXbtsyHhN5jNQ8jsaGduw4UYO/QG1OJXp2lLEyeAD5Zeo+Mp0lvcddorw:oIVD5jOddR0OYGi52lLfPDL2MHdMw
MD5:	D350AA6F50498A8EBAA4EA5BA1238B8D
SHA1:	3F2025138B0074D528D2304986D22D44A4FB2031
SHA-256:	9B36927800600011C456B006BE4AE3689CE07702355A6A5D26DACE22A649EA0B
SHA-512:	EA0E11899025F864DA22B607D0C67A7AD7D33D3D5625211D51736E55554FE7D0323D41C630E909ECD87C4CF3E0B5BE19ADCE8E8AF11302FDB49FE915FAA47BFD
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,LvGhrf,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,niKKCd,njlZCf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var $A=function(){_.Xt.call(this)};_.K($A,_.Xu);$A.Ca=_.Xu.Ca;$A.prototype.xU=function(a){return _.hf(this,{Ya:{sV:_.cm}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.Mi(function(e){window._wjdc=function(f){d(f);e(iLa(f,b,a))}}):iLa(c,b,a)})};var iLa=function(a,b,c){return(a=a&&a[c])?a:b.Ya.sV.xU(c)};.$A.prototype.aa=function(a,b){var c=_.msa(b).Fl;if(c.startsWith("$")){var d=_.hn.get(a);_.Pq[b]&&(d\|\|(d={},_.hn.set(a,d)),d[c]=_.Pq[b],delete _.Pq[b],_.Qq--);if(d)if(a=d[c])b=_.lf(a);else throw Error("Vb`"+b);else b=null}else b=null;return b};_.$u(_.$fa,$A);._.l();._.k("SNUn3");._.hLa=new _.Af(_.Og);._.l();._.k("RMhBfe");.var jLa=function(a){var b=_.Oq(a);return b?new _.Mi(function(c,d){var e=function(){b=_.Oq(a);var f=_.gga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata with i

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (518)
Category:	downloaded
Size (bytes):	778838
Entropy (8bit):	5.7915148400792615
Encrypted:	false
SSDEEP:	3072:7/dtBQLm8fWyKGoZyzgNx2BP5cw0msoSdwkKHU3nhPaKNs8P5rgP6Uvvi1wiOn6c:Px8fWQSx657KUkK6p5c6UcDe1zVZX
MD5:	FEBEE3BD380FC3960798B1928308408A
SHA1:	59930DDC16D7A8C610E9030BFA306865F8A55B21
SHA-256:	EEF906D80F071870D59A32059987BECEDCB17A852D9DFF0A50D6A68711097962
SHA-512:	8F450296417B9CFF39F291908BCC4865A88CCE852F277446F9074F4E0D7221F82BCEB7FB3BFA7664AE021A2FDC0FD9A6BD350CE872F4D9E2CF75ED9E78A6C92C
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGjz841S7weWgGFfoMThhwWaDqYWg/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x24cc1989, 0x401a61, 0x1a70ff1, 0x91406f4, 0x3210, 0x0, 0x36000008, 0x22000000, 0xc3, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Pa,Ua,gaa,iaa,jb,xaa,Eaa,Ab,Qaa,Saa,Vaa,Mb,Waa,Sb,Ub,Vb,Xaa,Yaa,Yb,Zaa,$aa,aba,bc,fba,hba,jc,kc,lc,lba,nba,oba,sba,uba,wba,xba,Bba,Eba,yba,Dba,Cba,Aba,zba,Fba,Iba,Lba,Nba,Oba,Kba,Qba,Mc,Sba,Yba,Zba,$ba,aca,bca,cca,Wba,Xba,eca,gca,jca,kca,lca,mca,nca,qca,sca,rca,uca,zd,xd,wca,vca,

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (680)
Category:	dropped
Size (bytes):	3125
Entropy (8bit):	5.384578907977569
Encrypted:	false
SSDEEP:	48:o78L4GXXbtsyHhN5jNQ8jsaGduw4UYO/QG1OJXp2lLEyeAD5Zeo+Mp0lvcddorw:oIVD5jOddR0OYGi52lLfPDL2MHdMw
MD5:	D350AA6F50498A8EBAA4EA5BA1238B8D
SHA1:	3F2025138B0074D528D2304986D22D44A4FB2031
SHA-256:	9B36927800600011C456B006BE4AE3689CE07702355A6A5D26DACE22A649EA0B
SHA-512:	EA0E11899025F864DA22B607D0C67A7AD7D33D3D5625211D51736E55554FE7D0323D41C630E909ECD87C4CF3E0B5BE19ADCE8E8AF11302FDB49FE915FAA47BFD
Malicious:	false
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var $A=function(){_.Xt.call(this)};_.K($A,_.Xu);$A.Ca=_.Xu.Ca;$A.prototype.xU=function(a){return _.hf(this,{Ya:{sV:_.cm}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.Mi(function(e){window._wjdc=function(f){d(f);e(iLa(f,b,a))}}):iLa(c,b,a)})};var iLa=function(a,b,c){return(a=a&&a[c])?a:b.Ya.sV.xU(c)};.$A.prototype.aa=function(a,b){var c=_.msa(b).Fl;if(c.startsWith("$")){var d=_.hn.get(a);_.Pq[b]&&(d\|\|(d={},_.hn.set(a,d)),d[c]=_.Pq[b],delete _.Pq[b],_.Qq--);if(d)if(a=d[c])b=_.lf(a);else throw Error("Vb`"+b);else b=null}else b=null;return b};_.$u(_.$fa,$A);._.l();._.k("SNUn3");._.hLa=new _.Af(_.Og);._.l();._.k("RMhBfe");.var jLa=function(a){var b=_.Oq(a);return b?new _.Mi(function(c,d){var e=function(){b=_.Oq(a);var f=_.gga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata with i

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	33469
Entropy (8bit):	5.395821579200296
Encrypted:	false
SSDEEP:	768:YZRPxAbRiJI+WhSXlnoZSQAenNKnCts4bheoi7a7W4udMUZgJ:YZPlnoxNKnCtss+OfD
MD5:	D416F54668CFD497178784ABEF5553C5
SHA1:	A5481D1E1566DCFD59BA7813BD3FEDE1F001CEBF
SHA-256:	73BA641A8114D56C7A8E1F6B75E2750D66D22C17F02820AADC6CB48EE2E5B71C
SHA-512:	784F16A57CF5B0C17B52D8F36317B2EFC7F772A76E5847DD91D3546CE485324B875DCEF74D6F901A9D48641947FBF869A3A76E253CACAA3D86784566197F443B
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FadFvh582Es.es5.O/ck=boq-identity.AccountsSignInUi.UdDUw7FRBuM.L.B1.O/am=iRnMZJgGEBD_cBrQG1AkEDIAAAAAAIAAAGADAACIww/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlF1apyAwNbjdwiRwhISVD3B3rsleA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Sua=function(a,b){this.da=a;this.fa=b;if(!c){var c=new _.cg("//www.google.com/images/cleardot.gif");_.Qm(c)}this.oa=c};_.h=Sua.prototype;_.h.jd=null;_.h.i0=1E4;_.h.lC=!1;_.h.XS=0;_.h.kM=null;_.h.dX=null;_.h.setTimeout=function(a){this.i0=a};_.h.start=function(){if(this.lC)throw Error("sc");this.lC=!0;this.XS=0;Tua(this)};_.h.stop=function(){Uua(this);this.lC=!1};.var Tua=function(a){a.XS++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.mn((0,_.Lg)(a.uJ,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.Lg)(a.uma,a),a.aa.onerror=(0,_.Lg)(a.tma,a),a.aa.onabort=(0,_.Lg)(a.sma,a),a.kM=_.mn(a.vma,a.i0,a),a.aa.src=String(a.oa))};_.h=Sua.prototype;_.h.uma=function(){this.uJ(!0)};_.h.tma=function(){this.uJ(!1)};_.h.sma=function(){this.uJ(!1)};_.h.vma=function(){this.uJ(!1)};._.h.uJ=function(a){Uua(this);a?(this.lC=!1,this.da.call(this.fa,!0)):this.XS<=0?Tua(this):(this.lC=!1,

Static File Info

General

File type:	PDF document, version 1.7, 1 pages
Entropy (8bit):	7.892084132238323
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	0029 .pdf
File size:	134'162 bytes
MD5:	d26456e9e9911d2734f8aaf241b6a738
SHA1:	8912ec729ee6b5fc3903aba74aaf68d23f872010
SHA256:	1c8d103791657581e8c440df28356e2bbe3f8e7359c3e6b89d2223c0c4800ea6
SHA512:	ab6e425ec4488d838c94a7a2778dff5351478d7174f73ecaa6a3a548308c6f254448e7ed209eccf92f90048cfad4813d41c65b632ff2ee5be33a2ebe24ebf663
SSDEEP:	3072:iX5oPKf6PIlATCDOufPjw8PnwyA4O+w0vX:BPW6wSTsOyjPPnwgOjgX
TLSH:	5FD3CE20894D38CEC35657C11B2F3C4DB62E7662F0C446843ABDDB8A4761E7AD82B65F
File Content Preview:	%PDF-1.7..%......1 0 obj..<</Type/Catalog/Pages 2 0 R/Lang(en) /StructTreeRoot 27 0 R/MarkInfo<</Marked true>>/Metadata 271 0 R/ViewerPreferences 272 0 R>>..endobj..2 0 obj..<</Type/Pages/Count 1/Kids[ 3 0 R] >>..endobj..3 0 obj..<</Type/Page/Parent 2 0 R

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.7
Total Entropy:	7.892084
Total Bytes:	134162
Stream Entropy:	7.971177
Stream Bytes:	122057
Entropy outside Streams:	4.668699
Bytes outside Streams:	12105
Number of EOF found:	2
Bytes after EOF:

Keywords Statistics

Name	Count
obj	39
endobj	39
stream	10
endstream	10
xref	2
trailer	2
startxref	2
/Page	1
/Encrypt	0
/ObjStm	1
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
24	1f21616244613397	4b4059b2ea5de13843a00983d5c98ed9
25	06060e1816113bc4	903c5f3cf6ec318c7fc09ebd02b88f8d

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 11:08:14.758028030 CET	49712	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:14.758073092 CET	49712	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:14.758332968 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:14.758389950 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:14.758472919 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:14.758670092 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:14.758681059 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:14.767323017 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:14.767357111 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:14.767426014 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:14.767643929 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:14.767663002 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:14.877312899 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:14.877341986 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:14.877729893 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:14.877748013 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:14.877762079 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.348134995 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.348429918 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.348500967 CET	49712	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:15.352391005 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.352415085 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.352494955 CET	49712	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:15.360754013 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.360985994 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.361031055 CET	49712	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:15.369030952 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.369144917 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.369199991 CET	49712	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:15.377425909 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.377480030 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:15.377535105 CET	49712	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:16.438018084 CET	443	49715	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:16.438215971 CET	49715	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:16.444858074 CET	49715	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:16.444894075 CET	443	49715	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:16.445229053 CET	443	49715	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:16.453205109 CET	49715	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:16.455763102 CET	49715	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:16.455777884 CET	443	49715	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:16.455959082 CET	49715	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:16.499329090 CET	443	49715	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:16.530894995 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:16.530997038 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:16.531827927 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:16.531903982 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:16.547189951 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:16.547205925 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:16.547533035 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:16.550132036 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:16.550163984 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:16.550492048 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:16.550601006 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:16.550668001 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:16.550708055 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:16.551000118 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:16.551043987 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:16.551099062 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:16.931176901 CET	49718	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:16.931236982 CET	443	49718	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:16.931325912 CET	49718	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:16.932868004 CET	49718	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:16.932890892 CET	443	49718	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:17.118412971 CET	443	49715	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:17.118880987 CET	443	49715	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:17.118980885 CET	49715	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:17.119863987 CET	49715	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:17.119889021 CET	443	49715	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:17.119904041 CET	49715	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:17.219708920 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.219734907 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.219768047 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.219813108 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:17.219847918 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.219866991 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:17.220603943 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:17.220632076 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:17.220762014 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.220793009 CET	443	49717	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.220833063 CET	49717	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:17.234908104 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.234942913 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.234983921 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.235044003 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:17.235074043 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.235095024 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:17.235397100 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:17.235416889 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:17.235575914 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.235609055 CET	443	49716	20.190.147.8	192.168.2.6
Dec 9, 2024 11:08:17.235645056 CET	49716	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:08:17.237359047 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:17.237394094 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:17.237483025 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:17.237742901 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:17.237752914 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:17.249780893 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:17.249844074 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:17.249963999 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:17.250262976 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:17.250277042 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.670806885 CET	443	49718	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.670928001 CET	49718	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.714329004 CET	49718	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.714349985 CET	443	49718	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.714679956 CET	443	49718	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.714729071 CET	49718	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.716109991 CET	49718	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.716135025 CET	443	49718	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.970015049 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.970118999 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.972621918 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.972634077 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.972821951 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.972831964 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.972888947 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.972939968 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.984513998 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.984611988 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.986872911 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.986881971 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.987031937 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:18.987040043 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.987118959 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:18.987173080 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.106359959 CET	443	49718	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.106379986 CET	443	49718	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.106446981 CET	443	49718	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.106496096 CET	49718	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.106544018 CET	49718	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.108129025 CET	49718	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.108139992 CET	443	49718	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.188509941 CET	49721	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:19.188556910 CET	443	49721	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:19.189831972 CET	49721	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:19.191525936 CET	49721	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:19.191538095 CET	443	49721	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:19.657494068 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.657525063 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.657541990 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.657794952 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.657794952 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.657810926 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.661350965 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.797015905 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.797075987 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.797121048 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.797135115 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.797147036 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.797190905 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.797190905 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.797190905 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.797204018 CET	443	49719	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.797245979 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.797245979 CET	49719	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.871931076 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.871973991 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.872005939 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.872051001 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.872068882 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:19.872073889 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.872093916 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.872140884 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.872442961 CET	49720	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:19.872459888 CET	443	49720	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:21.617611885 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:21.617667913 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:21.617882967 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:21.623186111 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:21.623203993 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:21.704076052 CET	443	49721	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:21.704161882 CET	49721	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:21.719264030 CET	49721	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:21.719326019 CET	443	49721	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:21.719665051 CET	443	49721	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:21.737554073 CET	49721	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:21.737708092 CET	49721	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:21.737720013 CET	443	49721	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:21.737859964 CET	49721	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:21.779330969 CET	443	49721	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:22.057328939 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.057370901 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:22.057463884 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.057538033 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.057598114 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:22.057643890 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.057895899 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.057907104 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:22.058058977 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.058073997 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:22.183382034 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.183417082 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:22.183475971 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.187591076 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.187602043 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:22.200508118 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.200566053 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:22.200628996 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.201057911 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:22.201071978 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:22.287020922 CET	443	49721	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:22.287116051 CET	443	49721	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:22.287228107 CET	49721	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:22.287342072 CET	49721	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:22.287360907 CET	443	49721	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:23.139110088 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:23.139168024 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:23.139240980 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:23.139775991 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:23.139791012 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:23.231854916 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:23.231966019 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:23.594681978 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:23.594755888 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:23.711433887 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:23.711513996 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:23.733499050 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:23.733597994 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:23.784456015 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:23.784531116 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:23.907147884 CET	49673	443	192.168.2.6	173.222.162.64
Dec 9, 2024 11:08:23.995083094 CET	49674	443	192.168.2.6	173.222.162.64
Dec 9, 2024 11:08:24.220587015 CET	49672	443	192.168.2.6	173.222.162.64
Dec 9, 2024 11:08:24.865299940 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:24.865405083 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:24.876178026 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:24.876214027 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:24.876581907 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:24.886567116 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:24.927340031 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.340338945 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.340363979 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.340379953 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.340426922 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.340468884 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.340487003 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.340526104 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.520503998 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.520528078 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.520636082 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.520678043 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.520731926 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.566194057 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.566219091 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.566310883 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.566353083 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.566395044 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.690165997 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.690191031 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.690282106 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.690336943 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.690378904 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.728250980 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.728271008 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.728352070 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.728400946 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.728445053 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.749209881 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.749238014 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.749289036 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.749345064 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.749360085 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.749382019 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.773880959 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.773900986 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.773960114 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.774009943 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.774027109 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.774147987 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.877859116 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.877882004 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.877957106 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.878015041 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.878166914 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.892968893 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.892986059 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.893049955 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.893104076 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.893126965 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.893177986 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.908791065 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.908808947 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.908890009 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.908926964 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.909162045 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.924155951 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.924173117 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.924227953 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.924258947 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.924334049 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.937556982 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.937573910 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.937680006 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.937711000 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.937798977 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.939696074 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.939743042 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:25.939873934 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.949403048 CET	49727	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:25.949426889 CET	443	49727	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.188232899 CET	49732	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.188301086 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.188371897 CET	49732	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.201446056 CET	49733	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.201502085 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.201570988 CET	49733	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.201745033 CET	49732	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.201793909 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.202872992 CET	49734	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.202914000 CET	443	49734	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.202970982 CET	49734	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.203110933 CET	49734	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.203125000 CET	443	49734	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.208185911 CET	49735	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.208235979 CET	443	49735	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.208327055 CET	49735	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.210625887 CET	49736	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.210700035 CET	443	49736	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.210999966 CET	49733	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.211028099 CET	49736	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.211038113 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.211110115 CET	49736	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.211122036 CET	443	49736	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.211334944 CET	49735	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:26.211347103 CET	443	49735	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:26.594228029 CET	443	49705	173.222.162.64	192.168.2.6
Dec 9, 2024 11:08:26.594374895 CET	49705	443	192.168.2.6	173.222.162.64
Dec 9, 2024 11:08:26.656047106 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:26.656106949 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:26.656512022 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:26.656630993 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:26.784560919 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:26.784579992 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:26.784996986 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:26.785074949 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:26.787898064 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:26.787923098 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:26.788269997 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:26.788335085 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:26.789314985 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:26.789366961 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:26.789680958 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:26.789731026 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:26.842247009 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:26.842796087 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:26.887340069 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:26.887356043 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.001013994 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:27.001672029 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.001732111 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.002103090 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.002105951 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.002186060 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.002207994 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.043342113 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:27.043343067 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.043344021 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.206281900 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.206315994 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.206331968 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.206444979 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.206469059 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.206517935 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.217030048 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.217067003 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.217086077 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.217092991 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.217111111 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.217134953 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.217222929 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.359602928 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.359637976 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.359652996 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.359791040 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.359833002 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.359879017 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.372529030 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.372572899 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.372589111 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.372724056 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.372756004 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.372801065 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.388310909 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.388350010 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.388392925 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.388411999 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.388448000 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.388468027 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.398540974 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.398575068 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.398662090 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.398663044 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.398678064 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.402085066 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.440009117 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.440035105 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.440149069 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.440162897 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.440200090 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.444184065 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.444205999 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.444331884 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.444343090 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.445954084 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.521295071 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:27.521325111 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:27.521377087 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:27.521411896 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:27.521428108 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:27.521465063 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:27.522022963 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:27.522068977 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:27.522087097 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:27.522129059 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:27.544586897 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.544625998 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.544667006 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.544708014 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.544728994 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.544750929 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.556406021 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.556437016 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.556510925 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.556521893 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.556560040 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.558453083 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.558475971 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.558515072 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.558532000 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.558558941 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.558573961 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.567765951 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.567792892 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.567887068 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.567887068 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.567910910 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.568098068 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.592112064 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.592133045 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.592257977 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.592257977 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.592268944 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.592374086 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.595046043 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.595067024 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.595144033 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.595155954 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.595186949 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.596862078 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.596883059 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.596935987 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.596951962 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.596982002 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.596999884 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.608099937 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.608123064 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.608165026 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.608171940 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.608217001 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.616720915 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.616741896 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.616871119 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.616871119 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.616889000 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.617038012 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.620793104 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.620812893 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.620877028 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.620886087 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.620918036 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.620933056 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.636173964 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.636195898 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.636306047 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.636306047 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.636329889 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.636441946 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.688071966 CET	49722	443	192.168.2.6	2.16.158.83
Dec 9, 2024 11:08:27.688102961 CET	443	49722	2.16.158.83	192.168.2.6
Dec 9, 2024 11:08:27.714142084 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.714171886 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.714214087 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.714245081 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.714261055 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.714337111 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.730654001 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.730684042 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.730724096 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.730736017 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.730763912 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.730784893 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.744657040 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.744684935 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.744729042 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.744740009 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.744780064 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.752317905 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.752343893 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.752391100 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.752399921 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.752438068 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.756944895 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.756977081 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.757029057 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.757045984 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.757060051 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.757106066 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.760756969 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.760802984 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.760826111 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.760833979 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.760869026 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.768475056 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.768496990 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.768534899 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.768543959 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.768582106 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.772396088 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.772413969 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.772501945 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.772521019 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.772664070 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.776247978 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.776273012 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.776308060 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.776314974 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.776360989 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.778281927 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.778304100 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.778346062 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.778354883 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.778390884 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.787607908 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.787632942 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.787697077 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.787710905 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.787718058 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.787749052 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.787780046 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.787781954 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.787798882 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.787827969 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.787827969 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.795375109 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.795398951 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.795499086 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.795499086 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.795506954 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.795536995 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.795725107 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.795749903 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.795778990 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.795787096 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.795814991 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.795844078 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.800621986 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.800641060 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.800745964 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.800745964 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.800760984 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.800841093 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.812762976 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.812793016 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.812827110 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.812834024 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.812876940 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.815876007 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.815897942 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.815983057 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.815983057 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.815994978 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.816032887 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.829024076 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.829055071 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.829090118 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.829098940 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.829145908 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.829960108 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.829981089 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.830019951 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.830048084 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.830082893 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.830091000 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.843918085 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.843940020 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.843986988 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.843997955 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.844048023 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.845045090 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.845067978 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.845118046 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.845133066 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.845191002 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.887492895 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.887536049 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.887597084 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.887867928 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.887882948 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.907556057 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.907597065 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.907635927 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.907658100 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.907686949 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.907706022 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.909404039 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.909454107 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.909476042 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.909486055 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.909521103 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.909538984 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.916440964 CET	443	49734	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.916882992 CET	49734	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:27.916909933 CET	443	49734	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.917375088 CET	49734	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:27.917387009 CET	443	49734	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.917444944 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.917776108 CET	49732	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:27.917794943 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.918167114 CET	49732	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:27.918174982 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.922925949 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.922977924 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.923022985 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.923060894 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.923084974 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.923100948 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.924571037 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.924971104 CET	49733	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:27.925008059 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.925740957 CET	49733	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:27.925757885 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.925941944 CET	443	49736	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.926839113 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.926873922 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.926903963 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.926927090 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.926950932 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.926970005 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.927397966 CET	49736	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:27.927414894 CET	443	49736	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.927798986 CET	49736	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:27.927804947 CET	443	49736	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:27.940602064 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.940629005 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.940666914 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.940690994 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.940715075 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.940736055 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.941001892 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.941029072 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.941056013 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.941061020 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.941096067 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.941109896 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.942064047 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.942091942 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.942126036 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.942143917 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.942168951 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.942193031 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.945842028 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.945882082 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.945911884 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.945926905 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.945979118 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.945979118 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.954085112 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.954114914 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.954154968 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.954163074 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.954210997 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.957694054 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.957721949 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.957762003 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.957770109 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.957787991 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.957796097 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.957812071 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.957844973 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.957850933 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.957875013 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.957886934 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.958075047 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.958093882 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.958112955 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.958122969 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.958146095 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.958179951 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.966737032 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.966761112 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.966816902 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.966825008 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.966869116 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.969377995 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.969413996 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.969484091 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.969484091 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.969492912 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.969543934 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.972449064 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.972470999 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.972534895 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.972564936 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.972600937 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.972707033 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.972729921 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.972774982 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.972783089 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.972804070 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.972829103 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.978699923 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.978727102 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.978754044 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.978763103 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.978863001 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.978905916 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.978929043 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.978964090 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.978971958 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.978996992 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.979021072 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.989168882 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.989196062 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.989238977 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.989264011 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.989283085 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.989299059 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.989379883 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.989403009 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.989432096 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.989442110 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.989485025 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.989485025 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.990003109 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.990025043 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.990056038 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.990065098 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.990094900 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.990107059 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.990753889 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.990781069 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.990814924 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.990832090 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.990849972 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.990866899 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.999398947 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.999427080 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.999476910 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.999486923 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:27.999526978 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:27.999526978 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.002218962 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.002249002 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.002306938 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.002316952 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.002393007 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.005647898 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.005682945 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.005716085 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.005743027 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.005767107 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.005781889 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.010055065 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.010083914 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.010124922 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.010133028 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.010174990 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.012368917 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.012391090 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.012444973 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.012455940 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.012484074 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.012510061 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.020904064 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.020941019 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.020987034 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.020996094 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.021042109 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.021042109 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.090763092 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.090790987 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.090848923 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.090874910 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.090905905 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.090925932 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.102905989 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.102922916 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.102986097 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.103003979 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.103059053 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.108419895 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.108453989 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.108498096 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.108508110 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.108551979 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.108566999 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.115042925 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.115065098 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.115113974 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.115133047 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.115164042 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.115175009 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.121503115 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.121525049 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.121567965 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.121582031 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.121613979 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.121630907 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.124892950 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.124937057 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.124969959 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.124983072 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.124988079 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.125005960 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.125009060 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.125046968 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.125063896 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.125081062 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.125082970 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.125142097 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.134016037 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.134032011 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.134040117 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.134054899 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.134139061 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.134140968 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.134155989 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.134169102 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.134208918 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.134212017 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.134229898 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.137692928 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.137731075 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.137790918 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.137814045 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.137831926 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.137855053 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.140377998 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.140408993 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.140453100 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.140471935 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.140543938 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.140551090 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.142224073 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.142254114 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.142293930 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.142302990 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.142345905 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.144622087 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.144645929 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.144691944 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.144707918 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.144732952 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.144754887 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.147160053 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.147188902 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.147227049 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.147239923 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.147273064 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.147298098 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.147520065 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.147542000 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.147614956 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.147614956 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.147630930 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.147684097 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.149364948 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.149391890 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.149437904 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.149446964 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.149496078 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.155688047 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.155711889 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.155761957 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.155775070 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.155807972 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.156621933 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.156644106 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.156687021 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.156698942 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.156722069 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.156740904 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.158068895 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.158087015 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.158128023 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.158143997 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.158179998 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.158201933 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.159452915 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.159482002 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.159521103 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.159537077 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.159563065 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.159584045 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.162560940 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.162591934 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.162616014 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.162653923 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.162662983 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.162678957 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.162678957 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.162708044 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.162750959 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.166747093 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.166764021 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.166814089 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.166830063 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.166862011 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.166881084 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.168744087 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.168762922 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.168808937 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.168823004 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.168848991 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.168867111 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.169259071 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.169280052 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.169312954 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.169317961 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.169354916 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.169370890 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.172485113 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.172503948 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.172552109 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.172560930 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.172596931 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.172615051 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.178993940 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.179013968 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.179092884 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.179107904 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.179150105 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.180733919 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.180752039 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.180841923 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.180841923 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.180852890 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.180902004 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.189297915 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.189315081 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.189393044 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.189415932 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.189456940 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.196582079 CET	49723	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.196604013 CET	443	49723	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.283334017 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.283365965 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.283412933 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.283442974 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.283462048 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.283484936 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.291136026 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.291163921 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.291201115 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.291233063 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.291249990 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.291280031 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.292139053 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.292180061 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.292185068 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.292220116 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.292227030 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.292258024 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.298403978 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.298443079 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.298484087 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.298491955 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.298511982 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.298535109 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.306493044 CET	49724	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.306509972 CET	443	49724	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.307256937 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.307281971 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.307328939 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.307333946 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.307362080 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.307375908 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.315639973 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.315658092 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.315702915 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.315709114 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.315757990 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.316946030 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.316973925 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.317018986 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.317047119 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.317070961 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.317084074 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.322763920 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.322782040 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.322824955 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.322833061 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.322876930 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.323601007 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.323617935 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.323684931 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.323700905 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.323776960 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.330044031 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.330064058 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.330128908 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.330173016 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.330216885 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.331633091 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.331653118 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.331697941 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.331707954 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.331737041 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.331783056 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.337512016 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.337531090 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.337584019 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.337613106 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.337635040 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.337656021 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.338727951 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.338753939 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.338799953 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.338809013 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.338844061 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.338862896 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.344954014 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.344971895 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.345045090 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.345072031 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.345119953 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.347042084 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.347060919 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.347121954 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.347130060 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.347166061 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.347179890 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.351043940 CET	443	49734	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.351099014 CET	443	49734	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.351151943 CET	49734	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.351910114 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.351927042 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.351969004 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.351979971 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.352019072 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.352041960 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.355236053 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.355253935 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.355283976 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.355336905 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.355344057 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.355386019 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.358557940 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.358582020 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.358624935 CET	49732	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.358643055 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.358656883 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.358680964 CET	49732	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.358706951 CET	49732	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.359333992 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.359353065 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.359411001 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.359421968 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.359450102 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.359467983 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.360022068 CET	443	49736	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.360090017 CET	443	49736	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.360133886 CET	49736	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.362776995 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.362796068 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.362842083 CET	49733	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.362871885 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.362915039 CET	49733	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.365766048 CET	49734	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.365796089 CET	443	49734	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.365811110 CET	49734	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.365817070 CET	443	49734	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.365900993 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.365920067 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.365969896 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.365979910 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.366017103 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.366030931 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.366506100 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.366835117 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.366853952 CET	49736	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.366873026 CET	443	49736	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.366878033 CET	49733	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.368870974 CET	49733	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.368897915 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.368912935 CET	49733	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.368920088 CET	443	49733	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.370349884 CET	49732	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.370371103 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.370382071 CET	49732	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.370387077 CET	443	49732	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.400748968 CET	49741	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.400791883 CET	443	49741	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.400870085 CET	49741	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.402327061 CET	49742	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.402383089 CET	443	49742	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.402446032 CET	49742	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.405316114 CET	49741	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.405328989 CET	443	49741	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.405463934 CET	49743	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.405481100 CET	443	49743	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.405556917 CET	49743	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.405788898 CET	49743	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.405800104 CET	443	49743	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.406497002 CET	49742	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.406516075 CET	443	49742	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.408255100 CET	49744	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.408288002 CET	443	49744	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.408338070 CET	49744	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.408467054 CET	49744	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.408478975 CET	443	49744	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.490324974 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.490355015 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.490406036 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.490437984 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.490461111 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.490484953 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.491750956 CET	443	49735	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.493168116 CET	49735	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.493210077 CET	443	49735	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.493590117 CET	49735	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.493601084 CET	443	49735	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.496680975 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.496706963 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.496747017 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.496752977 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.496794939 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.504131079 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.504148006 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.504206896 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.504215956 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.504235983 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.504268885 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.509670973 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.509700060 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.509744883 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.509769917 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.509784937 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.509808064 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.511511087 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.511533976 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.511571884 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.511580944 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.511609077 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.511627913 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.516099930 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.516118050 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.516168118 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.516180992 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.516208887 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.516227007 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.518745899 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.518768072 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.518836975 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.518845081 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.518901110 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.523617029 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.523638010 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.523684025 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.523699045 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.523720980 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.523746967 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.526036978 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.526056051 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.526098013 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.526118994 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.526133060 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.526161909 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.529810905 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.529829979 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.529886007 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.529898882 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.529921055 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.529934883 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.532344103 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.532361984 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.532411098 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.532418966 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.532464027 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.537503004 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.537522078 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.537585974 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.537604094 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.537641048 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.540066004 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.540086985 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.540141106 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.540153027 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.540189028 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.540204048 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.544368029 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.544387102 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.544440985 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.544461012 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.544476032 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.544497013 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.551632881 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.551651001 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.551702023 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.551721096 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.551753998 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.551786900 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.559283018 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.559303045 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.559355974 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.559371948 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.559410095 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.657072067 CET	49745	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:28.657119036 CET	443	49745	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:28.657119036 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.657185078 CET	49745	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:28.657191992 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.657241106 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.657629967 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.657649040 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.658206940 CET	49745	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:28.658230066 CET	443	49745	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:28.688863039 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.688896894 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.688952923 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.688997030 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.689013958 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.689044952 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.696252108 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.696273088 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.696345091 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.696360111 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.696402073 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.703979969 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.704006910 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.704049110 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.704062939 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.704108953 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.710333109 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.710350990 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.710413933 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.710422993 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.710479021 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.711324930 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.711369038 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.711374044 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.711410999 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.711416006 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.711447954 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.712174892 CET	49726	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.712193966 CET	443	49726	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.712480068 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.712508917 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.712553978 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.712574959 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.712604046 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.712631941 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.718969107 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.718990088 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.719049931 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.719068050 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.719105959 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.726303101 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.726321936 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.726380110 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.726391077 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.726429939 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.733766079 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.733797073 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.733844042 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.733855009 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.733902931 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.738099098 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.738153934 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.738183022 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.738193035 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.738219976 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.738225937 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.738240004 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.738337994 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.739650965 CET	49725	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:28.739671946 CET	443	49725	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:28.930879116 CET	443	49735	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.930906057 CET	443	49735	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.931139946 CET	49735	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.931160927 CET	443	49735	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.931397915 CET	49735	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.931397915 CET	49735	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.931534052 CET	49735	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.931559086 CET	443	49735	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.934056997 CET	49749	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.934104919 CET	443	49749	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:28.934230089 CET	49749	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.936841011 CET	49749	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:28.936857939 CET	443	49749	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:29.438755035 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:29.439013004 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:29.439625978 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:29.439646959 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:29.440032005 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:29.440045118 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.017358065 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.017389059 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.017402887 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.017433882 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.017471075 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.017482996 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.017527103 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.037784100 CET	443	49745	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:30.037863016 CET	49745	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:30.039525032 CET	49745	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:30.039544106 CET	443	49745	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:30.039788961 CET	443	49745	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:30.078279018 CET	49745	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:30.119333029 CET	443	49745	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:30.124563932 CET	443	49743	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.125061989 CET	443	49742	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.125139952 CET	49743	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.125150919 CET	443	49743	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.125613928 CET	49742	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.125628948 CET	443	49742	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.125650883 CET	49743	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.125657082 CET	443	49743	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.125746012 CET	443	49744	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.126352072 CET	49742	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.126358032 CET	443	49742	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.126462936 CET	49744	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.126478910 CET	443	49744	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.127110004 CET	49744	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.127114058 CET	443	49744	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.129122019 CET	443	49741	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.129590034 CET	49741	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.129600048 CET	443	49741	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.129923105 CET	49741	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.129926920 CET	443	49741	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.193340063 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.195518017 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.196707964 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.196727991 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.196916103 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.196923018 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.203557014 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.203587055 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.203632116 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.203654051 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.203680992 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.203701973 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.251207113 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.251286983 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.251328945 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.251380920 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.372849941 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.372873068 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.372942924 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.372977018 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.373016119 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.397932053 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.397959948 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.398001909 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.398026943 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.398053885 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.398070097 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.423140049 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.423182011 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.423465014 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.423465014 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.423501015 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.423688889 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.442799091 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.442826986 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.442902088 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.442929029 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.443228960 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.555943012 CET	443	49745	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:30.556027889 CET	443	49745	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:30.556102991 CET	49745	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:30.556221008 CET	49745	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:30.556221008 CET	49745	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:30.556241989 CET	443	49745	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:30.556252003 CET	443	49745	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:30.561507940 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.561558962 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.561598063 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.561629057 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.561646938 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.561665058 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.561992884 CET	443	49743	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.562052011 CET	443	49743	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.562110901 CET	49743	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.562478065 CET	443	49742	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.562551022 CET	443	49742	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.562607050 CET	49742	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.562877893 CET	443	49744	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.562947035 CET	443	49744	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.563014030 CET	49744	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.564362049 CET	49743	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.564389944 CET	443	49743	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.564404964 CET	49743	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.564412117 CET	443	49743	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.564575911 CET	443	49741	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.564640999 CET	443	49741	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.564687014 CET	49741	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.565325975 CET	49742	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.565351009 CET	443	49742	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.565367937 CET	49742	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.565373898 CET	443	49742	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.565604925 CET	49744	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.565628052 CET	443	49744	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.565640926 CET	49744	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.565646887 CET	443	49744	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.567459106 CET	49741	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.567459106 CET	49741	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.567467928 CET	443	49741	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.567476988 CET	443	49741	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.577042103 CET	49750	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.577097893 CET	443	49750	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.577264071 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.577286959 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.577326059 CET	49750	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.577352047 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.577389956 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.577455044 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.578720093 CET	49750	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.578736067 CET	443	49750	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.580899954 CET	49751	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.580933094 CET	443	49751	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.580992937 CET	49751	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.581271887 CET	49751	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.581281900 CET	443	49751	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.583216906 CET	49752	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.583255053 CET	443	49752	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.583383083 CET	49752	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.584417105 CET	49752	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.584434032 CET	443	49752	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.585557938 CET	49753	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.585592031 CET	443	49753	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.585660934 CET	49753	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.585918903 CET	49753	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.585931063 CET	443	49753	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.590157032 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.590181112 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.590239048 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.590256929 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.590296030 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.605173111 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.605197906 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.605258942 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.605297089 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.605318069 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.605345964 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.612965107 CET	49754	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:30.613006115 CET	443	49754	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:30.613102913 CET	49754	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:30.613423109 CET	49754	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:30.613436937 CET	443	49754	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:30.620119095 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.620146990 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.620209932 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.620233059 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.620279074 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.634061098 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.634083033 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.634151936 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.634190083 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.634234905 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.652087927 CET	443	49749	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.652622938 CET	49749	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.652647972 CET	443	49749	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.653184891 CET	49749	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:30.653191090 CET	443	49749	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:30.675096035 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.675122976 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.675137997 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.675163984 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.675192118 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.675204992 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.675252914 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.754813910 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.754842043 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.754923105 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.754966974 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.755022049 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.766623974 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.766644955 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.766715050 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.766761065 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.766872883 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.778480053 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.778498888 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.778568029 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.778604984 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.778851032 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.788615942 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.788641930 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.788731098 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.788769960 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.788817883 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.799514055 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.799535036 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.799635887 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.799665928 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.799712896 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.811407089 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.811429024 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.811497927 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.811526060 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.811573029 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.823086977 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.823111057 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.823190928 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.823223114 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.823272943 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.855895042 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.855925083 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.855993986 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.856031895 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.856059074 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.856070995 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.872493982 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:30.872534990 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:30.872665882 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:30.872848034 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:30.872858047 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:30.901923895 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.901952982 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.902013063 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.902060986 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.902081013 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.902098894 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.940689087 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.940711975 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.940788031 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.940836906 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.941049099 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.948682070 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.948705912 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.948759079 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.948782921 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.948812008 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.948831081 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.957937002 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.957957029 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.958056927 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.958092928 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.958138943 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.965771914 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.965794086 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.965827942 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.965892076 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.965903997 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.965951920 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.974755049 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.974796057 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.974843025 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.974865913 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.974894047 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.974910975 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.983117104 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.983139992 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.983202934 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.983220100 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.983279943 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.988198042 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.988295078 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:30.988348007 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.988399982 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.991017103 CET	49739	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:30.991044044 CET	443	49739	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.027271986 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.027304888 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.027426958 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.027451038 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.027559996 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.051405907 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.051436901 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.051492929 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.051523924 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.051547050 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.051572084 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.076849937 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.076879025 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.077003002 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.077035904 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.077148914 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.085633993 CET	443	49749	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:31.085725069 CET	443	49749	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:31.085782051 CET	49749	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:31.086249113 CET	49749	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:31.086292982 CET	443	49749	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:31.086308956 CET	49749	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:31.086314917 CET	443	49749	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:31.090231895 CET	49756	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:31.090293884 CET	443	49756	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:31.090353966 CET	49756	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:31.090698957 CET	49756	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:31.090709925 CET	443	49756	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:31.096781015 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.096812963 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.096906900 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.096961975 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.097127914 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.213123083 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.213213921 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.213262081 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.213315964 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.228728056 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.228765011 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.228830099 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.228851080 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.228892088 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.241434097 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.241461039 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.241528034 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.241544008 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.241592884 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.256124020 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.256153107 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.256215096 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.256233931 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.256272078 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.270689964 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.270720005 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.270800114 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.270818949 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.270852089 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.284463882 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.284495115 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.284557104 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.284579039 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.284667015 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.299004078 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.299031019 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.299079895 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.299093008 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.299129963 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.403003931 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.403040886 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.403083086 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.403126001 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.403178930 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.414738894 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.414768934 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.414820910 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.414845943 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.414891005 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.414959908 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.425565004 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.425590038 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.425646067 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.425662994 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.425731897 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.434700966 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.434727907 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.434808016 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.434829950 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.434906960 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.445821047 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.445847988 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.445959091 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.445981979 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.446022987 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.454838991 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.454865932 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.454940081 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.454952002 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.455007076 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.465234041 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.465267897 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.465358019 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.465373039 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.465429068 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.475651026 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.475673914 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.475742102 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.475749016 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.475788116 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.596422911 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.596451044 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.596520901 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.596564054 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.596581936 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.596606016 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.604260921 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.604284048 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.604341984 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.604367018 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.604394913 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.604413033 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.610018015 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.610104084 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.610110044 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.610117912 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.610171080 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.651016951 CET	49746	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:31.651060104 CET	443	49746	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:31.992100954 CET	443	49754	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:31.992244959 CET	49754	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:31.994199038 CET	49754	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:31.994220972 CET	443	49754	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:31.994482994 CET	443	49754	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:31.996123075 CET	49754	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:32.043327093 CET	443	49754	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:32.282540083 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:32.283046961 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:32.283067942 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:32.284137964 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:32.284192085 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:32.284198999 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:32.284262896 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:32.285414934 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:32.285468102 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:32.286005020 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:32.286015034 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:32.292865038 CET	443	49750	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.293646097 CET	49750	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.293672085 CET	443	49750	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.294450045 CET	443	49751	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.294998884 CET	49751	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.295025110 CET	443	49751	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.295398951 CET	49751	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.295412064 CET	443	49751	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.297810078 CET	49750	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.297821999 CET	443	49750	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.299448013 CET	443	49753	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.299767971 CET	49753	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.299786091 CET	443	49753	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.300172091 CET	49753	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.300178051 CET	443	49753	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.301223040 CET	443	49752	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.302139044 CET	49752	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.302159071 CET	443	49752	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.302721024 CET	49752	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.302726984 CET	443	49752	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.341126919 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:32.550759077 CET	443	49754	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:32.550843000 CET	443	49754	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:32.550941944 CET	49754	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:32.551749945 CET	49754	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:32.551749945 CET	49754	443	192.168.2.6	23.218.208.109
Dec 9, 2024 11:08:32.551770926 CET	443	49754	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:32.551783085 CET	443	49754	23.218.208.109	192.168.2.6
Dec 9, 2024 11:08:32.769685984 CET	443	49750	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.769685984 CET	443	49751	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.769758940 CET	443	49751	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.769758940 CET	443	49750	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.769829988 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:32.769891977 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:32.769994974 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:32.770015001 CET	49751	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.770015001 CET	49751	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.770098925 CET	49750	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.770098925 CET	49750	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.770098925 CET	49750	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.772372007 CET	49758	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.772423029 CET	443	49758	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.772481918 CET	49758	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.773809910 CET	49751	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.773827076 CET	443	49751	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.773827076 CET	49758	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.773843050 CET	443	49758	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.775151968 CET	49759	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.775192022 CET	443	49759	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.775249958 CET	49759	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.775480032 CET	49759	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.775491953 CET	443	49759	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.776026964 CET	49755	443	192.168.2.6	52.6.155.20
Dec 9, 2024 11:08:32.776042938 CET	443	49755	52.6.155.20	192.168.2.6
Dec 9, 2024 11:08:32.802849054 CET	443	49756	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.803246021 CET	49756	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.803257942 CET	443	49756	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.803699017 CET	49756	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.803704977 CET	443	49756	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.845577955 CET	443	49752	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.845654964 CET	443	49752	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.845709085 CET	49752	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.845876932 CET	49752	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.845906973 CET	443	49752	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.845922947 CET	49752	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.845930099 CET	443	49752	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.846096039 CET	443	49753	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.846174002 CET	443	49753	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.846216917 CET	49753	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.846314907 CET	49753	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.846327066 CET	443	49753	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.846338987 CET	49753	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.846345901 CET	443	49753	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.848603964 CET	49760	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.848644018 CET	443	49760	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.848673105 CET	49761	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.848707914 CET	49760	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.848712921 CET	443	49761	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.848763943 CET	49761	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.848854065 CET	49760	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.848864079 CET	443	49760	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:32.848939896 CET	49761	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:32.848951101 CET	443	49761	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:33.075510979 CET	49750	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:33.075531006 CET	443	49750	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:33.236680031 CET	443	49756	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:33.236751080 CET	443	49756	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:33.236838102 CET	49756	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:33.237083912 CET	49756	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:33.237135887 CET	443	49756	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:33.237168074 CET	49756	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:33.237184048 CET	443	49756	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:33.240319014 CET	49762	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:33.240355968 CET	443	49762	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:33.240402937 CET	49762	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:33.240595102 CET	49762	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:33.240605116 CET	443	49762	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.492335081 CET	443	49758	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.492934942 CET	49758	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.492963076 CET	443	49758	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.495202065 CET	49758	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.495208025 CET	443	49758	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.495812893 CET	443	49759	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.496347904 CET	49759	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.496370077 CET	443	49759	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.497833014 CET	49759	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.497838020 CET	443	49759	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.513437986 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:34.513479948 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:34.513537884 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:34.513768911 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:34.513780117 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:34.571657896 CET	443	49760	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.571783066 CET	443	49761	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.572244883 CET	49761	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.572271109 CET	443	49761	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.572314024 CET	49760	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.572333097 CET	443	49760	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.572774887 CET	49761	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.572781086 CET	443	49761	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.572813034 CET	49760	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.572818995 CET	443	49760	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.608817101 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:34.608853102 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:34.608926058 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:34.610030890 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:34.610039949 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:34.927830935 CET	443	49758	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.927903891 CET	443	49758	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.927958012 CET	49758	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.928222895 CET	49758	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.928245068 CET	443	49758	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.928256035 CET	49758	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.928261995 CET	443	49758	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.929069042 CET	443	49759	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.929141998 CET	443	49759	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.929405928 CET	49759	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.930310965 CET	49759	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.930310965 CET	49759	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.930325985 CET	443	49759	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.930336952 CET	443	49759	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.933396101 CET	49765	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.933430910 CET	443	49765	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.933706999 CET	49765	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.934040070 CET	49766	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.934081078 CET	443	49766	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.934165955 CET	49766	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.934290886 CET	49766	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.934307098 CET	443	49766	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.934370995 CET	49765	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.934381962 CET	443	49765	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.956823111 CET	443	49762	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.957314968 CET	49762	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.957354069 CET	443	49762	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:34.957963943 CET	49762	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:34.957969904 CET	443	49762	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.004901886 CET	443	49761	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.004985094 CET	443	49761	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.005054951 CET	49761	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.005251884 CET	49761	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.005270958 CET	443	49761	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.005296946 CET	49761	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.005302906 CET	443	49761	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.006778955 CET	443	49760	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.006846905 CET	443	49760	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.006911993 CET	49760	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.007922888 CET	49760	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.007944107 CET	443	49760	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.008282900 CET	49767	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.008313894 CET	443	49767	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.008595943 CET	49767	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.008595943 CET	49767	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.008630991 CET	443	49767	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.010688066 CET	49768	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.010725021 CET	443	49768	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.011020899 CET	49768	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.011149883 CET	49768	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.011162043 CET	443	49768	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.394778013 CET	443	49762	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.394864082 CET	443	49762	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.394927025 CET	49762	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.395134926 CET	49762	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.395152092 CET	443	49762	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.395165920 CET	49762	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.395172119 CET	443	49762	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.398056984 CET	49770	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.398107052 CET	443	49770	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.398200035 CET	49770	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.398341894 CET	49770	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:35.398354053 CET	443	49770	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:35.724093914 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:35.724447966 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:35.724479914 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:35.725543022 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:35.725604057 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:35.732016087 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:35.732223988 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:35.732229948 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:35.732306957 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:35.772464991 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:35.772486925 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:35.819341898 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:36.172436953 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:36.172519922 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:36.172590017 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:36.198087931 CET	49763	443	192.168.2.6	23.47.168.24
Dec 9, 2024 11:08:36.198118925 CET	443	49763	23.47.168.24	192.168.2.6
Dec 9, 2024 11:08:36.274445057 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.274542093 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.276603937 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.276617050 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.276889086 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.319864035 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.339339018 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.387326002 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.616183043 CET	443	49768	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.616852999 CET	49768	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:36.616882086 CET	443	49768	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.617300987 CET	49768	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:36.617305994 CET	443	49768	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.665150881 CET	443	49765	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.665178061 CET	443	49766	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.665666103 CET	49765	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:36.665685892 CET	443	49765	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.666254997 CET	49766	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:36.666280031 CET	443	49766	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.666547060 CET	49765	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:36.666555882 CET	443	49765	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.666680098 CET	49766	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:36.666688919 CET	443	49766	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.803340912 CET	443	49767	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.804153919 CET	49767	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:36.804178953 CET	443	49767	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.804502010 CET	49767	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:36.804512024 CET	443	49767	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:36.937874079 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.937901974 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.937912941 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.937936068 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.938015938 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.938047886 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.938047886 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.938121080 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.938163042 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.938218117 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.958762884 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.958863974 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.958909988 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.959111929 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.959738016 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.959789038 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:36.959820032 CET	49764	443	192.168.2.6	172.202.163.200
Dec 9, 2024 11:08:36.959836006 CET	443	49764	172.202.163.200	192.168.2.6
Dec 9, 2024 11:08:37.049669981 CET	443	49768	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.049747944 CET	443	49768	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.057372093 CET	49768	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.066560984 CET	49768	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.066560984 CET	49768	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.066607952 CET	443	49768	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.066622972 CET	443	49768	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.073191881 CET	49771	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.073249102 CET	443	49771	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.073350906 CET	49771	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.073574066 CET	49771	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.073590994 CET	443	49771	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.099875927 CET	443	49766	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.099962950 CET	443	49766	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.100016117 CET	49766	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.100394964 CET	49766	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.100394964 CET	49766	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.100411892 CET	443	49766	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.100421906 CET	443	49766	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.100733995 CET	443	49765	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.100804090 CET	443	49765	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.101157904 CET	49765	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.101434946 CET	49765	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.101459026 CET	443	49765	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.101490021 CET	49765	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.101502895 CET	443	49765	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.104816914 CET	49772	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.104854107 CET	443	49772	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.104964972 CET	49772	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.105158091 CET	49772	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.105169058 CET	443	49772	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.106225967 CET	49773	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.106272936 CET	443	49773	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.106513977 CET	49773	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.106914043 CET	49773	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.106926918 CET	443	49773	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.124018908 CET	443	49770	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.124499083 CET	49770	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.124541044 CET	443	49770	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.124978065 CET	49770	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.124984026 CET	443	49770	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.237108946 CET	443	49767	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.237176895 CET	443	49767	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.237400055 CET	49767	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.237433910 CET	49767	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.237433910 CET	49767	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.237457991 CET	443	49767	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.237468004 CET	443	49767	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.240586996 CET	49774	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.240632057 CET	443	49774	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.240852118 CET	49774	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.240852118 CET	49774	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.240883112 CET	443	49774	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.558360100 CET	443	49770	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.558444023 CET	443	49770	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.558665991 CET	49770	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.558712959 CET	49770	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.558712959 CET	49770	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.558737993 CET	443	49770	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.558752060 CET	443	49770	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.561244011 CET	49775	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.561297894 CET	443	49775	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:37.561542034 CET	49775	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.561542034 CET	49775	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:37.561578035 CET	443	49775	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.806996107 CET	443	49771	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.807574987 CET	49771	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:38.807602882 CET	443	49771	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.808032990 CET	49771	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:38.808037996 CET	443	49771	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.823812962 CET	443	49772	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.824003935 CET	443	49773	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.824244022 CET	49772	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:38.824270964 CET	443	49772	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.824362993 CET	49773	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:38.824384928 CET	443	49773	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.824719906 CET	49772	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:38.824731112 CET	443	49772	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.824955940 CET	49773	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:38.824960947 CET	443	49773	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.957078934 CET	443	49774	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.957557917 CET	49774	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:38.957585096 CET	443	49774	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:38.958039999 CET	49774	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:38.958048105 CET	443	49774	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.245857954 CET	443	49771	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.245939016 CET	443	49771	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.246009111 CET	49771	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.246201992 CET	49771	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.246232033 CET	443	49771	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.246248960 CET	49771	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.246257067 CET	443	49771	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.249003887 CET	49776	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.249032021 CET	443	49776	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.249100924 CET	49776	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.249284983 CET	49776	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.249296904 CET	443	49776	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.257412910 CET	443	49772	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.257477045 CET	443	49772	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.257600069 CET	49772	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.257642984 CET	49772	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.257663012 CET	443	49772	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.257674932 CET	49772	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.257680893 CET	443	49772	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.257992983 CET	443	49773	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.258065939 CET	443	49773	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.258126974 CET	49773	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.258181095 CET	49773	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.258198977 CET	443	49773	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.258209944 CET	49773	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.258215904 CET	443	49773	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.259864092 CET	49777	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.259893894 CET	443	49777	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.260066032 CET	49778	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.260082960 CET	443	49778	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.260092974 CET	49777	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.260127068 CET	49778	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.260234118 CET	49777	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.260250092 CET	443	49777	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.260270119 CET	49778	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.260283947 CET	443	49778	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.279357910 CET	443	49775	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.279717922 CET	49775	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.279742002 CET	443	49775	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.280147076 CET	49775	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.280150890 CET	443	49775	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.392765999 CET	443	49774	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.392836094 CET	443	49774	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.392901897 CET	49774	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.393174887 CET	49774	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.393193960 CET	443	49774	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.393246889 CET	49774	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.393254042 CET	443	49774	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.396125078 CET	49779	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.396167994 CET	443	49779	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.396343946 CET	49779	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.396506071 CET	49779	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.396528006 CET	443	49779	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.715154886 CET	443	49775	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.715238094 CET	443	49775	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.715302944 CET	49775	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.715672016 CET	49775	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.715704918 CET	443	49775	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.715723038 CET	49775	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.715728998 CET	443	49775	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.719743967 CET	49780	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.719777107 CET	443	49780	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:39.719896078 CET	49780	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.720253944 CET	49780	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:39.720267057 CET	443	49780	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:40.962622881 CET	443	49776	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:40.963164091 CET	49776	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:40.963197947 CET	443	49776	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:40.963598967 CET	49776	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:40.963603973 CET	443	49776	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:40.974524021 CET	443	49778	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:40.974947929 CET	49778	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:40.974972963 CET	443	49778	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:40.975239038 CET	443	49777	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:40.975343943 CET	49778	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:40.975352049 CET	443	49778	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:40.975558996 CET	49777	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:40.975584984 CET	443	49777	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:40.976044893 CET	49777	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:40.976051092 CET	443	49777	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.111488104 CET	443	49779	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.112031937 CET	49779	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.112066984 CET	443	49779	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.112482071 CET	49779	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.112488031 CET	443	49779	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.395788908 CET	443	49776	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.395876884 CET	443	49776	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.395941019 CET	49776	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.396131992 CET	49776	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.396157980 CET	443	49776	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.396174908 CET	49776	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.396179914 CET	443	49776	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.399419069 CET	49781	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.399467945 CET	443	49781	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.399527073 CET	49781	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.399709940 CET	49781	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.399719954 CET	443	49781	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.408968925 CET	443	49778	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.409033060 CET	443	49778	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.409133911 CET	49778	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.409236908 CET	49778	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.409245014 CET	443	49778	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.409264088 CET	49778	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.409269094 CET	443	49778	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.409548998 CET	443	49777	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.409616947 CET	443	49777	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.409713030 CET	49777	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.409743071 CET	49777	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.409764051 CET	443	49777	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.409776926 CET	49777	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.409782887 CET	443	49777	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.412278891 CET	49782	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.412322998 CET	443	49782	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.412373066 CET	49783	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.412398100 CET	443	49783	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.412408113 CET	49782	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.412442923 CET	49783	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.412554979 CET	49782	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.412574053 CET	443	49782	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.412652016 CET	49783	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.412664890 CET	443	49783	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.437875986 CET	443	49780	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.438347101 CET	49780	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.438381910 CET	443	49780	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.438802958 CET	49780	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.438813925 CET	443	49780	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.545603037 CET	443	49779	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.545686960 CET	443	49779	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.545741081 CET	49779	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.545902014 CET	49779	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.545921087 CET	443	49779	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.545933008 CET	49779	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.545938969 CET	443	49779	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.548665047 CET	49784	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.548712969 CET	443	49784	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.548794985 CET	49784	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.549001932 CET	49784	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.549015045 CET	443	49784	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.871385098 CET	443	49780	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.871452093 CET	443	49780	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.871983051 CET	49780	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.875998020 CET	49780	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.875998020 CET	49780	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.876024961 CET	443	49780	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.876039982 CET	443	49780	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.878549099 CET	49785	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.878576040 CET	443	49785	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:41.878776073 CET	49785	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.878776073 CET	49785	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:41.878808022 CET	443	49785	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.272502899 CET	443	49782	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.272669077 CET	443	49781	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.272682905 CET	443	49783	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.273159027 CET	49782	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.273194075 CET	443	49782	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.273365974 CET	49781	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.273400068 CET	443	49781	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.273660898 CET	49782	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.273667097 CET	443	49782	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.273878098 CET	49781	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.273888111 CET	443	49781	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.273967028 CET	49783	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.273977041 CET	443	49783	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.274323940 CET	49783	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.274328947 CET	443	49783	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.391323090 CET	443	49784	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.392030001 CET	49784	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.392045975 CET	443	49784	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.392539024 CET	49784	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.392544985 CET	443	49784	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.658694029 CET	443	49785	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.659332037 CET	49785	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.659358978 CET	443	49785	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.659924984 CET	49785	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.659935951 CET	443	49785	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.707911015 CET	443	49782	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.708007097 CET	443	49782	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.708086014 CET	49782	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.708208084 CET	49782	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.708235979 CET	443	49782	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.708250999 CET	49782	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.708256006 CET	443	49782	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.708630085 CET	443	49783	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.708707094 CET	443	49783	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.708759069 CET	49783	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.709007025 CET	49783	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.709026098 CET	443	49781	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.709032059 CET	443	49783	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.709044933 CET	49783	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.709050894 CET	443	49783	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.709094048 CET	443	49781	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.709306955 CET	49781	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.709764004 CET	49781	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.709774017 CET	443	49781	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.712601900 CET	49786	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.712641001 CET	443	49786	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.712713003 CET	49786	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.712858915 CET	49786	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.712871075 CET	443	49786	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.712999105 CET	49787	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.713041067 CET	443	49787	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.713109016 CET	49787	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.713341951 CET	49787	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.713373899 CET	443	49787	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.713886023 CET	49788	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.713923931 CET	443	49788	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.713999987 CET	49788	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.714101076 CET	49788	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.714112997 CET	443	49788	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.825799942 CET	443	49784	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.825876951 CET	443	49784	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.826008081 CET	49784	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.826126099 CET	49784	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.826158047 CET	443	49784	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.826174974 CET	49784	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.826180935 CET	443	49784	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.829296112 CET	49789	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.829330921 CET	443	49789	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:43.829417944 CET	49789	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.829583883 CET	49789	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:43.829593897 CET	443	49789	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:44.092649937 CET	443	49785	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:44.092725992 CET	443	49785	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:44.092897892 CET	49785	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:44.092933893 CET	49785	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:44.092952967 CET	443	49785	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:44.092973948 CET	49785	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:44.092978954 CET	443	49785	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:44.095530033 CET	49790	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:44.095576048 CET	443	49790	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:44.095632076 CET	49790	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:44.095789909 CET	49790	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:44.095799923 CET	443	49790	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:44.482057095 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:44.482115984 CET	443	49791	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:44.482247114 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:44.482868910 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:44.482878923 CET	443	49791	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:45.426165104 CET	443	49788	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.426255941 CET	443	49786	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.428148031 CET	49786	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.428174973 CET	443	49786	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.428631067 CET	49786	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.428637028 CET	443	49786	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.429255009 CET	49788	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.429274082 CET	443	49788	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.430000067 CET	49788	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.430006981 CET	443	49788	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.435678959 CET	443	49787	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.440079927 CET	49787	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.440105915 CET	443	49787	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.440534115 CET	49787	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.440543890 CET	443	49787	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.544308901 CET	443	49789	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.544898987 CET	49789	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.544915915 CET	443	49789	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.545449018 CET	49789	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.545455933 CET	443	49789	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.809138060 CET	443	49790	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.855134010 CET	49790	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.860763073 CET	443	49786	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.860842943 CET	443	49786	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.860902071 CET	49786	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.861263990 CET	443	49788	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.861329079 CET	443	49788	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.861418962 CET	49788	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.867392063 CET	49790	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.867403984 CET	443	49790	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.867837906 CET	49790	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.867842913 CET	443	49790	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.869688988 CET	443	49787	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.869760990 CET	443	49787	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.869910002 CET	49787	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.871901035 CET	49787	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.871932030 CET	443	49787	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.871948004 CET	49787	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.871953964 CET	443	49787	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.887167931 CET	49786	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.887223005 CET	443	49786	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.887252092 CET	49786	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.887259960 CET	443	49786	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.889796972 CET	49788	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.889797926 CET	49788	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.889821053 CET	443	49788	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.889832020 CET	443	49788	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.940846920 CET	49792	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.940918922 CET	443	49792	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.941011906 CET	49792	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.942804098 CET	49793	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.942862988 CET	443	49793	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.942917109 CET	49793	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.955971956 CET	49792	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.956020117 CET	443	49792	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.960166931 CET	49794	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.960211992 CET	443	49794	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.960283041 CET	49794	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.961909056 CET	49794	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.961925030 CET	443	49794	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.970501900 CET	49793	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.970535994 CET	443	49793	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.977663994 CET	443	49789	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.977744102 CET	443	49789	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.977813005 CET	49789	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.978131056 CET	49789	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.978131056 CET	49789	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:45.978147030 CET	443	49789	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:45.978154898 CET	443	49789	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:46.242646933 CET	443	49790	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:46.242714882 CET	443	49790	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:46.242883921 CET	49790	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:46.249810934 CET	49795	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:46.249867916 CET	443	49795	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:46.249928951 CET	49795	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:46.278814077 CET	49790	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:46.278860092 CET	443	49790	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:46.278893948 CET	49790	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:46.278901100 CET	443	49790	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:46.316972017 CET	49795	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:46.316994905 CET	443	49795	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:46.520210981 CET	49798	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:08:46.521269083 CET	49799	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:08:46.541239977 CET	49801	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:46.541276932 CET	443	49801	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:46.541351080 CET	49801	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:46.541662931 CET	49801	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:46.541680098 CET	443	49801	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:46.639838934 CET	80	49798	142.250.181.69	192.168.2.6
Dec 9, 2024 11:08:46.640593052 CET	80	49799	142.250.181.69	192.168.2.6
Dec 9, 2024 11:08:46.640815973 CET	49798	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:08:46.641880989 CET	49799	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:08:46.711030006 CET	443	49791	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:46.711183071 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:46.942728996 CET	49802	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:08:46.960519075 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:46.960550070 CET	443	49791	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:46.960921049 CET	443	49791	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:46.961164951 CET	49799	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:08:47.017353058 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:47.062269926 CET	80	49802	142.250.181.69	192.168.2.6
Dec 9, 2024 11:08:47.062376022 CET	49802	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:08:47.080838919 CET	80	49799	142.250.181.69	192.168.2.6
Dec 9, 2024 11:08:47.417732954 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:47.417767048 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:47.417785883 CET	443	49791	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:47.418035030 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:47.459345102 CET	443	49791	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:47.671911001 CET	443	49792	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:47.672358990 CET	49792	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:47.672389984 CET	443	49792	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:47.672868967 CET	49792	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:47.672873974 CET	443	49792	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:47.685822010 CET	443	49793	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:47.686281919 CET	49793	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:47.686305046 CET	443	49793	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:47.687246084 CET	49793	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:47.687251091 CET	443	49793	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:47.688646078 CET	443	49794	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:47.689062119 CET	49794	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:47.689090014 CET	443	49794	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:47.689831972 CET	49794	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:47.689836979 CET	443	49794	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:47.962927103 CET	443	49791	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:47.963181019 CET	443	49791	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:47.963242054 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:47.963395119 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:47.963395119 CET	49791	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:08:47.963414907 CET	443	49791	20.198.118.190	192.168.2.6
Dec 9, 2024 11:08:48.031810045 CET	443	49795	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.032202959 CET	49795	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.032233000 CET	443	49795	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.032763958 CET	49795	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.032769918 CET	443	49795	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.085547924 CET	443	49801	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.085931063 CET	49801	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.085969925 CET	443	49801	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.086601973 CET	49801	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.086606026 CET	443	49801	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.096668959 CET	80	49799	142.250.181.69	192.168.2.6
Dec 9, 2024 11:08:48.106368065 CET	443	49792	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.106437922 CET	443	49792	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.106493950 CET	49792	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.107040882 CET	49792	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.107060909 CET	443	49792	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.110868931 CET	49804	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.110903025 CET	443	49804	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.111052036 CET	49804	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.111383915 CET	49804	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.111397028 CET	443	49804	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.120944023 CET	443	49793	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.121006966 CET	443	49793	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.121056080 CET	49793	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.121212006 CET	49793	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.121237993 CET	443	49793	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.121267080 CET	49793	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.121274948 CET	443	49793	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.122210979 CET	443	49794	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.122270107 CET	443	49794	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.122332096 CET	49794	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.122457981 CET	49794	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.122467041 CET	443	49794	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.122488976 CET	49794	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.122494936 CET	443	49794	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.123963118 CET	49805	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.124006033 CET	443	49805	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.124080896 CET	49805	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.124226093 CET	49805	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.124239922 CET	443	49805	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.129064083 CET	49806	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.129081964 CET	443	49806	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.129146099 CET	49806	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.129328966 CET	49806	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.129345894 CET	443	49806	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.139622927 CET	49799	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:08:48.236982107 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:48.237015009 CET	443	49807	172.217.21.37	192.168.2.6
Dec 9, 2024 11:08:48.237149954 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:48.237790108 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:48.237802029 CET	443	49807	172.217.21.37	192.168.2.6
Dec 9, 2024 11:08:48.465497017 CET	443	49795	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.465599060 CET	443	49795	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.465799093 CET	49795	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.465862036 CET	49795	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.465886116 CET	443	49795	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.465902090 CET	49795	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.465909958 CET	443	49795	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.469686031 CET	49808	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.469744921 CET	443	49808	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.469927073 CET	49808	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.470478058 CET	49808	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.470493078 CET	443	49808	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.505718946 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:48.505768061 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:48.505842924 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:48.513000965 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:48.513036966 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:48.534415960 CET	443	49801	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.534495115 CET	443	49801	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.534754038 CET	49801	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.534787893 CET	49801	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.534806013 CET	443	49801	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.534816027 CET	49801	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.534821987 CET	443	49801	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.537560940 CET	49810	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.537584066 CET	443	49810	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.537897110 CET	49810	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.538014889 CET	49810	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:48.538026094 CET	443	49810	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:48.881412029 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:48.881470919 CET	443	49811	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:48.881541014 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:48.881975889 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:48.881990910 CET	443	49811	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:49.824980021 CET	443	49804	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:49.837204933 CET	443	49805	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:49.846585035 CET	443	49806	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:49.934092045 CET	443	49807	172.217.21.37	192.168.2.6
Dec 9, 2024 11:08:49.976649046 CET	49805	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:49.979953051 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:50.006562948 CET	49804	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.006591082 CET	443	49804	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.007038116 CET	49804	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.007046938 CET	443	49804	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.007952929 CET	49805	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.007985115 CET	443	49805	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.008414030 CET	49805	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.008421898 CET	443	49805	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.009124994 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:50.009130955 CET	443	49807	172.217.21.37	192.168.2.6
Dec 9, 2024 11:08:50.009902000 CET	49806	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.009929895 CET	443	49806	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.010303974 CET	49806	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.010313034 CET	443	49806	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.010488033 CET	443	49807	172.217.21.37	192.168.2.6
Dec 9, 2024 11:08:50.010576963 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:50.013070107 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:50.013151884 CET	443	49807	172.217.21.37	192.168.2.6
Dec 9, 2024 11:08:50.013396978 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:50.013406992 CET	443	49807	172.217.21.37	192.168.2.6
Dec 9, 2024 11:08:50.076376915 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:50.184643984 CET	443	49808	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.185494900 CET	49808	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.185537100 CET	443	49808	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.186084986 CET	49808	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.186091900 CET	443	49808	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.246352911 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:50.246470928 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:50.251979113 CET	443	49810	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.272255898 CET	49810	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.272277117 CET	443	49810	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.272742033 CET	49810	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.272747040 CET	443	49810	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.286890984 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:50.286917925 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:50.287239075 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:50.287297964 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:50.297816038 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:50.297856092 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:50.370851994 CET	443	49804	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.370940924 CET	443	49804	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.371011019 CET	49804	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.371573925 CET	49804	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.371597052 CET	443	49804	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.371608973 CET	49804	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.371614933 CET	443	49804	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.373275995 CET	443	49805	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.373358011 CET	443	49805	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.373707056 CET	49805	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.374370098 CET	49805	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.374392033 CET	443	49805	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.374402046 CET	49805	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.374408007 CET	443	49805	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.374521971 CET	443	49806	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.374614000 CET	443	49806	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.374670982 CET	49806	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.375341892 CET	49812	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.375366926 CET	443	49812	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.375550032 CET	49806	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.375550032 CET	49806	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.375559092 CET	443	49806	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.375565052 CET	49812	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.375566959 CET	443	49806	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.376070976 CET	49812	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.376084089 CET	443	49812	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.377110004 CET	49813	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.377137899 CET	443	49813	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.377398968 CET	49813	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.377512932 CET	49813	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.377530098 CET	443	49813	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.377556086 CET	49814	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.377568007 CET	443	49814	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.377616882 CET	49814	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.377717018 CET	49814	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.377728939 CET	443	49814	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.496915102 CET	443	49811	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:50.496990919 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:50.497814894 CET	443	49811	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:50.497869968 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:50.502805948 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:50.502818108 CET	443	49811	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:50.503139019 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:50.503146887 CET	443	49811	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:50.503253937 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:50.547334909 CET	443	49811	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:50.619158030 CET	443	49808	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.619224072 CET	443	49808	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.619431019 CET	49808	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.619653940 CET	49808	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.619676113 CET	443	49808	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.622684956 CET	49815	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.622733116 CET	443	49815	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.622946024 CET	49815	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.623162985 CET	49815	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.623176098 CET	443	49815	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.692773104 CET	443	49810	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.692846060 CET	443	49810	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.692909956 CET	49810	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.693113089 CET	49810	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.693140030 CET	443	49810	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.693162918 CET	49810	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.693170071 CET	443	49810	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.696273088 CET	49816	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.696324110 CET	443	49816	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.696434975 CET	49816	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.696633101 CET	49816	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:50.696644068 CET	443	49816	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:50.813323975 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:50.813359022 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:50.813447952 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:50.813479900 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:50.813519955 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:50.813519955 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:50.813582897 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:50.813636065 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:50.813672066 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:50.813698053 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:50.816534042 CET	49809	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:50.816550970 CET	443	49809	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:50.914832115 CET	443	49807	172.217.21.37	192.168.2.6
Dec 9, 2024 11:08:50.914908886 CET	443	49807	172.217.21.37	192.168.2.6
Dec 9, 2024 11:08:50.915020943 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:50.915692091 CET	49807	443	192.168.2.6	172.217.21.37
Dec 9, 2024 11:08:50.915713072 CET	443	49807	172.217.21.37	192.168.2.6
Dec 9, 2024 11:08:50.966941118 CET	49818	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:08:50.966988087 CET	443	49818	142.250.181.68	192.168.2.6
Dec 9, 2024 11:08:50.967173100 CET	49818	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:08:50.967735052 CET	49818	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:08:50.967750072 CET	443	49818	142.250.181.68	192.168.2.6
Dec 9, 2024 11:08:50.970923901 CET	443	49811	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:50.970998049 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:50.971009970 CET	443	49811	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:50.971071959 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:50.971107006 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:50.971127033 CET	443	49811	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:50.971136093 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:50.971173048 CET	49811	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:51.088578939 CET	49819	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:51.088630915 CET	443	49819	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:51.088793039 CET	49819	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:51.089072943 CET	49819	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:51.089088917 CET	443	49819	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:51.117235899 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:51.117295980 CET	443	49820	2.16.158.187	192.168.2.6
Dec 9, 2024 11:08:51.117357969 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:51.117736101 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:51.117758989 CET	443	49820	2.16.158.187	192.168.2.6
Dec 9, 2024 11:08:52.092413902 CET	443	49813	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.092475891 CET	443	49812	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.092860937 CET	443	49814	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.093055964 CET	49813	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.093087912 CET	443	49813	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.093663931 CET	49812	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.093703032 CET	443	49812	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.093987942 CET	49813	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.094003916 CET	443	49813	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.094139099 CET	49812	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.094145060 CET	443	49812	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.094270945 CET	49814	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.094288111 CET	443	49814	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.094624996 CET	49814	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.094629049 CET	443	49814	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.338651896 CET	443	49815	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.339150906 CET	49815	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.339194059 CET	443	49815	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.339603901 CET	49815	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.339611053 CET	443	49815	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.410145998 CET	443	49816	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.410798073 CET	49816	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.410831928 CET	443	49816	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.411266088 CET	49816	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.411271095 CET	443	49816	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.526005030 CET	443	49812	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.526087046 CET	443	49812	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.526207924 CET	49812	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.526354074 CET	49812	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.526375055 CET	443	49812	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.526386023 CET	49812	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.526396990 CET	443	49812	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.526757956 CET	443	49814	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.526827097 CET	443	49814	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.526949883 CET	49814	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.527232885 CET	49814	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.527237892 CET	443	49814	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.527250051 CET	49814	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.527252913 CET	443	49814	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.528646946 CET	443	49813	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.528718948 CET	443	49813	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.528898001 CET	49813	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.529428005 CET	49821	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.529469013 CET	443	49821	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.529495001 CET	49822	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.529529095 CET	49821	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.529536963 CET	443	49822	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.529583931 CET	49822	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.529645920 CET	49813	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.529664040 CET	443	49813	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.529676914 CET	49813	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.529681921 CET	443	49813	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.529800892 CET	49822	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.529813051 CET	443	49822	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.529855967 CET	49821	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.529869080 CET	443	49821	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.543107986 CET	49823	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.543128014 CET	443	49823	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.543225050 CET	49823	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.543495893 CET	49823	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.543508053 CET	443	49823	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.660252094 CET	443	49818	142.250.181.68	192.168.2.6
Dec 9, 2024 11:08:52.660526991 CET	49818	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:08:52.660547018 CET	443	49818	142.250.181.68	192.168.2.6
Dec 9, 2024 11:08:52.661618948 CET	443	49818	142.250.181.68	192.168.2.6
Dec 9, 2024 11:08:52.661684036 CET	49818	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:08:52.662801981 CET	49818	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:08:52.662863970 CET	443	49818	142.250.181.68	192.168.2.6
Dec 9, 2024 11:08:52.702786922 CET	49818	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:08:52.702795029 CET	443	49818	142.250.181.68	192.168.2.6
Dec 9, 2024 11:08:52.711545944 CET	443	49820	2.16.158.187	192.168.2.6
Dec 9, 2024 11:08:52.711625099 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:52.714823008 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:52.714828968 CET	443	49820	2.16.158.187	192.168.2.6
Dec 9, 2024 11:08:52.715049028 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:52.715053082 CET	443	49820	2.16.158.187	192.168.2.6
Dec 9, 2024 11:08:52.715070009 CET	443	49820	2.16.158.187	192.168.2.6
Dec 9, 2024 11:08:52.715131998 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:52.749038935 CET	49818	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:08:52.771927118 CET	443	49815	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.772011042 CET	443	49815	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.772053957 CET	49815	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.772284985 CET	49815	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.772300005 CET	443	49815	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.772315979 CET	49815	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.772329092 CET	443	49815	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.775229931 CET	49825	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.775262117 CET	443	49825	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.775336981 CET	49825	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.775536060 CET	49825	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.775554895 CET	443	49825	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.821928978 CET	443	49819	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:52.822024107 CET	49819	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:52.822474957 CET	49819	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:52.822485924 CET	443	49819	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:52.822771072 CET	49819	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:52.822776079 CET	443	49819	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:52.843323946 CET	443	49816	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.843400955 CET	443	49816	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.843743086 CET	49816	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.843852997 CET	49816	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.843874931 CET	443	49816	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.843889952 CET	49816	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.843895912 CET	443	49816	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.846936941 CET	49826	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.846983910 CET	443	49826	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:52.847059965 CET	49826	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.848527908 CET	49826	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:52.848542929 CET	443	49826	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:53.218713045 CET	443	49819	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:53.218729973 CET	443	49819	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:53.218802929 CET	49819	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:53.218806982 CET	443	49819	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:53.218853951 CET	49819	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:53.219552994 CET	49819	443	192.168.2.6	20.223.36.55
Dec 9, 2024 11:08:53.219578981 CET	443	49819	20.223.36.55	192.168.2.6
Dec 9, 2024 11:08:53.625559092 CET	443	49820	2.16.158.187	192.168.2.6
Dec 9, 2024 11:08:53.625638008 CET	443	49820	2.16.158.187	192.168.2.6
Dec 9, 2024 11:08:53.625704050 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:53.625945091 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:53.625968933 CET	443	49820	2.16.158.187	192.168.2.6
Dec 9, 2024 11:08:53.625982046 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:53.626177073 CET	49820	443	192.168.2.6	2.16.158.187
Dec 9, 2024 11:08:53.628325939 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:53.628376961 CET	443	49829	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:53.628516912 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:53.628743887 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:53.628763914 CET	443	49829	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:54.245863914 CET	443	49821	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.246143103 CET	443	49822	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.246397018 CET	49821	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.246440887 CET	443	49821	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.246623039 CET	49822	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.246648073 CET	443	49822	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.247081995 CET	49822	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.247081041 CET	49821	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.247087955 CET	443	49822	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.247095108 CET	443	49821	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.263214111 CET	443	49823	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.263673067 CET	49823	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.263695955 CET	443	49823	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.264254093 CET	49823	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.264257908 CET	443	49823	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.489424944 CET	443	49825	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.490143061 CET	49825	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.490197897 CET	443	49825	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.490590096 CET	49825	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.490596056 CET	443	49825	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.561404943 CET	443	49826	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.564814091 CET	49826	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.564851046 CET	443	49826	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.565912008 CET	49826	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.565917969 CET	443	49826	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.679599047 CET	443	49821	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.679687023 CET	443	49821	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.679724932 CET	443	49822	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.679784060 CET	49821	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.679788113 CET	443	49822	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.679914951 CET	49822	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.679974079 CET	49821	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.679974079 CET	49821	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.679996014 CET	443	49821	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.680007935 CET	443	49821	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.680223942 CET	49822	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.680223942 CET	49822	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.680244923 CET	443	49822	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.680257082 CET	443	49822	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.683114052 CET	49830	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.683163881 CET	443	49830	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.683232069 CET	49830	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.683358908 CET	49831	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.683407068 CET	443	49831	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.683468103 CET	49831	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.683511019 CET	49830	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.683523893 CET	443	49830	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.683635950 CET	49831	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.683653116 CET	443	49831	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.696737051 CET	443	49823	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.696794987 CET	443	49823	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.696962118 CET	49823	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.697019100 CET	49823	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.697030067 CET	443	49823	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.697066069 CET	49823	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.697072029 CET	443	49823	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.699167013 CET	49832	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.699203014 CET	443	49832	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.699306011 CET	49832	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.699439049 CET	49832	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.699454069 CET	443	49832	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.922471046 CET	443	49825	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.922534943 CET	443	49825	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.922641039 CET	49825	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.922854900 CET	49825	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.922890902 CET	443	49825	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.922933102 CET	49825	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.922939062 CET	443	49825	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.926050901 CET	49833	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.926095963 CET	443	49833	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.926202059 CET	49833	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.926333904 CET	49833	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.926347971 CET	443	49833	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.994534969 CET	443	49826	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.994613886 CET	443	49826	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.994745970 CET	49826	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.994827986 CET	49826	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.994843960 CET	443	49826	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.994885921 CET	49826	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.994891882 CET	443	49826	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.997750998 CET	49835	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.997781038 CET	443	49835	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:54.997900963 CET	49835	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.998095989 CET	49835	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:54.998106956 CET	443	49835	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:55.154886961 CET	443	49829	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:55.155158043 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:55.155745983 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:55.155760050 CET	443	49829	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:55.156058073 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:55.156065941 CET	443	49829	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:55.600651979 CET	443	49829	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:55.600739002 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:55.600780010 CET	443	49829	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:55.600833893 CET	443	49829	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:55.600848913 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:55.600897074 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:55.600897074 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:55.600907087 CET	443	49829	150.171.27.10	192.168.2.6
Dec 9, 2024 11:08:55.600955963 CET	49829	443	192.168.2.6	150.171.27.10
Dec 9, 2024 11:08:56.397744894 CET	443	49831	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.397936106 CET	443	49830	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.398219109 CET	49831	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.398232937 CET	443	49831	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.398636103 CET	49830	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.398655891 CET	443	49830	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.398689032 CET	49831	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.398693085 CET	443	49831	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.399221897 CET	49830	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.399228096 CET	443	49830	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.414684057 CET	443	49832	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.415364981 CET	49832	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.415386915 CET	443	49832	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.416323900 CET	49832	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.416330099 CET	443	49832	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.641266108 CET	443	49833	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.642157078 CET	49833	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.642193079 CET	443	49833	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.642812014 CET	49833	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.642817974 CET	443	49833	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.710454941 CET	443	49835	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.711354017 CET	49835	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.711386919 CET	443	49835	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.711853027 CET	49835	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.711858988 CET	443	49835	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.834522009 CET	443	49830	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.834604979 CET	443	49830	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.834737062 CET	49830	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.834975004 CET	49830	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.834994078 CET	443	49830	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.835005045 CET	49830	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.835010052 CET	443	49830	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.835330963 CET	443	49831	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.835392952 CET	443	49831	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.835535049 CET	49831	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.835587025 CET	49831	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.835604906 CET	443	49831	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.835616112 CET	49831	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.835623980 CET	443	49831	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.839055061 CET	49836	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.839092016 CET	443	49836	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.839214087 CET	49836	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.839334965 CET	49837	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.839370966 CET	443	49837	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.839456081 CET	49837	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.839682102 CET	49837	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.839694977 CET	443	49837	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.839715004 CET	49836	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.839725018 CET	443	49836	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.848351002 CET	443	49832	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.848412991 CET	443	49832	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.848562002 CET	49832	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.848597050 CET	49832	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.848597050 CET	49832	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.848611116 CET	443	49832	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.848619938 CET	443	49832	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.850956917 CET	49838	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.850974083 CET	443	49838	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:56.851057053 CET	49838	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.851273060 CET	49838	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:56.851284981 CET	443	49838	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.074096918 CET	443	49833	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.074166059 CET	443	49833	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.074242115 CET	49833	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.074532986 CET	49833	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.074552059 CET	443	49833	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.074563026 CET	49833	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.074568987 CET	443	49833	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.078442097 CET	49839	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.078473091 CET	443	49839	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.078732967 CET	49839	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.078977108 CET	49839	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.078991890 CET	443	49839	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.143990993 CET	443	49835	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.144048929 CET	443	49835	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.144108057 CET	49835	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.189240932 CET	49835	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.189254999 CET	443	49835	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.189268112 CET	49835	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.189274073 CET	443	49835	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.192766905 CET	49840	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.192785978 CET	443	49840	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:57.192852974 CET	49840	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.193800926 CET	49840	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:57.193814993 CET	443	49840	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.617610931 CET	443	49837	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.617651939 CET	443	49836	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.618141890 CET	443	49838	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.661940098 CET	49837	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.661955118 CET	49836	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.661955118 CET	49838	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.794131041 CET	443	49839	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.843213081 CET	49839	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.843250036 CET	443	49839	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.843828917 CET	49839	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.843835115 CET	443	49839	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.844105959 CET	49837	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.844119072 CET	443	49837	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.844707966 CET	49837	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.844712973 CET	443	49837	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.844973087 CET	49836	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.844996929 CET	443	49836	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.845288992 CET	49836	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.845299959 CET	443	49836	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.845674038 CET	49838	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.845688105 CET	443	49838	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.846133947 CET	49838	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.846138000 CET	443	49838	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.932151079 CET	443	49840	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.959990025 CET	49840	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.960021973 CET	443	49840	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:58.960833073 CET	49840	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:58.960838079 CET	443	49840	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.159706116 CET	443	49837	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.159765959 CET	443	49837	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.159854889 CET	49837	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.159950018 CET	443	49836	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.160011053 CET	443	49836	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.160068989 CET	49837	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.160079002 CET	443	49837	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.160084963 CET	49836	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.160089016 CET	49837	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.160094023 CET	443	49837	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.160271883 CET	49836	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.160288095 CET	443	49836	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.160352945 CET	49836	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.160360098 CET	443	49836	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.161218882 CET	443	49838	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.161273003 CET	443	49838	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.161330938 CET	49838	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.161652088 CET	49838	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.161652088 CET	49838	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.161658049 CET	443	49838	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.161664963 CET	443	49838	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.163419962 CET	49847	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.163439989 CET	443	49847	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.163510084 CET	49847	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.164160013 CET	49848	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.164202929 CET	443	49848	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.164282084 CET	49848	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.164484978 CET	49847	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.164494991 CET	443	49847	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.164747953 CET	49849	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.164758921 CET	49848	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.164767027 CET	443	49849	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.164776087 CET	443	49848	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.164834976 CET	49849	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.164968014 CET	49849	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.164979935 CET	443	49849	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.229768038 CET	443	49839	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.229851961 CET	443	49839	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.229902983 CET	49839	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.230074883 CET	49839	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.230089903 CET	443	49839	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.230102062 CET	49839	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.230108023 CET	443	49839	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.232831955 CET	49850	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.232868910 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.232932091 CET	49850	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.233088970 CET	49850	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.233104944 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.365212917 CET	443	49840	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.365288019 CET	443	49840	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.365423918 CET	49840	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.365520000 CET	49840	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.365544081 CET	443	49840	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.365555048 CET	49840	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.365560055 CET	443	49840	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.368383884 CET	49851	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.368418932 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:08:59.368506908 CET	49851	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.368695974 CET	49851	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:08:59.368710995 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.881995916 CET	443	49848	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.882015944 CET	443	49847	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.882421970 CET	443	49849	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.882751942 CET	49848	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:00.882783890 CET	443	49848	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.883234024 CET	49848	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:00.883241892 CET	443	49848	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.883488894 CET	49847	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:00.883514881 CET	443	49847	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.883882046 CET	49847	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:00.883888006 CET	443	49847	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.884059906 CET	49849	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:00.884090900 CET	443	49849	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.884483099 CET	49849	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:00.884488106 CET	443	49849	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.961663961 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.962447882 CET	49850	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:00.962492943 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:00.962905884 CET	49850	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:00.962913990 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.085798979 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.087707043 CET	49851	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.087727070 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.088181973 CET	49851	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.088186979 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.319456100 CET	443	49849	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.319513083 CET	443	49849	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.319582939 CET	49849	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.319645882 CET	443	49848	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.319816113 CET	443	49848	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.319875002 CET	49848	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.323626995 CET	443	49847	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.323652029 CET	443	49847	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.323699951 CET	443	49847	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.323719978 CET	49847	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.323776007 CET	49847	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.324631929 CET	49849	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.324654102 CET	443	49849	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.324668884 CET	49849	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.324675083 CET	443	49849	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.350608110 CET	49848	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.350634098 CET	443	49848	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.350649118 CET	49848	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.350656033 CET	443	49848	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.383105993 CET	49847	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.383131981 CET	443	49847	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.401376009 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.401402950 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.401453972 CET	49850	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.401475906 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.403491020 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.403966904 CET	49850	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.419502020 CET	49854	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.419559956 CET	443	49854	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.419616938 CET	49854	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.419795990 CET	49850	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.419823885 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.419836998 CET	49850	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.419842005 CET	443	49850	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.420473099 CET	49854	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.420490026 CET	443	49854	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.422013998 CET	49855	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.422040939 CET	443	49855	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.422296047 CET	49855	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.422795057 CET	49855	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.422811031 CET	443	49855	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.423424006 CET	49856	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.423433065 CET	443	49856	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.423496962 CET	49856	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.423557997 CET	49857	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.423574924 CET	443	49857	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.423629045 CET	49857	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.423680067 CET	49856	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.423686981 CET	443	49856	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.423835039 CET	49857	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.423847914 CET	443	49857	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.523377895 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.523402929 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.523462057 CET	49851	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.523471117 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.523520947 CET	49851	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.523740053 CET	49851	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.523745060 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.523900032 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.523936033 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.523984909 CET	49851	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.524169922 CET	49851	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.524179935 CET	443	49851	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.527019024 CET	49861	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.527040005 CET	443	49861	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:01.527093887 CET	49861	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.527224064 CET	49861	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:01.527236938 CET	443	49861	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:02.352674961 CET	443	49818	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:02.352747917 CET	443	49818	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:02.352863073 CET	49818	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:02.979664087 CET	49818	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:02.979690075 CET	443	49818	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:03.148154974 CET	443	49856	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.148168087 CET	443	49854	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.149065018 CET	49856	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.149096966 CET	443	49856	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.149281979 CET	443	49857	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.149296999 CET	443	49855	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.149735928 CET	49856	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.149743080 CET	443	49856	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.150105953 CET	49855	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.150115013 CET	443	49855	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.150543928 CET	49855	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.150547981 CET	443	49855	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.150801897 CET	49854	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.150827885 CET	443	49854	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.151221037 CET	49854	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.151225090 CET	443	49854	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.151927948 CET	49857	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.151940107 CET	443	49857	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.152314901 CET	49857	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.152318001 CET	443	49857	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.251051903 CET	443	49861	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.251857996 CET	49861	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.251884937 CET	443	49861	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.252325058 CET	49861	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.252331018 CET	443	49861	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.581856012 CET	443	49856	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.585011005 CET	443	49857	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.585304976 CET	443	49855	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.587805033 CET	443	49854	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.587831974 CET	443	49854	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.587893009 CET	443	49854	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.587945938 CET	49854	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.587996006 CET	443	49857	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.588037968 CET	49857	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.588125944 CET	49857	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.588140965 CET	443	49855	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.588144064 CET	443	49857	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.588155985 CET	49857	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.588160992 CET	443	49857	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.588198900 CET	49855	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.589481115 CET	443	49856	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.589696884 CET	49856	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.590056896 CET	49856	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.590071917 CET	443	49856	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.590081930 CET	49856	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.590086937 CET	443	49856	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.590322971 CET	49855	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.590327024 CET	443	49855	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.594130039 CET	49854	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.594141006 CET	443	49854	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.597059965 CET	49866	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.597106934 CET	443	49866	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.597182035 CET	49866	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.599272013 CET	49867	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.599307060 CET	443	49867	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.599380016 CET	49867	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.600378036 CET	49868	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.600404978 CET	443	49868	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.600491047 CET	49868	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.600711107 CET	49866	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.600728035 CET	443	49866	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.602287054 CET	49869	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.602319956 CET	443	49869	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.602534056 CET	49869	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.602704048 CET	49869	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.602719069 CET	443	49869	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.602821112 CET	49867	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.602833986 CET	443	49867	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.603084087 CET	49868	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.603099108 CET	443	49868	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.684515953 CET	443	49861	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.688021898 CET	443	49861	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.688081026 CET	49861	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.688179016 CET	49861	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.688195944 CET	443	49861	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.688206911 CET	49861	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.688214064 CET	443	49861	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.691700935 CET	49870	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.691745043 CET	443	49870	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:03.691946983 CET	49870	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.692128897 CET	49870	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:03.692145109 CET	443	49870	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.316241026 CET	443	49866	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.317255020 CET	443	49869	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.317629099 CET	49866	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.317641020 CET	443	49866	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.318517923 CET	49866	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.318522930 CET	443	49866	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.318944931 CET	443	49868	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.319607019 CET	443	49867	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.322067976 CET	49868	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.322088003 CET	443	49868	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.322607994 CET	49868	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.322614908 CET	443	49868	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.323636055 CET	49869	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.323657990 CET	443	49869	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.324106932 CET	49869	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.324114084 CET	443	49869	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.324877024 CET	49867	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.324898958 CET	443	49867	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.325536013 CET	49867	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.325542927 CET	443	49867	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.408385992 CET	443	49870	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.412026882 CET	49870	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.412050009 CET	443	49870	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.412652016 CET	49870	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.412657976 CET	443	49870	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.755794048 CET	443	49866	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.755876064 CET	443	49866	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.755884886 CET	443	49869	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.755945921 CET	49866	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.755948067 CET	443	49869	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.755987883 CET	49869	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.756051064 CET	443	49868	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.756100893 CET	443	49868	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.756112099 CET	443	49867	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.756154060 CET	49868	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.756192923 CET	443	49867	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.756350994 CET	49867	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.841334105 CET	443	49870	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.845068932 CET	443	49870	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.845144033 CET	49870	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.888293982 CET	49866	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.888293982 CET	49866	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.888318062 CET	443	49866	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.888329983 CET	443	49866	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.894262075 CET	49873	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.894292116 CET	443	49873	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.894375086 CET	49873	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.894438982 CET	49867	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.894438982 CET	49867	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.894462109 CET	443	49867	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.894474983 CET	443	49867	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.895395994 CET	49870	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.895421982 CET	443	49870	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.895433903 CET	49870	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.895440102 CET	443	49870	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.896347046 CET	49873	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.896357059 CET	443	49873	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.896399021 CET	49869	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.896421909 CET	443	49869	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.896464109 CET	49869	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.896471977 CET	443	49869	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.897283077 CET	49868	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.897289038 CET	443	49868	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.897315025 CET	49868	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.897319078 CET	443	49868	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.977695942 CET	49880	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.977713108 CET	443	49880	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.977781057 CET	49880	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.990371943 CET	49880	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.990386963 CET	443	49880	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.995606899 CET	49881	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.995656967 CET	443	49881	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.995775938 CET	49881	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.995937109 CET	49881	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.995958090 CET	443	49881	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.996397972 CET	49882	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.996407986 CET	443	49882	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.996527910 CET	49882	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.996689081 CET	49882	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.996697903 CET	443	49882	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.997220993 CET	49883	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.997235060 CET	443	49883	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:05.997544050 CET	49883	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.997798920 CET	49883	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:05.997808933 CET	443	49883	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.117269993 CET	80	49706	217.20.58.101	192.168.2.6
Dec 9, 2024 11:09:07.117412090 CET	49706	80	192.168.2.6	217.20.58.101
Dec 9, 2024 11:09:07.117499113 CET	49706	80	192.168.2.6	217.20.58.101
Dec 9, 2024 11:09:07.236946106 CET	80	49706	217.20.58.101	192.168.2.6
Dec 9, 2024 11:09:07.610641956 CET	443	49873	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.611222982 CET	49873	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:07.611241102 CET	443	49873	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.611814022 CET	49873	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:07.611820936 CET	443	49873	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.708348036 CET	443	49880	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.708851099 CET	49880	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:07.708899021 CET	443	49880	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.709400892 CET	49880	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:07.709409952 CET	443	49880	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.711616993 CET	443	49882	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.712044001 CET	49882	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:07.712059021 CET	443	49882	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.712217093 CET	443	49881	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.712342978 CET	443	49883	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.712464094 CET	49882	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:07.712471962 CET	443	49882	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.712810993 CET	49881	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:07.712841988 CET	443	49881	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.712865114 CET	49883	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:07.712879896 CET	443	49883	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.713201046 CET	49883	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:07.713207960 CET	443	49883	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:07.713606119 CET	49881	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:07.713608980 CET	443	49881	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.043817997 CET	443	49873	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.047234058 CET	443	49873	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.047331095 CET	49873	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.047372103 CET	49873	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.047384977 CET	443	49873	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.047409058 CET	49873	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.047415018 CET	443	49873	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.052455902 CET	49886	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.052493095 CET	443	49886	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.052726030 CET	49886	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.052901983 CET	49886	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.052912951 CET	443	49886	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.147692919 CET	443	49880	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.147764921 CET	443	49880	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.147933960 CET	49880	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.147968054 CET	49880	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.147985935 CET	443	49880	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.148011923 CET	49880	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.148022890 CET	443	49880	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.150988102 CET	49887	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.151036024 CET	443	49887	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.151343107 CET	49887	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.151542902 CET	49887	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.151563883 CET	443	49887	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.157402992 CET	443	49882	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.157430887 CET	443	49882	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.157483101 CET	49882	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.157486916 CET	443	49882	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.157527924 CET	49882	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.157782078 CET	49882	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.157793999 CET	443	49882	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.157800913 CET	49882	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.157805920 CET	443	49882	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.158799887 CET	443	49883	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.158875942 CET	443	49881	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.158907890 CET	443	49881	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.158953905 CET	443	49881	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.159116030 CET	49881	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.159116030 CET	49881	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.159116030 CET	49881	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.160706997 CET	49888	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.160737991 CET	443	49888	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.160919905 CET	49888	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.161205053 CET	49888	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.161221027 CET	443	49888	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.161436081 CET	49889	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.161469936 CET	443	49889	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.161556005 CET	49889	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.161674023 CET	49889	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.161685944 CET	443	49889	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.161865950 CET	443	49883	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.161977053 CET	49883	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.162009954 CET	49883	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.162028074 CET	443	49883	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.162038088 CET	49883	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.162043095 CET	443	49883	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.164082050 CET	49890	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.164109945 CET	443	49890	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.164278984 CET	49890	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.164450884 CET	49890	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.164464951 CET	443	49890	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:08.467720985 CET	49881	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:08.467757940 CET	443	49881	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.768224955 CET	443	49886	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.770123959 CET	49886	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:09.770155907 CET	443	49886	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.770972013 CET	49886	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:09.770982027 CET	443	49886	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.864933968 CET	443	49887	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.865516901 CET	49887	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:09.865566015 CET	443	49887	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.866002083 CET	49887	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:09.866009951 CET	443	49887	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.876194000 CET	443	49888	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.876636982 CET	49888	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:09.876662016 CET	443	49888	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.877082109 CET	49888	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:09.877089024 CET	443	49888	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.877540112 CET	443	49889	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.877805948 CET	49889	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:09.877825975 CET	443	49889	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.878205061 CET	49889	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:09.878212929 CET	443	49889	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.879506111 CET	443	49890	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.879858017 CET	49890	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:09.879873037 CET	443	49890	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:09.880259037 CET	49890	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:09.880266905 CET	443	49890	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.201481104 CET	443	49886	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.205420971 CET	443	49886	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.205486059 CET	49886	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.205521107 CET	49886	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.205534935 CET	443	49886	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.205547094 CET	49886	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.205552101 CET	443	49886	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.209815025 CET	49902	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.209846020 CET	443	49902	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.209997892 CET	49902	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.210139990 CET	49902	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.210150003 CET	443	49902	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.299731016 CET	443	49887	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.302860975 CET	443	49887	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.302982092 CET	49887	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.303026915 CET	49887	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.303051949 CET	443	49887	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.303066015 CET	49887	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.303071976 CET	443	49887	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.305612087 CET	49903	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.305654049 CET	443	49903	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.305821896 CET	49903	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.305990934 CET	49903	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.306010008 CET	443	49903	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.310076952 CET	443	49888	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.310165882 CET	443	49888	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.310214043 CET	49888	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.310311079 CET	49888	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.310328960 CET	443	49888	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.310343981 CET	49888	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.310348988 CET	443	49888	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.310869932 CET	443	49889	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.310918093 CET	443	49889	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.310967922 CET	443	49889	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.311070919 CET	49889	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.311070919 CET	49889	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.312381983 CET	49889	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.312381983 CET	49889	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.312398911 CET	443	49889	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.312443018 CET	443	49889	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.312676907 CET	443	49890	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.315414906 CET	49904	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.315459013 CET	443	49904	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.315537930 CET	49904	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.315718889 CET	49904	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.315728903 CET	443	49904	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.315798044 CET	49905	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.315840006 CET	443	49905	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.315902948 CET	49905	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.316054106 CET	49905	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.316066980 CET	443	49905	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.316390991 CET	443	49890	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.316452980 CET	49890	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.316483021 CET	49890	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.316498041 CET	443	49890	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.316512108 CET	49890	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.316518068 CET	443	49890	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.318593025 CET	49906	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.318603992 CET	443	49906	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:10.318677902 CET	49906	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.318809032 CET	49906	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:10.318819046 CET	443	49906	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:11.936192989 CET	443	49902	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:11.936677933 CET	49902	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:11.936693907 CET	443	49902	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:11.940675020 CET	49902	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:11.940680981 CET	443	49902	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.020821095 CET	443	49903	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.021362066 CET	49903	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.021403074 CET	443	49903	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.021929026 CET	49903	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.021936893 CET	443	49903	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.044637918 CET	443	49904	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.044827938 CET	443	49905	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.045078993 CET	443	49906	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.046446085 CET	49905	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.046463966 CET	443	49905	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.047270060 CET	49904	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.047306061 CET	443	49904	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.047512054 CET	49905	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.047518969 CET	443	49905	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.047698021 CET	49904	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.047709942 CET	443	49904	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.047832966 CET	49906	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.047847986 CET	443	49906	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.048325062 CET	49906	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.048330069 CET	443	49906	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.369976997 CET	443	49902	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.370158911 CET	443	49902	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.370217085 CET	49902	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.370341063 CET	49902	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.370357037 CET	443	49902	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.370367050 CET	49902	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.370373011 CET	443	49902	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.376399040 CET	49913	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.376430988 CET	443	49913	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.376509905 CET	49913	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.376718044 CET	49913	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.376739979 CET	443	49913	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.455332994 CET	443	49903	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.458548069 CET	443	49903	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.458611012 CET	49903	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.458811045 CET	49903	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.458818913 CET	443	49903	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.458832026 CET	49903	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.458837986 CET	443	49903	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.461646080 CET	49914	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.461678982 CET	443	49914	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.461793900 CET	49914	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.461905003 CET	49914	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.461924076 CET	443	49914	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.477226973 CET	443	49904	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.478476048 CET	443	49906	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.478506088 CET	443	49906	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.478547096 CET	443	49906	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.478552103 CET	49906	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.478602886 CET	49906	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.478691101 CET	443	49905	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.478718996 CET	443	49905	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.478770971 CET	49905	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.478779078 CET	443	49905	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.478821993 CET	49905	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.479079962 CET	49905	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.479089975 CET	443	49905	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.479100943 CET	49905	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.479109049 CET	443	49905	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.479161978 CET	49906	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.479190111 CET	443	49906	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.479204893 CET	49906	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.479211092 CET	443	49906	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.481120110 CET	443	49904	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.481317997 CET	49904	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.481642008 CET	49904	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.481647015 CET	443	49904	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.481658936 CET	49904	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.481662035 CET	443	49904	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.482666016 CET	49915	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.482706070 CET	443	49915	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.482791901 CET	49915	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.483208895 CET	49915	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.483227015 CET	443	49915	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.485388994 CET	49916	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.485425949 CET	443	49916	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.485481977 CET	49916	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.485615015 CET	49916	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.485629082 CET	443	49916	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.486232042 CET	49917	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.486274004 CET	443	49917	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:12.486335039 CET	49917	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.486474991 CET	49917	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:12.486493111 CET	443	49917	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:13.577313900 CET	80	49714	217.20.58.101	192.168.2.6
Dec 9, 2024 11:09:13.577606916 CET	49714	80	192.168.2.6	217.20.58.101
Dec 9, 2024 11:09:13.577801943 CET	49714	80	192.168.2.6	217.20.58.101
Dec 9, 2024 11:09:13.635060072 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:13.635097027 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:13.635257006 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:13.635565996 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:13.635580063 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:13.697009087 CET	80	49714	217.20.58.101	192.168.2.6
Dec 9, 2024 11:09:14.094162941 CET	443	49913	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.098300934 CET	49913	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.098321915 CET	443	49913	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.098834038 CET	49913	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.098839045 CET	443	49913	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.181009054 CET	443	49914	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.181432009 CET	49914	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.181457043 CET	443	49914	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.182080984 CET	49914	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.182087898 CET	443	49914	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.201092005 CET	443	49915	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.226063013 CET	49915	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.226085901 CET	443	49915	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.226543903 CET	49915	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.226548910 CET	443	49915	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.525331974 CET	443	49913	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.528628111 CET	443	49913	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.528682947 CET	49913	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.558279991 CET	49913	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.558301926 CET	443	49913	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.558312893 CET	49913	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.558320999 CET	443	49913	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.562195063 CET	49924	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.562238932 CET	443	49924	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.562303066 CET	49924	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.562649965 CET	49924	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.562664032 CET	443	49924	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.576322079 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:14.576338053 CET	443	49925	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:14.576446056 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:14.577338934 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:14.577352047 CET	443	49925	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:14.614450932 CET	443	49914	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.614543915 CET	443	49914	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.614624023 CET	49914	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.626720905 CET	49914	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.626720905 CET	49914	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.626749992 CET	443	49914	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.626760960 CET	443	49914	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.634550095 CET	443	49915	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.635912895 CET	49926	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.635948896 CET	443	49926	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.636013985 CET	49926	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.636220932 CET	49926	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.636235952 CET	443	49926	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.637770891 CET	443	49915	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.637867928 CET	49915	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.637897015 CET	49915	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.637913942 CET	443	49915	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.637924910 CET	49915	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.637929916 CET	443	49915	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.640837908 CET	49927	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.640867949 CET	443	49927	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:14.640933990 CET	49927	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.641062975 CET	49927	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:14.641074896 CET	443	49927	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:15.577502966 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:15.577586889 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:15.581515074 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:15.581522942 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:15.585486889 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:15.600164890 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:15.643335104 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:15.781117916 CET	443	49917	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:15.782221079 CET	49917	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:15.782259941 CET	443	49917	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:15.782922983 CET	49917	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:15.782934904 CET	443	49917	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.025104046 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:16.025155067 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:16.025221109 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:16.025608063 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:16.025619984 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:16.119029999 CET	443	49916	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.119452953 CET	49916	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.119477987 CET	443	49916	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.119906902 CET	49916	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.119914055 CET	443	49916	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.223543882 CET	443	49917	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.226454973 CET	443	49917	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.226516008 CET	49917	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.226562023 CET	49917	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.226584911 CET	443	49917	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.226598024 CET	49917	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.226603985 CET	443	49917	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.230520964 CET	49930	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.230556011 CET	443	49930	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.230638981 CET	49930	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.230823040 CET	49930	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.230834961 CET	443	49930	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.242516994 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.242541075 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.242563009 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.242595911 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:16.242626905 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.242652893 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:16.242666960 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:16.275377989 CET	443	49924	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.275922060 CET	49924	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.275950909 CET	443	49924	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.276382923 CET	49924	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.276388884 CET	443	49924	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.279432058 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.279476881 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.279503107 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:16.279510975 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.279551029 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.279563904 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:16.279684067 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:16.279702902 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.279716015 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:16.279721975 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.279756069 CET	49918	443	192.168.2.6	20.109.210.53
Dec 9, 2024 11:09:16.279759884 CET	443	49918	20.109.210.53	192.168.2.6
Dec 9, 2024 11:09:16.353076935 CET	443	49926	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.354424000 CET	443	49927	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.354773998 CET	49926	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.354803085 CET	443	49926	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.355699062 CET	49926	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.355704069 CET	443	49926	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.356666088 CET	49927	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.356688023 CET	443	49927	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.357331038 CET	49927	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.357336998 CET	443	49927	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.552175045 CET	443	49916	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.556154966 CET	443	49916	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.556207895 CET	443	49916	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.556212902 CET	49916	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.556693077 CET	49916	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.556885958 CET	49916	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.556885958 CET	49916	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.556906939 CET	443	49916	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.556916952 CET	443	49916	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.561558008 CET	49933	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.561599016 CET	443	49933	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.561654091 CET	49933	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.561827898 CET	49933	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.561846972 CET	443	49933	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.708610058 CET	443	49924	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.712300062 CET	443	49924	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.712588072 CET	49924	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.714816093 CET	49924	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.714849949 CET	443	49924	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.714863062 CET	49924	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.714870930 CET	443	49924	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.728763103 CET	49934	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.728809118 CET	443	49934	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.729023933 CET	49934	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.731292009 CET	49934	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.731307030 CET	443	49934	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.791148901 CET	443	49927	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.792301893 CET	443	49926	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.795298100 CET	443	49927	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.795380116 CET	443	49927	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.795388937 CET	443	49926	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.795496941 CET	49926	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.795496941 CET	49927	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.807606936 CET	443	49925	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:16.807734013 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:16.839780092 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:16.839812040 CET	443	49925	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:16.840054035 CET	443	49925	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:16.844774008 CET	49927	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.844794035 CET	443	49927	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.862082958 CET	49926	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.862082958 CET	49926	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.862117052 CET	443	49926	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.862124920 CET	443	49926	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.892560959 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:16.899880886 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:16.899981022 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:16.899997950 CET	443	49925	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:16.903388977 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:16.951342106 CET	443	49925	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:16.979403019 CET	49935	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.979448080 CET	443	49935	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.979517937 CET	49935	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.993058920 CET	49936	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.993089914 CET	443	49936	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.993168116 CET	49936	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.993452072 CET	49935	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.993479013 CET	443	49935	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:16.995649099 CET	49936	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:16.995668888 CET	443	49936	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:17.449017048 CET	443	49925	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:17.449174881 CET	443	49925	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:17.449321985 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:17.449544907 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:17.449565887 CET	443	49925	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:17.449578047 CET	49925	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:17.716922998 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:17.717278957 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:17.717314959 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:17.717662096 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:17.717977047 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:17.718053102 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:17.718126059 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:17.763334036 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:17.946360111 CET	443	49930	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:17.946988106 CET	49930	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:17.947005033 CET	443	49930	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:17.947432995 CET	49930	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:17.947439909 CET	443	49930	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.275629044 CET	443	49933	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.276113987 CET	49933	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.276146889 CET	443	49933	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.276585102 CET	49933	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.276593924 CET	443	49933	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.379700899 CET	443	49930	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.383398056 CET	443	49930	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.383500099 CET	49930	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.383500099 CET	49930	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.383546114 CET	49930	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.383563995 CET	443	49930	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.386146069 CET	49938	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.386189938 CET	443	49938	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.386269093 CET	49938	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.386451006 CET	49938	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.386470079 CET	443	49938	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.405299902 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.405352116 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.405386925 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.405405998 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:18.405416965 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.405431032 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.405467987 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:18.405488014 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.405538082 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:18.411664963 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.411721945 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.411792994 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:18.413687944 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:18.413710117 CET	443	49929	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.413764000 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:18.413764000 CET	49929	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:18.447144985 CET	443	49934	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.447669029 CET	49934	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.447693110 CET	443	49934	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.448143005 CET	49934	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.448148966 CET	443	49934	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.554907084 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:18.554956913 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.555017948 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:18.555308104 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:18.555325031 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:18.709206104 CET	443	49933	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.711337090 CET	443	49935	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.711791992 CET	49935	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.711821079 CET	443	49935	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.712250948 CET	49935	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.712259054 CET	443	49935	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.712868929 CET	443	49936	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.713105917 CET	443	49933	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.713315010 CET	49936	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.713315964 CET	49933	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.713329077 CET	443	49936	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.713402033 CET	49933	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.713417053 CET	443	49933	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.713690042 CET	49936	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.713696003 CET	443	49936	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.716398001 CET	49940	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.716434002 CET	443	49940	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.716553926 CET	49940	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.716695070 CET	49940	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.716705084 CET	443	49940	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.880228996 CET	443	49934	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.884146929 CET	443	49934	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.884217024 CET	49934	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.884294987 CET	49934	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.884321928 CET	443	49934	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.884337902 CET	49934	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.884346008 CET	443	49934	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.887114048 CET	49941	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.887160063 CET	443	49941	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:18.887232065 CET	49941	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.887368917 CET	49941	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:18.887387991 CET	443	49941	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.144337893 CET	443	49935	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.144419909 CET	443	49935	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.144629002 CET	49935	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.144750118 CET	49935	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.144774914 CET	443	49935	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.144788027 CET	49935	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.144794941 CET	443	49935	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.148106098 CET	443	49936	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.148772001 CET	49943	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.148819923 CET	443	49943	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.148897886 CET	49943	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.149154902 CET	49943	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.149168968 CET	443	49943	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.151140928 CET	443	49936	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.151205063 CET	443	49936	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.151220083 CET	49936	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.151258945 CET	49936	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.151310921 CET	49936	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.151333094 CET	443	49936	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.151345968 CET	49936	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.151352882 CET	443	49936	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.154891014 CET	49944	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.154937983 CET	443	49944	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:19.154999018 CET	49944	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.155184984 CET	49944	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:19.155200005 CET	443	49944	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.098866940 CET	443	49938	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.099415064 CET	49938	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.099436998 CET	443	49938	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.099908113 CET	49938	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.099914074 CET	443	49938	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.248929024 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.249490023 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:20.249517918 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.250571012 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.250639915 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:20.250997066 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:20.251058102 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.251257896 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:20.251264095 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.296180964 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:20.431946039 CET	443	49940	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.432455063 CET	49940	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.432497978 CET	443	49940	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.432905912 CET	49940	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.432914019 CET	443	49940	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.532145023 CET	443	49938	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.535702944 CET	443	49938	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.535763979 CET	49938	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.535851002 CET	49938	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.535867929 CET	443	49938	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.535895109 CET	49938	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.535901070 CET	443	49938	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.538754940 CET	49945	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.538803101 CET	443	49945	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.538917065 CET	49945	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.539110899 CET	49945	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.539124012 CET	443	49945	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.604609966 CET	443	49941	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.605174065 CET	49941	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.605202913 CET	443	49941	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.605659962 CET	49941	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.605664968 CET	443	49941	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.866099119 CET	443	49940	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.868251085 CET	443	49943	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.868721962 CET	49943	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.868757010 CET	443	49943	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.869153023 CET	49943	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.869159937 CET	443	49943	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.869204998 CET	443	49940	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.869272947 CET	49940	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.869309902 CET	49940	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.869309902 CET	49940	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.869327068 CET	443	49940	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.869338036 CET	443	49940	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.872123957 CET	443	49944	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.872515917 CET	49946	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.872545004 CET	443	49946	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.872800112 CET	49946	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.872988939 CET	49944	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.873002052 CET	443	49944	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.873522997 CET	49944	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.873527050 CET	443	49944	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.873759031 CET	49946	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:20.873769999 CET	443	49946	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:20.934900045 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.934957027 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.935004950 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.935009956 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:20.935020924 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.935064077 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.935067892 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:20.935075998 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.935111046 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:20.936085939 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:20.936120987 CET	443	49939	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:20.936273098 CET	49939	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:21.040019035 CET	443	49941	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.044025898 CET	443	49941	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.044083118 CET	443	49941	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.044100046 CET	49941	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.044143915 CET	49941	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.044219971 CET	49941	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.044219971 CET	49941	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.044239998 CET	443	49941	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.044249058 CET	443	49941	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.047321081 CET	49947	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.047369003 CET	443	49947	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.047436953 CET	49947	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.047621012 CET	49947	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.047637939 CET	443	49947	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.301685095 CET	443	49943	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.301831007 CET	443	49943	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.301904917 CET	49943	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.302040100 CET	49943	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.302053928 CET	443	49943	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.302084923 CET	49943	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.302089930 CET	443	49943	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.304965973 CET	49948	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.304994106 CET	443	49948	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.305147886 CET	49948	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.305263996 CET	443	49944	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.305336952 CET	49948	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.305349112 CET	443	49948	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.309006929 CET	443	49944	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.309053898 CET	49944	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.309055090 CET	443	49944	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.309103012 CET	49944	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.309170961 CET	49944	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.309184074 CET	443	49944	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.309194088 CET	49944	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.309200048 CET	443	49944	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.311291933 CET	49949	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.311327934 CET	443	49949	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:21.311434031 CET	49949	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.311599970 CET	49949	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:21.311615944 CET	443	49949	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.251945019 CET	443	49945	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.252495050 CET	49945	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.252516985 CET	443	49945	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.252935886 CET	49945	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.252943039 CET	443	49945	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.587085009 CET	443	49946	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.587565899 CET	49946	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.587591887 CET	443	49946	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.588042021 CET	49946	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.588047981 CET	443	49946	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.685069084 CET	443	49945	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.685158968 CET	443	49945	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.685215950 CET	49945	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.685411930 CET	49945	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.685435057 CET	443	49945	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.685455084 CET	49945	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.685461044 CET	443	49945	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.688144922 CET	49951	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.688199997 CET	443	49951	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.688272953 CET	49951	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.688494921 CET	49951	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.688508987 CET	443	49951	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.761661053 CET	443	49947	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.762165070 CET	49947	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.762197971 CET	443	49947	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:22.762643099 CET	49947	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:22.762650967 CET	443	49947	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.019696951 CET	443	49948	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.020185947 CET	49948	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.020210981 CET	443	49948	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.020625114 CET	49948	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.020631075 CET	443	49948	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.021316051 CET	443	49946	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.024883032 CET	443	49946	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.024943113 CET	443	49946	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.024956942 CET	49946	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.025005102 CET	49946	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.025068998 CET	49946	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.025079966 CET	443	49946	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.025104046 CET	49946	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.025109053 CET	443	49946	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.027811050 CET	49952	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.027836084 CET	443	49952	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.027909040 CET	49952	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.028038025 CET	49952	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.028044939 CET	443	49952	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.029434919 CET	443	49949	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.029773951 CET	49949	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.029789925 CET	443	49949	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.030540943 CET	49949	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.030545950 CET	443	49949	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.195120096 CET	443	49947	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.198935032 CET	443	49947	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.199026108 CET	49947	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.199090958 CET	49947	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.199105978 CET	443	49947	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.199131012 CET	49947	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.199136972 CET	443	49947	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.202301025 CET	49953	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.202328920 CET	443	49953	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.202471972 CET	49953	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.202665091 CET	49953	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.202682018 CET	443	49953	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.452894926 CET	443	49948	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.456648111 CET	443	49948	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.456701994 CET	443	49948	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.456712961 CET	49948	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.456794024 CET	49948	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.456829071 CET	49948	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.456852913 CET	443	49948	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.456864119 CET	49948	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.456870079 CET	443	49948	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.459721088 CET	49954	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.459763050 CET	443	49954	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.459927082 CET	49954	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.460093975 CET	49954	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.460110903 CET	443	49954	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.462457895 CET	443	49949	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.466182947 CET	443	49949	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.466239929 CET	49949	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.466301918 CET	49949	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.466321945 CET	443	49949	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.466339111 CET	49949	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.466344118 CET	443	49949	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.468553066 CET	49955	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.468601942 CET	443	49955	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:23.468745947 CET	49955	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.468863964 CET	49955	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:23.468883038 CET	443	49955	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.404494047 CET	443	49951	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.405041933 CET	49951	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.405085087 CET	443	49951	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.405524015 CET	49951	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.405530930 CET	443	49951	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.748142004 CET	443	49952	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.748646975 CET	49952	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.748672009 CET	443	49952	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.749103069 CET	49952	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.749109030 CET	443	49952	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.837681055 CET	443	49951	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.841520071 CET	443	49951	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.841566086 CET	443	49951	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.841571093 CET	49951	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.841615915 CET	49951	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.841667891 CET	49951	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.841691017 CET	443	49951	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.841716051 CET	49951	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.841722012 CET	443	49951	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.844630957 CET	49956	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.844731092 CET	443	49956	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.844841003 CET	49956	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.844965935 CET	49956	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.845000982 CET	443	49956	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.915693045 CET	443	49953	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.916209936 CET	49953	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.916229963 CET	443	49953	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:24.916675091 CET	49953	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:24.916687965 CET	443	49953	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.172477961 CET	443	49954	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.173062086 CET	49954	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.173094988 CET	443	49954	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.173626900 CET	49954	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.173635960 CET	443	49954	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.180845022 CET	443	49952	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.182688951 CET	443	49955	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.183120012 CET	49955	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.183130980 CET	443	49955	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.183536053 CET	49955	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.183541059 CET	443	49955	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.184297085 CET	443	49952	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.184351921 CET	49952	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.184384108 CET	49952	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.184413910 CET	443	49952	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.184426069 CET	49952	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.184432030 CET	443	49952	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.187021017 CET	49957	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.187067986 CET	443	49957	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.187130928 CET	49957	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.187295914 CET	49957	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.187309027 CET	443	49957	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.348999023 CET	443	49953	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.352298975 CET	443	49953	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.352431059 CET	49953	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.352431059 CET	49953	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.352500916 CET	49953	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.352515936 CET	443	49953	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.355333090 CET	49958	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.355381012 CET	443	49958	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.355443001 CET	49958	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.355598927 CET	49958	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.355611086 CET	443	49958	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.605745077 CET	443	49954	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.605834961 CET	443	49954	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.605915070 CET	49954	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.606125116 CET	49954	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.606149912 CET	443	49954	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.606162071 CET	49954	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.606168032 CET	443	49954	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.609102964 CET	49959	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.609134912 CET	443	49959	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.609266043 CET	49959	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.609551907 CET	49959	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.609566927 CET	443	49959	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.616203070 CET	443	49955	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.619610071 CET	443	49955	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.619663954 CET	49955	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.619671106 CET	443	49955	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.619724035 CET	49955	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.619796038 CET	49955	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.619811058 CET	443	49955	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.619824886 CET	49955	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.619832993 CET	443	49955	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.622056007 CET	49960	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.622112036 CET	443	49960	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:25.622190952 CET	49960	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.622354984 CET	49960	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:25.622376919 CET	443	49960	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:26.558437109 CET	443	49956	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:26.559071064 CET	49956	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:26.559171915 CET	443	49956	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:26.559680939 CET	49956	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:26.559700012 CET	443	49956	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:26.909684896 CET	443	49957	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:26.910161018 CET	49957	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:26.910192966 CET	443	49957	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:26.910600901 CET	49957	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:26.910607100 CET	443	49957	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:26.997066021 CET	443	49956	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:26.999042034 CET	443	49956	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:26.999106884 CET	49956	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:26.999433994 CET	49956	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:26.999454975 CET	443	49956	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:26.999461889 CET	49956	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:26.999468088 CET	443	49956	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.003736973 CET	49961	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.003782988 CET	443	49961	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.003914118 CET	49961	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.004146099 CET	49961	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.004157066 CET	443	49961	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.069294930 CET	443	49958	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.069752932 CET	49958	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.069791079 CET	443	49958	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.070214033 CET	49958	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.070219040 CET	443	49958	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.326689959 CET	443	49959	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.327753067 CET	49959	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.327780008 CET	443	49959	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.328388929 CET	49959	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.328393936 CET	443	49959	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.340039968 CET	443	49960	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.340425968 CET	49960	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.340440035 CET	443	49960	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.340845108 CET	49960	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.340848923 CET	443	49960	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.342705011 CET	443	49957	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.346055984 CET	443	49957	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.346098900 CET	49957	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.346103907 CET	443	49957	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.346147060 CET	49957	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.346209049 CET	49957	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.346220016 CET	443	49957	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.346230984 CET	49957	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.346235991 CET	443	49957	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.348819017 CET	49962	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.348844051 CET	443	49962	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.348907948 CET	49962	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.349066019 CET	49962	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.349081993 CET	443	49962	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.503468990 CET	443	49958	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.506990910 CET	443	49958	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.507050037 CET	49958	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.507097960 CET	49958	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.507122040 CET	443	49958	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.507133961 CET	49958	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.507139921 CET	443	49958	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.510070086 CET	49963	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.510113001 CET	443	49963	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.510178089 CET	49963	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.510341883 CET	49963	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.510351896 CET	443	49963	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.760955095 CET	443	49959	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.764780998 CET	443	49959	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.764854908 CET	49959	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.764902115 CET	49959	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.764921904 CET	443	49959	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.764934063 CET	49959	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.764940977 CET	443	49959	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.767806053 CET	49964	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.767858028 CET	443	49964	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.767930984 CET	49964	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.768095016 CET	49964	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.768106937 CET	443	49964	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.774441004 CET	443	49960	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.777993917 CET	443	49960	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.778063059 CET	49960	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.778135061 CET	49960	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.778163910 CET	443	49960	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.778172970 CET	49960	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.778178930 CET	443	49960	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.780886889 CET	49965	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.780919075 CET	443	49965	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:27.781168938 CET	49965	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.781306028 CET	49965	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:27.781317949 CET	443	49965	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:28.773498058 CET	443	49961	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:28.773998976 CET	49961	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:28.774015903 CET	443	49961	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:28.774461985 CET	49961	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:28.774466038 CET	443	49961	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.075792074 CET	443	49962	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.076492071 CET	49962	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.076518059 CET	443	49962	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.077028036 CET	49962	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.077033997 CET	443	49962	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.206918955 CET	443	49961	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.210350990 CET	443	49961	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.210398912 CET	49961	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.210402966 CET	443	49961	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.210460901 CET	49961	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.210530043 CET	49961	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.210551023 CET	443	49961	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.210562944 CET	49961	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.210567951 CET	443	49961	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.213383913 CET	49966	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.213447094 CET	443	49966	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.213529110 CET	49966	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.213665962 CET	49966	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.213685036 CET	443	49966	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.230937958 CET	443	49963	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.231441975 CET	49963	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.231456995 CET	443	49963	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.231908083 CET	49963	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.231913090 CET	443	49963	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.493256092 CET	443	49964	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.493757963 CET	49964	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.493788004 CET	443	49964	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.494220018 CET	49964	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.494225979 CET	443	49964	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.507908106 CET	443	49965	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.508368969 CET	49965	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.508398056 CET	443	49965	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.508790016 CET	443	49962	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.508991003 CET	49965	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.508996010 CET	443	49965	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.512649059 CET	443	49962	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.512746096 CET	49962	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.512784958 CET	49962	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.512804031 CET	443	49962	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.512814999 CET	49962	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.512820959 CET	443	49962	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.515959024 CET	49967	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.515990973 CET	443	49967	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.516060114 CET	49967	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.516235113 CET	49967	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.516248941 CET	443	49967	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.664851904 CET	443	49963	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.667952061 CET	443	49963	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.668010950 CET	49963	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.668016911 CET	443	49963	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.668081045 CET	49963	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.668190956 CET	49963	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.668211937 CET	443	49963	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.668227911 CET	49963	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.668234110 CET	443	49963	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.670941114 CET	49968	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.670964003 CET	443	49968	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.671269894 CET	49968	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.671493053 CET	49968	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.671503067 CET	443	49968	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.929322004 CET	443	49964	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.929414988 CET	443	49964	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.929514885 CET	49964	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.929722071 CET	49964	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.929743052 CET	443	49964	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.929755926 CET	49964	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.929761887 CET	443	49964	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.932528973 CET	49969	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.932571888 CET	443	49969	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.932697058 CET	49969	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.932867050 CET	49969	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.932877064 CET	443	49969	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.941055059 CET	443	49965	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.941142082 CET	443	49965	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.941220999 CET	49965	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.941428900 CET	49965	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.941448927 CET	443	49965	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.941466093 CET	49965	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.941472054 CET	443	49965	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.944072008 CET	49970	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.944123030 CET	443	49970	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:29.944233894 CET	49970	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.944386005 CET	49970	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:29.944395065 CET	443	49970	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:30.930393934 CET	443	49966	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:30.930815935 CET	49966	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:30.930850983 CET	443	49966	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:30.931268930 CET	49966	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:30.931277037 CET	443	49966	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.194948912 CET	443	49968	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.195477009 CET	49968	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.195504904 CET	443	49968	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.195924997 CET	49968	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.195930958 CET	443	49968	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.232309103 CET	443	49967	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.232801914 CET	49967	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.232820988 CET	443	49967	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.233346939 CET	49967	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.233351946 CET	443	49967	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.365344048 CET	443	49966	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.368855000 CET	443	49966	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.368917942 CET	49966	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.369014978 CET	49966	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.369030952 CET	443	49966	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.369051933 CET	49966	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.369056940 CET	443	49966	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.373378038 CET	49971	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.373399019 CET	443	49971	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.373492002 CET	49971	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.373776913 CET	49971	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.373795986 CET	443	49971	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.628401041 CET	443	49968	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.631923914 CET	443	49968	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.632157087 CET	49968	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.632157087 CET	49968	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.632157087 CET	49968	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.634924889 CET	49972	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.634963036 CET	443	49972	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.635034084 CET	49972	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.635174036 CET	49972	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.635185957 CET	443	49972	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.655000925 CET	49798	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:09:31.655128002 CET	443	49969	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.655575991 CET	49969	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.655606031 CET	443	49969	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.656061888 CET	49969	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.656069994 CET	443	49969	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.656173944 CET	443	49970	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.656548023 CET	49970	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.656573057 CET	443	49970	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.656955957 CET	49970	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.656961918 CET	443	49970	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.665415049 CET	443	49967	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.669363976 CET	443	49967	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.669437885 CET	49967	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.669476986 CET	49967	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.669493914 CET	443	49967	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.669506073 CET	49967	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.669511080 CET	443	49967	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.672418118 CET	49973	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.672463894 CET	443	49973	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.672544956 CET	49973	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.672754049 CET	49973	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.672769070 CET	443	49973	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:31.774245977 CET	80	49798	142.250.181.69	192.168.2.6
Dec 9, 2024 11:09:31.858144045 CET	49968	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:31.858180046 CET	443	49968	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.075922966 CET	49802	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:09:32.088505030 CET	443	49969	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.089236975 CET	443	49970	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.091979027 CET	443	49969	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.092039108 CET	49969	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.092103004 CET	49969	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.092123985 CET	443	49969	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.092137098 CET	49969	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.092143059 CET	443	49969	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.092588902 CET	443	49970	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.092669010 CET	49970	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.093575001 CET	49970	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.093575001 CET	49970	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.093592882 CET	443	49970	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.093609095 CET	443	49970	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.095340967 CET	49974	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.095376015 CET	443	49974	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.095525980 CET	49974	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.095617056 CET	49975	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.095654011 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.095730066 CET	49974	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.095743895 CET	443	49974	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.095761061 CET	49975	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.095897913 CET	49975	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:32.095912933 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:32.196394920 CET	80	49802	142.250.181.69	192.168.2.6
Dec 9, 2024 11:09:33.089364052 CET	443	49971	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.089950085 CET	49971	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.089977980 CET	443	49971	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.090428114 CET	49971	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.090434074 CET	443	49971	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.107825041 CET	49799	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:09:33.227169037 CET	80	49799	142.250.181.69	192.168.2.6
Dec 9, 2024 11:09:33.349879026 CET	443	49972	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.350493908 CET	49972	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.350522995 CET	443	49972	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.350974083 CET	49972	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.350986004 CET	443	49972	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.386159897 CET	443	49973	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.386647940 CET	49973	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.386671066 CET	443	49973	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.387105942 CET	49973	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.387110949 CET	443	49973	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.523065090 CET	443	49971	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.526343107 CET	443	49971	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.526388884 CET	443	49971	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.526406050 CET	49971	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.526472092 CET	49971	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.526518106 CET	49971	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.526536942 CET	443	49971	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.526550055 CET	49971	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.526556015 CET	443	49971	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.529570103 CET	49976	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.529613018 CET	443	49976	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.529714108 CET	49976	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.529928923 CET	49976	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.529939890 CET	443	49976	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.783994913 CET	443	49972	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.784064054 CET	443	49972	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.784116983 CET	49972	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.784758091 CET	49972	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.784770966 CET	443	49972	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.784800053 CET	49972	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.784805059 CET	443	49972	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.787909985 CET	49977	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.787939072 CET	443	49977	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.788005114 CET	49977	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.788208008 CET	49977	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.788218021 CET	443	49977	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.811348915 CET	443	49974	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.812060118 CET	49974	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.812076092 CET	443	49974	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.812663078 CET	49974	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.812669039 CET	443	49974	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.813117027 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.813549042 CET	49975	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.813580990 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.813941956 CET	49975	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.813947916 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.819552898 CET	443	49973	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.823174000 CET	443	49973	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.823235989 CET	49973	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.823267937 CET	49973	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.823267937 CET	49973	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.823286057 CET	443	49973	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.823296070 CET	443	49973	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.826339006 CET	49978	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.826380968 CET	443	49978	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:33.826494932 CET	49978	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.826637030 CET	49978	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:33.826649904 CET	443	49978	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.248475075 CET	443	49974	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.250144958 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.250161886 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.250226021 CET	49975	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.250255108 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.251588106 CET	49975	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.251595974 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.251614094 CET	49975	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.251761913 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.251787901 CET	443	49975	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.251849890 CET	49975	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.252202034 CET	443	49974	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.252253056 CET	49974	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.255716085 CET	49974	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.255737066 CET	443	49974	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.255752087 CET	49974	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.255758047 CET	443	49974	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.261337042 CET	49979	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.261368990 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.261660099 CET	49979	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.262433052 CET	49980	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.262459993 CET	443	49980	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.262526989 CET	49979	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.262541056 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:34.262564898 CET	49980	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.262945890 CET	49980	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:34.262955904 CET	443	49980	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.243041992 CET	443	49976	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.243607044 CET	49976	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.243618965 CET	443	49976	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.244138002 CET	49976	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.244144917 CET	443	49976	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.548227072 CET	443	49977	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.548619986 CET	443	49978	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.548715115 CET	49977	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.548723936 CET	443	49977	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.549205065 CET	49977	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.549211025 CET	443	49977	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.549230099 CET	49978	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.549242973 CET	443	49978	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.549606085 CET	49978	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.549613953 CET	443	49978	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.783046007 CET	443	49976	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.783077002 CET	443	49976	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.783122063 CET	443	49976	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.783171892 CET	49976	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.783335924 CET	49976	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.783350945 CET	443	49976	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.783364058 CET	49976	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.783373117 CET	443	49976	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.787512064 CET	49981	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.787564039 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:35.787652016 CET	49981	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.787836075 CET	49981	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:35.787857056 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.052874088 CET	443	49980	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.053389072 CET	49980	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.053410053 CET	443	49980	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.053900957 CET	49980	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.053906918 CET	443	49980	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.061343908 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.061784029 CET	49979	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.061800003 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.062210083 CET	49979	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.062216043 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.100730896 CET	443	49978	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.101335049 CET	443	49977	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.103857040 CET	443	49978	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.103914976 CET	49978	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.103977919 CET	49978	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.103993893 CET	443	49978	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.104005098 CET	49978	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.104011059 CET	443	49978	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.104427099 CET	443	49977	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.104485035 CET	443	49977	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.104496956 CET	49977	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.104574919 CET	49977	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.104574919 CET	49977	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.104604006 CET	49977	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.104617119 CET	443	49977	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.107402086 CET	49982	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.107425928 CET	443	49982	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.107537985 CET	49982	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.107592106 CET	49983	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.107619047 CET	443	49983	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.107732058 CET	49982	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.107742071 CET	443	49982	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.107755899 CET	49983	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.107827902 CET	49983	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.107840061 CET	443	49983	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.487149954 CET	443	49980	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.490266085 CET	443	49980	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.490428925 CET	49980	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.490467072 CET	49980	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.490485907 CET	443	49980	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.490499020 CET	49980	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.490504980 CET	443	49980	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.493294954 CET	49984	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.493364096 CET	443	49984	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.493515015 CET	49984	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.493694067 CET	49984	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.493710041 CET	443	49984	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.496542931 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.499665022 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.499721050 CET	49979	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.499737024 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.499754906 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.499798059 CET	49979	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.499876976 CET	49979	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.499891043 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.499898911 CET	49979	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.499903917 CET	443	49979	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.502576113 CET	49985	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.502604961 CET	443	49985	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:36.502747059 CET	49985	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.502931118 CET	49985	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:36.502943039 CET	443	49985	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.325957060 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.326632023 CET	49981	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.326649904 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.327092886 CET	49981	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.327097893 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.759812117 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.759838104 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.759908915 CET	49981	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.759938955 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.760194063 CET	49981	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.760201931 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.760217905 CET	49981	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.760366917 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.760397911 CET	443	49981	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.760438919 CET	49981	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.763089895 CET	49986	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.763127089 CET	443	49986	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.763365984 CET	49986	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.763514042 CET	49986	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.763528109 CET	443	49986	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.837888002 CET	443	49982	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.838476896 CET	49982	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.838504076 CET	443	49982	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.838931084 CET	49982	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.838939905 CET	443	49982	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.839247942 CET	443	49983	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.839611053 CET	49983	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.839649916 CET	443	49983	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:37.840035915 CET	49983	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:37.840043068 CET	443	49983	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.216070890 CET	443	49984	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.216687918 CET	49984	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.216718912 CET	443	49984	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.217163086 CET	49984	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.217168093 CET	443	49984	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.246217966 CET	443	49985	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.246712923 CET	49985	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.246730089 CET	443	49985	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.247155905 CET	49985	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.247164011 CET	443	49985	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.271430969 CET	443	49982	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.272845030 CET	443	49983	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.272880077 CET	443	49983	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.272933006 CET	443	49983	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.272938967 CET	49983	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.272981882 CET	49983	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.273154020 CET	49983	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.273169994 CET	443	49983	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.273180008 CET	49983	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.273190975 CET	443	49983	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.275398970 CET	443	49982	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.275449991 CET	443	49982	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.275501013 CET	49982	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.275578976 CET	49982	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.275592089 CET	443	49982	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.275604010 CET	49982	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.275609016 CET	443	49982	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.276312113 CET	49987	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.276339054 CET	443	49987	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.276478052 CET	49987	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.276793003 CET	49987	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.276807070 CET	443	49987	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.277822018 CET	49988	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.277856112 CET	443	49988	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.277918100 CET	49988	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.278073072 CET	49988	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.278090954 CET	443	49988	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.649998903 CET	443	49984	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.653224945 CET	443	49984	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.653306961 CET	49984	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.653388023 CET	49984	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.653410912 CET	443	49984	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.653423071 CET	49984	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.653429031 CET	443	49984	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.656574011 CET	49989	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.656615019 CET	443	49989	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.656692982 CET	49989	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.656867027 CET	49989	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.656878948 CET	443	49989	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.682127953 CET	443	49985	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.685164928 CET	443	49985	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.685249090 CET	49985	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.685348034 CET	49985	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.685360909 CET	443	49985	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.685405970 CET	49985	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.685410976 CET	443	49985	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.688627958 CET	49990	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.688677073 CET	443	49990	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:38.688966036 CET	49990	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.689184904 CET	49990	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:38.689198017 CET	443	49990	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.479033947 CET	443	49986	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.479546070 CET	49986	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.479573965 CET	443	49986	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.480104923 CET	49986	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.480113983 CET	443	49986	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.912380934 CET	443	49986	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.915787935 CET	443	49986	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.915858984 CET	49986	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.915927887 CET	49986	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.915950060 CET	443	49986	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.915965080 CET	49986	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.915978909 CET	443	49986	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.918956041 CET	49991	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.918982983 CET	443	49991	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.919076920 CET	49991	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.919208050 CET	49991	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.919228077 CET	443	49991	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.991030931 CET	443	49987	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.991682053 CET	49987	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.991705894 CET	443	49987	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.992158890 CET	49987	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.992167950 CET	443	49987	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.993418932 CET	443	49988	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.993752003 CET	49988	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.993765116 CET	443	49988	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:39.994175911 CET	49988	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:39.994182110 CET	443	49988	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.393608093 CET	443	49989	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.394187927 CET	49989	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.394208908 CET	443	49989	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.394726992 CET	49989	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.394732952 CET	443	49989	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.424339056 CET	443	49987	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.426733971 CET	443	49988	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.428277016 CET	443	49987	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.428328037 CET	443	49987	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.428354025 CET	49987	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.428391933 CET	49987	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.428443909 CET	49987	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.428456068 CET	443	49987	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.428467035 CET	49987	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.428472042 CET	443	49987	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.430197001 CET	443	49988	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.430254936 CET	49988	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.430320978 CET	49988	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.430336952 CET	443	49988	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.430346966 CET	49988	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.430360079 CET	443	49988	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.432332039 CET	49992	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.432358027 CET	443	49992	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.432606936 CET	49992	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.432800055 CET	443	49990	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.433573961 CET	49993	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.433613062 CET	443	49993	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.433737993 CET	49993	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.433842897 CET	49992	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.433852911 CET	443	49992	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.434202909 CET	49990	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.434211016 CET	443	49990	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.434885979 CET	49990	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.434890032 CET	443	49990	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.435173035 CET	49993	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.435189962 CET	443	49993	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.827097893 CET	443	49989	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.830574036 CET	443	49989	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.830638885 CET	443	49989	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.830653906 CET	49989	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.830698967 CET	49989	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.830741882 CET	49989	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.830758095 CET	443	49989	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.830768108 CET	49989	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.830773115 CET	443	49989	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.833605051 CET	49994	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.833655119 CET	443	49994	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.833726883 CET	49994	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.833895922 CET	49994	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.833909988 CET	443	49994	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.867326021 CET	443	49990	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.871500969 CET	443	49990	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.871567011 CET	49990	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.871613026 CET	49990	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.871634960 CET	443	49990	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.871649981 CET	49990	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.871659040 CET	443	49990	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.874274969 CET	49995	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.874320030 CET	443	49995	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:40.874420881 CET	49995	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.874682903 CET	49995	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:40.874701023 CET	443	49995	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:41.636527061 CET	443	49991	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:41.637057066 CET	49991	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:41.637070894 CET	443	49991	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:41.637566090 CET	49991	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:41.637576103 CET	443	49991	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.074335098 CET	443	49991	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.077364922 CET	443	49991	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.077418089 CET	443	49991	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.077459097 CET	49991	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.077538967 CET	49991	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.077570915 CET	49991	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.077570915 CET	49991	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.077585936 CET	443	49991	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.077600002 CET	443	49991	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.080589056 CET	49997	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.080616951 CET	443	49997	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.080688000 CET	49997	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.080825090 CET	49997	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.080837011 CET	443	49997	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.175457954 CET	443	49992	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.175570011 CET	443	49993	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.176206112 CET	49992	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.176220894 CET	443	49992	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.176740885 CET	49992	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.176747084 CET	443	49992	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.177012920 CET	49993	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.177048922 CET	443	49993	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.177572012 CET	49993	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.177577019 CET	443	49993	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.549966097 CET	443	49994	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.550486088 CET	49994	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.550512075 CET	443	49994	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.551058054 CET	49994	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.551063061 CET	443	49994	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.589184999 CET	443	49995	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.589880943 CET	49995	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.589903116 CET	443	49995	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.590486050 CET	49995	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.590492964 CET	443	49995	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.608355045 CET	443	49993	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.608361006 CET	443	49992	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.612234116 CET	443	49992	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.612291098 CET	49992	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.612314939 CET	443	49993	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.612339973 CET	49992	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.612351894 CET	443	49992	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.612369061 CET	49993	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.612410069 CET	49993	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.612420082 CET	443	49993	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.612431049 CET	49993	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.612436056 CET	443	49993	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.616977930 CET	49998	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.617003918 CET	443	49998	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.617136002 CET	49998	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.617218018 CET	49999	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.617245913 CET	443	49999	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.617331982 CET	49998	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.617346048 CET	443	49998	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.617360115 CET	49999	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.617577076 CET	49999	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.617585897 CET	443	49999	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.986486912 CET	443	49994	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.989514112 CET	443	49994	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.989581108 CET	49994	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.989653111 CET	49994	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.989672899 CET	443	49994	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.989685059 CET	49994	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.989692926 CET	443	49994	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.992898941 CET	50000	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.992942095 CET	443	50000	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:42.993022919 CET	50000	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.993190050 CET	50000	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:42.993207932 CET	443	50000	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:43.022430897 CET	443	49995	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:43.022521019 CET	443	49995	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:43.022582054 CET	49995	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:43.022726059 CET	49995	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:43.022748947 CET	443	49995	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:43.022761106 CET	49995	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:43.022767067 CET	443	49995	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:43.025198936 CET	50001	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:43.025238991 CET	443	50001	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:43.025422096 CET	50001	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:43.025592089 CET	50001	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:43.025621891 CET	443	50001	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:43.793929100 CET	443	49997	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:43.794385910 CET	49997	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:43.794416904 CET	443	49997	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:43.794850111 CET	49997	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:43.794858932 CET	443	49997	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.226882935 CET	443	49997	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.230606079 CET	443	49997	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.230679989 CET	49997	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.230720043 CET	49997	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.230736971 CET	443	49997	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.230747938 CET	49997	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.230757952 CET	443	49997	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.233452082 CET	50004	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.233472109 CET	443	50004	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.233669996 CET	50004	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.234008074 CET	50004	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.234024048 CET	443	50004	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.331444979 CET	443	49998	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.331938982 CET	49998	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.331969976 CET	443	49998	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.332488060 CET	49998	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.332494020 CET	443	49998	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.332837105 CET	443	49999	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.333133936 CET	49999	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.333163023 CET	443	49999	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.333579063 CET	49999	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.333585024 CET	443	49999	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.707561970 CET	443	50000	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.708071947 CET	50000	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.708096981 CET	443	50000	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.708549976 CET	50000	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.708558083 CET	443	50000	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.738677979 CET	443	50001	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.739237070 CET	50001	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.739260912 CET	443	50001	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.739696980 CET	50001	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.739706039 CET	443	50001	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.764689922 CET	443	49998	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.766380072 CET	443	49999	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.768290997 CET	443	49998	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.768347979 CET	49998	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.768354893 CET	443	49998	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.768403053 CET	49998	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.768471003 CET	49998	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.768493891 CET	443	49998	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.768511057 CET	49998	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.768517017 CET	443	49998	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.769625902 CET	443	49999	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.769706011 CET	49999	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.769741058 CET	49999	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.769754887 CET	443	49999	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.769784927 CET	49999	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.769790888 CET	443	49999	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.772337914 CET	50005	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.772361994 CET	443	50005	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.772542953 CET	50006	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.772568941 CET	443	50006	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.772572994 CET	50005	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.772625923 CET	50006	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.772814035 CET	50006	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.772824049 CET	443	50006	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:44.772855043 CET	50005	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:44.772866964 CET	443	50005	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.141274929 CET	443	50000	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.144591093 CET	443	50000	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.144653082 CET	443	50000	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.144717932 CET	50000	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.144764900 CET	50000	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.144783974 CET	443	50000	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.144794941 CET	50000	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.144800901 CET	443	50000	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.147805929 CET	50007	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.147855043 CET	443	50007	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.147953033 CET	50007	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.148153067 CET	50007	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.148164988 CET	443	50007	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.172454119 CET	443	50001	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.175890923 CET	443	50001	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.175946951 CET	50001	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.176004887 CET	50001	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.176023006 CET	443	50001	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.176037073 CET	50001	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.176042080 CET	443	50001	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.178841114 CET	50008	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.178885937 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.179050922 CET	50008	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.179256916 CET	50008	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.179270029 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.947717905 CET	443	50004	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.948237896 CET	50004	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.948261976 CET	443	50004	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:45.948729992 CET	50004	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:45.948734999 CET	443	50004	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.380639076 CET	443	50004	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.380743027 CET	443	50004	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.380794048 CET	443	50004	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.380804062 CET	50004	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.380848885 CET	50004	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.381031036 CET	50004	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.381045103 CET	443	50004	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.381057024 CET	50004	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.381062031 CET	443	50004	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.384151936 CET	50010	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.384197950 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.384258032 CET	50010	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.384530067 CET	50010	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.384545088 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.489480972 CET	443	50005	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.489587069 CET	443	50006	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.490057945 CET	50005	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.490092039 CET	443	50005	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.490329027 CET	50006	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.490358114 CET	443	50006	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.490626097 CET	50005	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.490633011 CET	443	50005	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.490822077 CET	50006	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.490828991 CET	443	50006	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.861609936 CET	443	50007	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.862184048 CET	50007	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.862220049 CET	443	50007	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.862641096 CET	50007	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.862647057 CET	443	50007	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.894917011 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.895826101 CET	50008	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.895849943 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.896306992 CET	50008	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.896311998 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.922512054 CET	443	50005	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.923429966 CET	443	50006	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.923455000 CET	443	50006	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.923507929 CET	443	50006	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.923559904 CET	50006	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.923724890 CET	50006	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.923738956 CET	443	50006	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.923751116 CET	50006	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.923755884 CET	443	50006	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.926196098 CET	443	50005	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.926265001 CET	50005	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.926301003 CET	50005	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.926316023 CET	443	50005	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.926326990 CET	50005	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.926331997 CET	443	50005	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.926743031 CET	50011	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.926768064 CET	443	50011	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.926886082 CET	50011	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.927059889 CET	50011	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.927073002 CET	443	50011	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.928579092 CET	50012	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.928600073 CET	443	50012	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:46.928833961 CET	50012	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.928910017 CET	50012	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:46.928924084 CET	443	50012	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.295052052 CET	443	50007	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.298180103 CET	443	50007	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.298250914 CET	50007	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.298288107 CET	50007	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.298307896 CET	443	50007	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.298319101 CET	50007	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.298325062 CET	443	50007	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.306133986 CET	50013	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.306170940 CET	443	50013	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.306230068 CET	50013	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.306407928 CET	50013	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.306425095 CET	443	50013	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.327827930 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.327841043 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.327954054 CET	50008	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.327984095 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.328222990 CET	50008	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.328233957 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.328248024 CET	50008	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.328665972 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.328696012 CET	443	50008	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.328831911 CET	50008	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.330931902 CET	50014	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.330965042 CET	443	50014	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.331083059 CET	50014	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.331209898 CET	50014	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:47.331222057 CET	443	50014	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:47.782577038 CET	49798	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:09:47.782608986 CET	49802	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:09:47.808861017 CET	50015	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:47.808903933 CET	443	50015	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:47.809076071 CET	50015	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:47.810400009 CET	50015	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:47.810415030 CET	443	50015	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:47.902348042 CET	80	49798	142.250.181.69	192.168.2.6
Dec 9, 2024 11:09:47.902415991 CET	49798	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:09:47.902921915 CET	80	49802	142.250.181.69	192.168.2.6
Dec 9, 2024 11:09:47.902976990 CET	49802	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:09:48.099150896 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.099669933 CET	50010	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.099687099 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.100188017 CET	50010	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.100192070 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.532660961 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.532682896 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.532744884 CET	50010	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.532772064 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.532989979 CET	50010	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.533005953 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.533014059 CET	50010	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.533164024 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.533195972 CET	443	50010	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.533242941 CET	50010	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.535784960 CET	50016	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.535845995 CET	443	50016	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.536113024 CET	50016	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.536329031 CET	50016	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.536348104 CET	443	50016	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.641392946 CET	443	50011	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.641859055 CET	50011	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.641881943 CET	443	50011	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.642409086 CET	50011	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.642414093 CET	443	50011	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.642416954 CET	443	50012	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.642961979 CET	50012	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.642972946 CET	443	50012	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:48.643356085 CET	50012	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:48.643366098 CET	443	50012	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.022731066 CET	443	50013	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.023365021 CET	50013	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.023380041 CET	443	50013	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.023813963 CET	50013	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.023819923 CET	443	50013	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.044958115 CET	443	50014	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.045317888 CET	50014	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.045325994 CET	443	50014	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.045711994 CET	50014	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.045717001 CET	443	50014	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.074523926 CET	443	50011	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.075504065 CET	443	50012	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.075783968 CET	443	50012	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.075872898 CET	50012	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.075872898 CET	50012	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.075901985 CET	50012	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.075918913 CET	443	50012	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.078098059 CET	443	50011	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.078155041 CET	443	50011	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.078175068 CET	50011	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.078226089 CET	50011	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.078386068 CET	50011	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.078401089 CET	443	50011	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.078412056 CET	50011	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.078418016 CET	443	50011	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.078808069 CET	50017	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.078846931 CET	443	50017	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.078907967 CET	50017	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.079138994 CET	50017	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.079149008 CET	443	50017	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.080976963 CET	50018	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.080998898 CET	443	50018	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.081058979 CET	50018	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.081197977 CET	50018	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.081212997 CET	443	50018	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.455842972 CET	443	50013	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.459692001 CET	443	50013	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.459733009 CET	443	50013	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.459743023 CET	50013	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.459799051 CET	50013	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.459882021 CET	50013	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.459901094 CET	443	50013	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.459911108 CET	50013	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.459916115 CET	443	50013	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.462668896 CET	50019	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.462704897 CET	443	50019	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.462790966 CET	50019	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.462948084 CET	50019	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.462964058 CET	443	50019	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.477653980 CET	443	50014	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.481517076 CET	443	50014	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.481574059 CET	50014	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.481621981 CET	50014	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.481637001 CET	443	50014	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.481647968 CET	50014	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.481652975 CET	443	50014	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.484061003 CET	50020	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.484091997 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:49.484205961 CET	50020	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.484318018 CET	50020	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:49.484323978 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.036237955 CET	443	50015	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:50.036324978 CET	50015	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:50.038260937 CET	50015	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:50.038269043 CET	443	50015	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:50.038511038 CET	443	50015	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:50.040431976 CET	50015	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:50.040514946 CET	50015	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:50.040523052 CET	443	50015	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:50.040677071 CET	50015	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:50.087325096 CET	443	50015	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:50.254146099 CET	443	50016	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.254662037 CET	50016	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.254694939 CET	443	50016	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.255130053 CET	50016	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.255136013 CET	443	50016	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.585700035 CET	443	50015	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:50.585778952 CET	443	50015	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:50.585856915 CET	50015	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:50.585992098 CET	50015	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:09:50.586003065 CET	443	50015	20.198.118.190	192.168.2.6
Dec 9, 2024 11:09:50.687170029 CET	443	50016	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.690777063 CET	443	50016	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.690835953 CET	50016	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.690857887 CET	443	50016	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.690927029 CET	50016	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.691024065 CET	50016	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.691046000 CET	443	50016	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.691061020 CET	50016	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.691066980 CET	443	50016	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.693850040 CET	50021	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.693890095 CET	443	50021	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.694061041 CET	50021	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.694246054 CET	50021	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.694258928 CET	443	50021	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.792673111 CET	443	50017	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.793139935 CET	50017	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.793171883 CET	443	50017	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.793606043 CET	50017	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.793617964 CET	443	50017	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.794339895 CET	443	50018	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.794653893 CET	50018	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.794687033 CET	443	50018	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.795131922 CET	50018	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:50.795140028 CET	443	50018	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:50.891078949 CET	50022	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:50.891104937 CET	443	50022	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:50.891398907 CET	50022	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:50.891632080 CET	50022	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:50.891648054 CET	443	50022	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:51.178333998 CET	443	50019	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.178793907 CET	50019	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.178814888 CET	443	50019	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.179225922 CET	50019	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.179234028 CET	443	50019	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.202116013 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.202632904 CET	50020	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.202651978 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.203152895 CET	50020	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.203157902 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.228212118 CET	443	50017	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.228703976 CET	443	50018	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.228732109 CET	443	50018	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.228785992 CET	443	50018	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.228801966 CET	50018	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.228846073 CET	50018	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.229185104 CET	50018	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.229202032 CET	443	50018	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.229217052 CET	50018	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.229223967 CET	443	50018	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.231365919 CET	443	50017	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.231425047 CET	50017	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.231465101 CET	50017	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.231477976 CET	443	50017	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.231487989 CET	50017	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.231492996 CET	443	50017	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.234308958 CET	50023	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.234345913 CET	443	50023	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.234424114 CET	50023	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.235188961 CET	50024	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.235227108 CET	443	50024	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.235462904 CET	50024	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.235496044 CET	50023	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.235507965 CET	443	50023	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.235569954 CET	50024	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.235590935 CET	443	50024	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.611697912 CET	443	50019	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.611774921 CET	443	50019	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.611861944 CET	50019	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.612047911 CET	50019	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.612073898 CET	443	50019	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.612102985 CET	50019	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.612107992 CET	443	50019	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.615178108 CET	50025	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.615238905 CET	443	50025	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.615341902 CET	50025	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.615492105 CET	50025	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.615509987 CET	443	50025	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.635607004 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.635756969 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.635807991 CET	50020	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.635833979 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.635847092 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.635885954 CET	50020	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.635926962 CET	50020	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.635941982 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.635957003 CET	50020	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.635963917 CET	443	50020	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.638633966 CET	50026	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.638679028 CET	443	50026	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:51.638775110 CET	50026	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.638991117 CET	50026	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:51.639000893 CET	443	50026	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.409859896 CET	443	50021	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.410331964 CET	50021	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.410352945 CET	443	50021	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.410820961 CET	50021	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.410825968 CET	443	50021	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.585642099 CET	443	50022	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:52.585978031 CET	50022	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:52.585993052 CET	443	50022	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:52.586340904 CET	443	50022	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:52.586777925 CET	50022	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:52.586849928 CET	443	50022	142.250.181.68	192.168.2.6
Dec 9, 2024 11:09:52.639703035 CET	50022	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:09:52.843739033 CET	443	50021	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.846867085 CET	443	50021	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.846930981 CET	50021	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.847028971 CET	50021	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.847054958 CET	443	50021	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.847090960 CET	50021	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.847098112 CET	443	50021	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.849824905 CET	50027	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.849879980 CET	443	50027	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.850140095 CET	50027	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.850296021 CET	50027	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.850310087 CET	443	50027	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.952301025 CET	443	50023	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.953049898 CET	50023	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.953072071 CET	443	50023	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.953655958 CET	50023	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.953661919 CET	443	50023	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.954632998 CET	443	50024	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.955095053 CET	50024	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.955121040 CET	443	50024	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:52.955504894 CET	50024	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:52.955509901 CET	443	50024	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.336992025 CET	443	50025	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.337577105 CET	50025	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.337611914 CET	443	50025	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.338017941 CET	50025	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.338025093 CET	443	50025	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.353147030 CET	443	50026	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.353574038 CET	50026	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.353600025 CET	443	50026	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.354012966 CET	50026	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.354017973 CET	443	50026	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.387842894 CET	443	50024	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.391227961 CET	443	50024	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.391288042 CET	50024	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.391288996 CET	443	50024	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.391338110 CET	50024	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.391413927 CET	50024	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.391427994 CET	443	50024	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.391437054 CET	50024	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.391442060 CET	443	50024	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.394124031 CET	50028	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.394149065 CET	443	50028	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.394265890 CET	50028	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.394428015 CET	50028	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.394442081 CET	443	50028	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.431916952 CET	443	50023	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.435168982 CET	443	50023	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.435240030 CET	50023	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.435302019 CET	50023	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.435319901 CET	443	50023	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.435333967 CET	50023	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.435340881 CET	443	50023	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.438148975 CET	50029	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.438175917 CET	443	50029	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.438245058 CET	50029	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.438438892 CET	50029	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.438452005 CET	443	50029	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.771138906 CET	443	50025	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.771230936 CET	443	50025	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.771352053 CET	50025	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.771465063 CET	50025	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.771486998 CET	443	50025	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.771497011 CET	50025	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.771502972 CET	443	50025	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.774640083 CET	50030	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.774678946 CET	443	50030	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.774755955 CET	50030	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.774928093 CET	50030	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.774952888 CET	443	50030	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.786046982 CET	443	50026	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.789690018 CET	443	50026	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.789756060 CET	50026	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.789832115 CET	50026	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.789848089 CET	443	50026	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.789865971 CET	50026	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.789870977 CET	443	50026	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.792175055 CET	50031	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.792216063 CET	443	50031	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:53.792417049 CET	50031	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.792613029 CET	50031	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:53.792629957 CET	443	50031	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:54.187123060 CET	49704	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:09:54.306894064 CET	443	49704	20.190.147.8	192.168.2.6
Dec 9, 2024 11:09:54.306972980 CET	49704	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:09:54.564074993 CET	443	50027	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:54.564573050 CET	50027	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:54.564589977 CET	443	50027	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:54.565032959 CET	50027	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:54.565038919 CET	443	50027	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.107398033 CET	443	50028	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.107918978 CET	50028	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.107943058 CET	443	50028	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.108398914 CET	50028	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.108407021 CET	443	50028	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.160486937 CET	443	50027	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.163567066 CET	443	50027	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.163636923 CET	443	50027	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.163655043 CET	50027	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.163764954 CET	50027	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.163764954 CET	50027	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.163867950 CET	50027	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.163885117 CET	443	50027	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.166619062 CET	50032	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.166645050 CET	443	50032	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.166794062 CET	50032	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.166867971 CET	50032	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.166877985 CET	443	50032	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.239309072 CET	443	50029	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.239788055 CET	50029	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.239805937 CET	443	50029	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.242136955 CET	50029	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.242150068 CET	443	50029	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.490219116 CET	443	50030	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.490744114 CET	50030	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.490772963 CET	443	50030	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.491211891 CET	50030	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.491229057 CET	443	50030	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.506805897 CET	443	50031	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.507563114 CET	50031	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.507563114 CET	50031	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.507595062 CET	443	50031	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.507610083 CET	443	50031	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.540319920 CET	443	50028	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.544390917 CET	443	50028	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.544578075 CET	50028	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.544625998 CET	50028	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.544625998 CET	50028	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.544645071 CET	443	50028	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.544655085 CET	443	50028	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.550134897 CET	50033	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.550165892 CET	443	50033	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.553165913 CET	50033	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.553488016 CET	50033	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.553502083 CET	443	50033	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.672650099 CET	443	50029	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.672679901 CET	443	50029	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.672722101 CET	443	50029	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.672755003 CET	50029	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.672810078 CET	50029	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.673042059 CET	50029	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.673063040 CET	443	50029	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.673099041 CET	50029	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.673105001 CET	443	50029	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.675848007 CET	50034	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.675893068 CET	443	50034	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.676065922 CET	50034	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.676214933 CET	50034	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.676229954 CET	443	50034	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.923257113 CET	443	50030	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.926883936 CET	443	50030	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.927002907 CET	50030	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.927002907 CET	50030	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.927092075 CET	50030	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.927114964 CET	443	50030	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.929752111 CET	50035	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.929790020 CET	443	50035	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.929939985 CET	50035	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.930059910 CET	50035	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.930073977 CET	443	50035	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.939982891 CET	443	50031	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.943439007 CET	443	50031	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.943496943 CET	50031	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.943571091 CET	50031	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.943589926 CET	443	50031	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.943603039 CET	50031	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.943609953 CET	443	50031	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.946003914 CET	50036	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.946028948 CET	443	50036	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:55.946094990 CET	50036	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.946225882 CET	50036	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:55.946240902 CET	443	50036	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:56.881474018 CET	443	50032	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:56.882086039 CET	50032	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:56.882133961 CET	443	50032	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:56.882569075 CET	50032	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:56.882575035 CET	443	50032	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.269747972 CET	443	50033	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.278378010 CET	50033	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.278400898 CET	443	50033	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.278973103 CET	50033	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.278979063 CET	443	50033	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.319577932 CET	443	50032	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.322527885 CET	443	50032	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.322573900 CET	443	50032	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.322587967 CET	50032	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.322642088 CET	50032	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.322854996 CET	50032	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.322879076 CET	443	50032	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.322895050 CET	50032	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.322901011 CET	443	50032	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.325227976 CET	50037	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.325263977 CET	443	50037	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.325421095 CET	50037	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.325577974 CET	50037	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.325591087 CET	443	50037	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.390476942 CET	443	50034	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.390918016 CET	50034	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.390940905 CET	443	50034	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.391644955 CET	50034	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.391653061 CET	443	50034	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.645178080 CET	443	50035	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.645786047 CET	50035	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.645802975 CET	443	50035	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.646291971 CET	50035	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.646298885 CET	443	50035	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.660043001 CET	443	50036	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.660480976 CET	50036	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.660512924 CET	443	50036	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.661005974 CET	50036	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.661014080 CET	443	50036	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.703888893 CET	443	50033	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.707075119 CET	443	50033	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.707164049 CET	50033	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.707216024 CET	50033	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.707226992 CET	443	50033	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.707247019 CET	50033	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.707252979 CET	443	50033	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.710062981 CET	50038	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.710093975 CET	443	50038	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.710161924 CET	50038	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.710313082 CET	50038	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.710326910 CET	443	50038	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.824609041 CET	443	50034	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.827656984 CET	443	50034	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.827723026 CET	50034	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.827760935 CET	50034	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.827778101 CET	443	50034	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.827789068 CET	50034	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.827795982 CET	443	50034	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.830842972 CET	50039	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.830878019 CET	443	50039	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:57.831099987 CET	50039	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.831247091 CET	50039	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:57.831260920 CET	443	50039	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.078923941 CET	443	50035	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.082128048 CET	443	50035	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.082194090 CET	443	50035	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.082195997 CET	50035	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.082235098 CET	50035	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.082283020 CET	50035	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.082300901 CET	443	50035	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.082310915 CET	50035	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.082317114 CET	443	50035	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.085131884 CET	50040	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.085175991 CET	443	50040	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.085249901 CET	50040	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.085385084 CET	50040	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.085398912 CET	443	50040	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.093337059 CET	443	50036	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.097083092 CET	443	50036	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.097141981 CET	50036	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.097182989 CET	50036	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.097201109 CET	443	50036	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.097212076 CET	50036	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.097218990 CET	443	50036	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.099440098 CET	50041	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.099478006 CET	443	50041	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:58.099559069 CET	50041	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.099674940 CET	50041	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:58.099692106 CET	443	50041	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.039818048 CET	443	50037	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.040337086 CET	50037	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.040352106 CET	443	50037	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.040822029 CET	50037	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.040829897 CET	443	50037	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.423166990 CET	443	50038	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.423698902 CET	50038	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.423747063 CET	443	50038	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.424209118 CET	50038	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.424217939 CET	443	50038	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.475934982 CET	443	50037	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.479156971 CET	443	50037	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.479212046 CET	443	50037	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.479242086 CET	50037	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.479295015 CET	50037	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.479377985 CET	50037	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.479398012 CET	443	50037	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.479418039 CET	50037	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.479425907 CET	443	50037	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.482207060 CET	50042	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.482300043 CET	443	50042	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.482387066 CET	50042	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.482573986 CET	50042	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.482604027 CET	443	50042	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.544127941 CET	443	50039	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.544678926 CET	50039	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.544696093 CET	443	50039	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.545167923 CET	50039	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.545176029 CET	443	50039	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.718535900 CET	49712	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:09:59.799673080 CET	443	50040	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.800158978 CET	50040	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.800214052 CET	443	50040	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.800630093 CET	50040	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.800658941 CET	443	50040	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.820420980 CET	443	50041	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.820893049 CET	50041	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.820926905 CET	443	50041	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.821369886 CET	50041	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.821377039 CET	443	50041	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.838346004 CET	443	49712	20.190.147.8	192.168.2.6
Dec 9, 2024 11:09:59.838402987 CET	49712	443	192.168.2.6	20.190.147.8
Dec 9, 2024 11:09:59.855981112 CET	443	50038	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.859791040 CET	443	50038	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.859852076 CET	50038	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.859883070 CET	50038	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.859906912 CET	443	50038	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.859918118 CET	50038	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.859924078 CET	443	50038	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.862803936 CET	50043	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.862862110 CET	443	50043	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.862924099 CET	50043	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.863054037 CET	50043	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.863075972 CET	443	50043	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.980134010 CET	443	50039	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.983263016 CET	443	50039	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.983338118 CET	50039	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.983429909 CET	50039	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.983459949 CET	443	50039	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.983479023 CET	50039	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.983484983 CET	443	50039	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.986984968 CET	50044	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.987018108 CET	443	50044	13.107.246.63	192.168.2.6
Dec 9, 2024 11:09:59.987087965 CET	50044	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.987255096 CET	50044	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:09:59.987270117 CET	443	50044	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.396766901 CET	443	50040	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.396858931 CET	443	50040	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.396913052 CET	50040	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.397115946 CET	50040	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.397139072 CET	443	50040	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.397161961 CET	50040	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.397171021 CET	443	50040	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.400285959 CET	50045	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.400333881 CET	443	50045	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.400628090 CET	50045	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.400990009 CET	50045	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.401002884 CET	443	50045	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.407217979 CET	443	50041	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.410424948 CET	443	50041	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.410480976 CET	443	50041	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.410515070 CET	50041	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.410554886 CET	50041	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.410639048 CET	50041	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.410665989 CET	443	50041	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.410680056 CET	50041	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.410686970 CET	443	50041	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.412964106 CET	50046	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.413012028 CET	443	50046	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:00.413109064 CET	50046	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.413238049 CET	50046	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:00.413256884 CET	443	50046	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.200783968 CET	443	50042	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.201230049 CET	50042	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:01.201250076 CET	443	50042	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.201680899 CET	50042	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:01.201685905 CET	443	50042	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.715042114 CET	443	50043	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.715579987 CET	50043	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:01.715611935 CET	443	50043	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.716058016 CET	50043	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:01.716064930 CET	443	50043	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.743153095 CET	443	50042	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.748838902 CET	443	50042	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.748898983 CET	50042	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:01.748950958 CET	50042	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:01.748963118 CET	443	50042	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.748975992 CET	50042	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:01.748981953 CET	443	50042	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.758673906 CET	50047	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:01.758687973 CET	443	50047	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:01.758771896 CET	50047	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:01.759119034 CET	50047	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:01.759128094 CET	443	50047	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.046659946 CET	443	50044	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.049966097 CET	50044	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.049988985 CET	443	50044	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.050441980 CET	50044	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.050447941 CET	443	50044	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.149096012 CET	443	50043	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.153696060 CET	443	50043	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.153760910 CET	443	50043	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.153759003 CET	50043	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.153812885 CET	50043	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.153867006 CET	50043	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.153892994 CET	443	50043	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.153913975 CET	50043	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.153919935 CET	443	50043	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.157118082 CET	50048	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.157162905 CET	443	50048	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.157464027 CET	50048	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.157785892 CET	50048	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.157807112 CET	443	50048	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.174568892 CET	443	50046	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.174922943 CET	443	50045	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.175293922 CET	50046	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.175318003 CET	443	50046	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.175759077 CET	50046	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.175765038 CET	443	50046	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.176183939 CET	50045	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.176213980 CET	443	50045	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.176769018 CET	50045	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.176775932 CET	443	50045	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.282881975 CET	443	50022	142.250.181.68	192.168.2.6
Dec 9, 2024 11:10:02.282978058 CET	443	50022	142.250.181.68	192.168.2.6
Dec 9, 2024 11:10:02.283085108 CET	50022	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:10:02.480143070 CET	443	50044	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.486222029 CET	443	50044	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.486273050 CET	50044	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.486325026 CET	50044	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.486347914 CET	443	50044	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.486360073 CET	50044	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.486366987 CET	443	50044	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.489073992 CET	50049	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.489111900 CET	443	50049	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.489201069 CET	50049	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.489373922 CET	50049	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.489387035 CET	443	50049	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.608627081 CET	443	50046	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.608692884 CET	443	50046	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.608751059 CET	50046	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.609150887 CET	50046	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.609177113 CET	443	50046	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.609191895 CET	50046	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.609198093 CET	443	50046	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.610198975 CET	443	50045	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.610229969 CET	443	50045	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.610275984 CET	443	50045	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.610291004 CET	50045	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.610327959 CET	50045	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.610551119 CET	50045	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.610567093 CET	443	50045	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.610579967 CET	50045	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.610584974 CET	443	50045	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.612159014 CET	50050	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.612235069 CET	443	50050	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.612358093 CET	50050	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.612497091 CET	50050	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.612528086 CET	443	50050	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.612694979 CET	50051	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.612724066 CET	443	50051	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:02.612790108 CET	50051	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.612931013 CET	50051	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:02.612945080 CET	443	50051	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.475054979 CET	443	50047	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.475670099 CET	50047	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:03.475682974 CET	443	50047	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.476133108 CET	50047	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:03.476138115 CET	443	50047	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.782847881 CET	50022	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:10:03.782874107 CET	443	50022	142.250.181.68	192.168.2.6
Dec 9, 2024 11:10:03.871925116 CET	443	50048	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.872507095 CET	50048	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:03.872553110 CET	443	50048	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.872950077 CET	50048	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:03.872956038 CET	443	50048	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.909147978 CET	443	50047	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.912341118 CET	443	50047	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.912398100 CET	50047	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:03.912509918 CET	50047	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:03.912518024 CET	443	50047	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.912538052 CET	50047	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:03.912542105 CET	443	50047	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.915399075 CET	50052	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:03.915421963 CET	443	50052	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:03.915493011 CET	50052	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:03.915668011 CET	50052	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:03.915683985 CET	443	50052	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.203986883 CET	443	50049	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.204502106 CET	50049	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.204528093 CET	443	50049	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.204952955 CET	50049	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.204957962 CET	443	50049	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.305919886 CET	443	50048	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.308964968 CET	443	50048	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.309065104 CET	50048	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.309151888 CET	50048	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.309151888 CET	50048	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.309179068 CET	443	50048	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.309190035 CET	443	50048	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.312108040 CET	50053	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.312149048 CET	443	50053	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.312221050 CET	50053	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.312381029 CET	50053	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.312400103 CET	443	50053	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.326642036 CET	443	50051	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.326642990 CET	443	50050	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.327147961 CET	50051	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.327182055 CET	443	50051	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.327264071 CET	50050	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.327279091 CET	443	50050	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.327672958 CET	50051	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.327678919 CET	443	50051	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.327899933 CET	50050	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.327905893 CET	443	50050	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.636996984 CET	443	50049	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.640666008 CET	443	50049	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.640736103 CET	50049	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.640750885 CET	443	50049	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.640805960 CET	50049	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.640870094 CET	50049	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.640894890 CET	443	50049	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.640912056 CET	50049	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.640917063 CET	443	50049	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.643708944 CET	50054	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.643783092 CET	443	50054	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.643856049 CET	50054	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.644041061 CET	50054	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.644053936 CET	443	50054	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.761198997 CET	443	50051	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.761279106 CET	443	50051	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.761389017 CET	50051	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.761543989 CET	50051	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.761574030 CET	443	50051	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.761580944 CET	50051	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.761589050 CET	443	50051	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.762083054 CET	443	50050	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.764273882 CET	50055	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.764317989 CET	443	50055	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.764385939 CET	50055	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.764556885 CET	50055	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.764569998 CET	443	50055	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.767591000 CET	443	50050	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.767662048 CET	50050	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.767714977 CET	50050	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.767735004 CET	443	50050	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.767755985 CET	50050	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.767764091 CET	443	50050	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.769941092 CET	50056	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.769990921 CET	443	50056	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:04.770051956 CET	50056	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.770181894 CET	50056	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:04.770203114 CET	443	50056	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:05.628057003 CET	443	50052	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:05.628539085 CET	50052	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:05.628576994 CET	443	50052	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:05.629007101 CET	50052	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:05.629015923 CET	443	50052	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.026915073 CET	443	50053	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.027498960 CET	50053	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.027529955 CET	443	50053	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.027951956 CET	50053	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.027960062 CET	443	50053	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.061146975 CET	443	50052	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.064841986 CET	443	50052	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.064903021 CET	50052	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.064979076 CET	50052	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.065002918 CET	443	50052	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.065021038 CET	50052	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.065026999 CET	443	50052	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.068011999 CET	50057	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.068042040 CET	443	50057	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.068106890 CET	50057	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.068280935 CET	50057	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.068293095 CET	443	50057	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.359472990 CET	443	50054	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.359942913 CET	50054	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.359978914 CET	443	50054	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.360403061 CET	50054	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.360408068 CET	443	50054	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.460201979 CET	443	50053	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.463507891 CET	443	50053	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.463572979 CET	50053	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.463643074 CET	50053	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.463660002 CET	443	50053	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.463673115 CET	50053	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.463679075 CET	443	50053	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.466543913 CET	50058	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.466587067 CET	443	50058	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.466645002 CET	50058	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.466799974 CET	50058	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.466811895 CET	443	50058	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.484086990 CET	443	50056	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.484527111 CET	50056	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.484556913 CET	443	50056	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.484958887 CET	50056	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.484966040 CET	443	50056	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.500041962 CET	443	50055	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.500427961 CET	50055	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.500456095 CET	443	50055	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.500888109 CET	50055	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.500895977 CET	443	50055	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.792802095 CET	443	50054	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.795994997 CET	443	50054	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.796056032 CET	50054	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.796108961 CET	50054	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.796123981 CET	443	50054	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.796142101 CET	50054	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.796149015 CET	443	50054	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.799000978 CET	50059	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.799048901 CET	443	50059	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.799123049 CET	50059	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.799280882 CET	50059	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.799295902 CET	443	50059	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.917027950 CET	443	50056	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.920686960 CET	443	50056	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.920782089 CET	50056	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.921071053 CET	50056	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.921107054 CET	443	50056	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.921117067 CET	50056	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.921123981 CET	443	50056	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.923871040 CET	50060	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.923917055 CET	443	50060	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.924082994 CET	50060	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.924269915 CET	50060	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.924287081 CET	443	50060	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.933494091 CET	443	50055	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.937021017 CET	443	50055	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.937074900 CET	50055	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.937112093 CET	50055	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.937136889 CET	443	50055	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.937150955 CET	50055	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.937158108 CET	443	50055	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.939822912 CET	50061	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.939867020 CET	443	50061	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:06.939941883 CET	50061	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.940114021 CET	50061	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:06.940133095 CET	443	50061	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:07.782608032 CET	443	50057	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:07.783099890 CET	50057	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:07.783121109 CET	443	50057	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:07.783776999 CET	50057	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:07.783782005 CET	443	50057	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.185858965 CET	443	50058	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.186321020 CET	50058	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.186362028 CET	443	50058	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.186779022 CET	50058	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.186785936 CET	443	50058	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.217303038 CET	443	50057	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.220412970 CET	443	50057	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.220455885 CET	443	50057	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.220468044 CET	50057	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.220523119 CET	50057	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.220571041 CET	50057	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.220587015 CET	443	50057	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.220597982 CET	50057	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.220602989 CET	443	50057	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.223571062 CET	50062	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.223606110 CET	443	50062	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.223718882 CET	50062	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.223918915 CET	50062	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.223934889 CET	443	50062	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.513947964 CET	443	50059	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.514465094 CET	50059	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.514497995 CET	443	50059	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.515033960 CET	50059	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.515041113 CET	443	50059	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.620723963 CET	443	50058	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.620810032 CET	443	50058	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.621077061 CET	50058	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.621469021 CET	50058	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.621485949 CET	443	50058	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.621499062 CET	50058	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.621505976 CET	443	50058	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.627518892 CET	50063	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.627578020 CET	443	50063	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.627693892 CET	50063	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.627909899 CET	50063	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.627923965 CET	443	50063	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.649625063 CET	443	50060	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.650101900 CET	50060	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.650118113 CET	443	50060	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.650553942 CET	50060	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.650557995 CET	443	50060	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.661874056 CET	443	50061	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.662240982 CET	50061	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.662266970 CET	443	50061	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.662715912 CET	50061	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.662720919 CET	443	50061	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.957101107 CET	443	50059	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.960920095 CET	443	50059	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.960978031 CET	443	50059	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.961096048 CET	50059	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.961370945 CET	50059	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.961390018 CET	443	50059	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.961405039 CET	50059	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.961410046 CET	443	50059	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.964724064 CET	50065	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.964744091 CET	443	50065	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:08.964972019 CET	50065	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.965122938 CET	50065	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:08.965136051 CET	443	50065	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.083770990 CET	443	50060	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.087264061 CET	443	50060	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.087331057 CET	50060	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.087407112 CET	50060	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.087407112 CET	50060	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.087430000 CET	443	50060	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.087440968 CET	443	50060	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.090405941 CET	50066	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.090442896 CET	443	50066	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.090504885 CET	50066	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.090687990 CET	50066	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.090698957 CET	443	50066	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.095529079 CET	443	50061	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.098812103 CET	443	50061	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.098860025 CET	443	50061	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.098915100 CET	50061	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.098964930 CET	50061	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.098964930 CET	50061	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.098982096 CET	443	50061	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.098993063 CET	443	50061	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.101222038 CET	50067	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.101270914 CET	443	50067	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.101341963 CET	50067	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.101521015 CET	50067	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.101535082 CET	443	50067	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.936635017 CET	443	50062	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.937165022 CET	50062	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.937192917 CET	443	50062	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:09.937678099 CET	50062	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:09.937691927 CET	443	50062	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.342921019 CET	443	50063	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.343535900 CET	50063	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.343559980 CET	443	50063	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.344110966 CET	50063	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.344115973 CET	443	50063	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.369405031 CET	443	50062	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.373025894 CET	443	50062	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.373104095 CET	50062	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.373148918 CET	50062	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.373148918 CET	50062	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.373173952 CET	443	50062	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.373186111 CET	443	50062	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.375838041 CET	50068	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.375878096 CET	443	50068	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.376040936 CET	50068	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.376269102 CET	50068	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.376290083 CET	443	50068	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.678153038 CET	443	50065	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.688637018 CET	50065	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.688659906 CET	443	50065	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.689205885 CET	50065	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.689210892 CET	443	50065	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.778512001 CET	443	50063	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.778580904 CET	443	50063	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.778826952 CET	50063	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.778826952 CET	50063	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.778903008 CET	50063	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.778918982 CET	443	50063	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.784270048 CET	50069	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.784290075 CET	443	50069	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.785582066 CET	50069	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.785742044 CET	50069	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.785753012 CET	443	50069	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.805655003 CET	443	50066	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.806546926 CET	50066	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.806546926 CET	50066	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.806570053 CET	443	50066	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.806588888 CET	443	50066	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.817220926 CET	443	50067	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.817791939 CET	50067	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.817807913 CET	443	50067	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:10.818180084 CET	50067	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:10.818190098 CET	443	50067	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.111430883 CET	443	50065	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.115012884 CET	443	50065	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.115082026 CET	50065	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.115145922 CET	50065	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.115159988 CET	443	50065	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.115171909 CET	50065	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.115178108 CET	443	50065	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.117950916 CET	50071	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.117985010 CET	443	50071	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.118072033 CET	50071	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.118285894 CET	50071	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.118302107 CET	443	50071	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.238852978 CET	443	50066	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.242714882 CET	443	50066	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.242763996 CET	50066	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.242769003 CET	443	50066	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.242810011 CET	50066	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.242877960 CET	50066	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.242891073 CET	443	50066	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.242908001 CET	50066	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.242913961 CET	443	50066	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.245831013 CET	50072	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.245872974 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.245946884 CET	50072	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.246104002 CET	50072	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.246118069 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.250175953 CET	443	50067	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.254004002 CET	443	50067	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.254070997 CET	50067	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.254143953 CET	50067	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.254160881 CET	443	50067	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.254172087 CET	50067	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.254178047 CET	443	50067	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.256349087 CET	50073	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.256386042 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:11.256479979 CET	50073	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.256644011 CET	50073	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:11.256659031 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.089934111 CET	443	50068	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.090473890 CET	50068	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.090496063 CET	443	50068	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.090897083 CET	50068	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.090900898 CET	443	50068	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.498708010 CET	443	50069	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.499263048 CET	50069	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.499279022 CET	443	50069	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.499808073 CET	50069	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.499814987 CET	443	50069	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.525144100 CET	443	50068	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.525213957 CET	443	50068	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.525264978 CET	50068	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.525480986 CET	50068	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.525480986 CET	50068	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.525500059 CET	443	50068	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.525511980 CET	443	50068	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.528381109 CET	50074	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.528440952 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.528635025 CET	50074	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.528821945 CET	50074	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.528841019 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.832675934 CET	443	50071	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.833228111 CET	50071	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.833246946 CET	443	50071	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.833641052 CET	50071	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.833650112 CET	443	50071	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.937439919 CET	443	50069	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.937472105 CET	443	50069	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.938008070 CET	443	50069	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.938085079 CET	50069	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.938085079 CET	50069	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.938184023 CET	50069	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.938184023 CET	50069	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.938210011 CET	443	50069	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.938222885 CET	443	50069	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.941286087 CET	50075	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.941345930 CET	443	50075	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.941550970 CET	50075	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.941724062 CET	50075	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.941739082 CET	443	50075	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.964102030 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.964632034 CET	50072	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.964692116 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.965167046 CET	50072	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.965176105 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.970380068 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.970844030 CET	50073	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.970861912 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:12.971242905 CET	50073	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:12.971246958 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.266561985 CET	443	50071	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.266639948 CET	443	50071	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.266757965 CET	50071	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.266892910 CET	50071	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.266918898 CET	443	50071	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.266933918 CET	50071	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.266940117 CET	443	50071	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.269784927 CET	50076	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.269834042 CET	443	50076	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.270154953 CET	50076	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.270344019 CET	50076	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.270356894 CET	443	50076	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.403340101 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.403353930 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.403414965 CET	50072	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.403460026 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.403625965 CET	50072	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.403645992 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.403654099 CET	50072	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.403826952 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.403860092 CET	443	50072	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.404045105 CET	50072	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.405190945 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.405230999 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.405327082 CET	50073	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.405356884 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.405579090 CET	50073	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.405596018 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.405606031 CET	50073	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.405772924 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.405807972 CET	443	50073	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.405891895 CET	50073	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.407215118 CET	50077	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.407265902 CET	443	50077	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.407490015 CET	50077	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.407526970 CET	50078	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.407578945 CET	443	50078	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.407629967 CET	50078	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.407792091 CET	50078	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.407793045 CET	50077	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:13.407807112 CET	443	50078	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:13.407807112 CET	443	50077	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.244271040 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.244765997 CET	50074	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.244786024 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.245248079 CET	50074	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.245254040 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.661613941 CET	443	50075	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.662141085 CET	50075	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.662183046 CET	443	50075	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.662580013 CET	50075	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.662585974 CET	443	50075	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.677028894 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.677053928 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.677112103 CET	50074	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.677155972 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.677350998 CET	50074	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.677366972 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.677376032 CET	50074	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.677505970 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.677535057 CET	443	50074	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.677568913 CET	50074	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.679958105 CET	50079	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.680015087 CET	443	50079	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:14.680134058 CET	50079	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.680310965 CET	50079	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:14.680329084 CET	443	50079	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.155342102 CET	443	50075	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.155361891 CET	443	50075	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.155427933 CET	443	50075	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.155422926 CET	50075	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.155478001 CET	50075	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.155811071 CET	50075	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.155838013 CET	443	50075	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.155853033 CET	50075	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.155858994 CET	443	50075	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.157979012 CET	443	50078	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.158361912 CET	50078	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.158386946 CET	443	50076	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.158396006 CET	443	50078	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.158884048 CET	50078	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.158890009 CET	443	50078	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.159095049 CET	50080	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.159145117 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.159187078 CET	50076	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.159193993 CET	443	50076	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.159214973 CET	50080	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.159432888 CET	50080	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.159442902 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.159627914 CET	50076	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.159634113 CET	443	50076	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.163048983 CET	443	50077	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.163388968 CET	50077	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.163423061 CET	443	50077	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.163760900 CET	50077	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.163767099 CET	443	50077	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.592164040 CET	443	50078	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.592236996 CET	443	50078	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.592309952 CET	50078	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.592529058 CET	50078	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.592547894 CET	443	50078	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.592585087 CET	50078	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.592591047 CET	443	50078	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.595527887 CET	50081	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.595581055 CET	443	50081	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.595720053 CET	50081	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.595894098 CET	50081	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.595901012 CET	443	50077	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.595911980 CET	443	50081	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.596059084 CET	443	50077	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.596122980 CET	50077	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.596158981 CET	50077	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.596158981 CET	50077	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.596175909 CET	443	50077	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.596187115 CET	443	50077	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.598356962 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.598402023 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.598798037 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.598798037 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.598828077 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.602313042 CET	443	50076	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.602380991 CET	443	50076	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.602482080 CET	50076	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.602566004 CET	50076	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.602586031 CET	443	50076	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.602602959 CET	50076	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.602612019 CET	443	50076	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.604691982 CET	50083	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.604706049 CET	443	50083	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:15.604763985 CET	50083	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.604891062 CET	50083	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:15.604904890 CET	443	50083	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.394308090 CET	443	50079	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.394821882 CET	50079	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:16.394840956 CET	443	50079	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.395343065 CET	50079	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:16.395348072 CET	443	50079	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.828680038 CET	443	50079	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.831964970 CET	443	50079	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.832050085 CET	50079	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:16.832096100 CET	50079	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:16.832110882 CET	443	50079	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.832127094 CET	50079	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:16.832133055 CET	443	50079	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.835187912 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:16.835242033 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.835345030 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:16.835529089 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:16.835534096 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.878290892 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.878983974 CET	50080	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:16.879014015 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:16.879709959 CET	50080	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:16.879724979 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.315439939 CET	443	50081	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.315998077 CET	50081	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.316015959 CET	443	50081	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.316457987 CET	50081	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.316463947 CET	443	50081	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.319483042 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.319509029 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.319591045 CET	50080	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.319622040 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.319678068 CET	50080	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.319863081 CET	50080	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.319870949 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.319891930 CET	50080	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.320045948 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.320076942 CET	443	50080	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.320147038 CET	50080	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.321974993 CET	443	50083	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.322562933 CET	50083	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.322576046 CET	443	50083	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.322979927 CET	50083	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.322987080 CET	443	50083	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.323273897 CET	50086	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.323311090 CET	443	50086	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.323323011 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.323416948 CET	50086	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.323621035 CET	50086	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.323632956 CET	443	50086	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.323636055 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.323658943 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.324243069 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.324251890 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.764761925 CET	443	50083	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.764790058 CET	443	50083	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.764849901 CET	50083	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.764862061 CET	443	50083	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.764909983 CET	50083	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.765116930 CET	50083	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.765135050 CET	443	50083	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.765146971 CET	50083	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.765153885 CET	443	50083	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.768201113 CET	50087	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.768239975 CET	443	50087	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.768313885 CET	50087	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.768477917 CET	50087	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.768496990 CET	443	50087	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.769355059 CET	443	50081	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.769387960 CET	443	50081	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.769442081 CET	443	50081	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.769442081 CET	50081	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.769484997 CET	50081	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.769670963 CET	50081	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.769675016 CET	443	50081	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.769681931 CET	50081	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.769685030 CET	443	50081	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.772087097 CET	50088	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.772133112 CET	443	50088	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.772196054 CET	50088	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.772305012 CET	50088	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.772314072 CET	443	50088	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.806405067 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.806433916 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.806448936 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.806495905 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.806524992 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.806567907 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.959907055 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.959995031 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.960001945 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.960050106 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.960071087 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.960094929 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.960134029 CET	50082	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.960139990 CET	443	50082	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.962985992 CET	50089	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.963046074 CET	443	50089	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:17.963171959 CET	50089	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.963362932 CET	50089	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:17.963387012 CET	443	50089	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:18.234014034 CET	49799	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:10:18.353431940 CET	80	49799	142.250.181.69	192.168.2.6
Dec 9, 2024 11:10:18.564240932 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:18.564788103 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:18.564806938 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:18.565366030 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:18.565375090 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.051014900 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.051223993 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.051330090 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.051337957 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.051428080 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.051487923 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.051492929 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.053632021 CET	443	50086	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.054325104 CET	50086	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.054347038 CET	443	50086	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.054778099 CET	50086	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.054785013 CET	443	50086	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.092750072 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.217189074 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.217204094 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.217248917 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.217318058 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.217329979 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.217354059 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.217400074 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.217400074 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.217679977 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.217691898 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.217828989 CET	50085	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.217835903 CET	443	50085	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.220906973 CET	50090	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.220958948 CET	443	50090	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.221060991 CET	50090	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.221268892 CET	50090	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.221285105 CET	443	50090	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.488213062 CET	443	50088	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.488703012 CET	50088	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.488732100 CET	443	50088	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.489195108 CET	50088	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.489200115 CET	443	50088	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.493817091 CET	443	50087	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.494213104 CET	50087	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.494223118 CET	443	50087	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.494709969 CET	50087	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.494715929 CET	443	50087	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.502263069 CET	443	50086	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.502295017 CET	443	50086	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.502357006 CET	443	50086	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.502366066 CET	50086	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.502465963 CET	50086	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.502629995 CET	50086	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.502629995 CET	50086	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.502646923 CET	443	50086	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.502655029 CET	443	50086	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.505527973 CET	50091	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.505564928 CET	443	50091	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.505626917 CET	50091	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.505779982 CET	50091	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.505793095 CET	443	50091	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.678960085 CET	443	50089	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.679546118 CET	50089	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.679589033 CET	443	50089	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.679992914 CET	50089	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.679999113 CET	443	50089	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.921751976 CET	443	50088	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.925426006 CET	443	50088	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.925503969 CET	50088	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.925581932 CET	50088	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.925601959 CET	443	50088	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.925612926 CET	50088	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.925618887 CET	443	50088	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.928632975 CET	50092	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.928680897 CET	443	50092	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.928960085 CET	50092	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.929142952 CET	50092	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.929153919 CET	443	50092	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.932651043 CET	443	50087	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.932672024 CET	443	50087	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.932715893 CET	50087	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.932718992 CET	443	50087	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.932761908 CET	50087	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.932944059 CET	50087	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.932944059 CET	50087	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.932956934 CET	443	50087	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.932969093 CET	443	50087	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.935350895 CET	50093	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.935383081 CET	443	50093	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:19.935445070 CET	50093	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.935576916 CET	50093	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:19.935589075 CET	443	50093	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:20.113341093 CET	443	50089	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:20.113421917 CET	443	50089	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:20.113612890 CET	50089	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:20.113666058 CET	50089	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:20.113666058 CET	50089	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:20.113688946 CET	443	50089	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:20.113699913 CET	443	50089	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:20.116437912 CET	50094	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:20.116486073 CET	443	50094	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:20.116575003 CET	50094	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:20.116741896 CET	50094	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:20.116755962 CET	443	50094	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:20.936724901 CET	443	50090	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:20.937433004 CET	50090	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:20.937454939 CET	443	50090	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:20.937897921 CET	50090	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:20.937902927 CET	443	50090	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.218786955 CET	443	50091	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.219322920 CET	50091	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.219348907 CET	443	50091	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.219774008 CET	50091	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.219779968 CET	443	50091	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.370486975 CET	443	50090	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.374514103 CET	443	50090	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.374582052 CET	50090	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.374636889 CET	50090	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.374658108 CET	443	50090	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.374670982 CET	50090	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.374680996 CET	443	50090	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.377466917 CET	50095	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.377497911 CET	443	50095	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.377579927 CET	50095	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.377729893 CET	50095	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.377743959 CET	443	50095	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.643786907 CET	443	50092	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.644283056 CET	50092	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.644304037 CET	443	50092	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.644727945 CET	50092	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.644733906 CET	443	50092	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.650033951 CET	443	50093	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.650371075 CET	50093	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.650402069 CET	443	50093	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.650752068 CET	50093	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.650758982 CET	443	50093	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.651855946 CET	443	50091	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.651994944 CET	443	50091	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.652045965 CET	50091	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.652091980 CET	50091	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.652110100 CET	443	50091	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.652117014 CET	50091	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.652122974 CET	443	50091	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.654753923 CET	50096	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.654782057 CET	443	50096	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.654920101 CET	50096	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.655055046 CET	50096	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.655070066 CET	443	50096	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.839730978 CET	443	50094	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.840240955 CET	50094	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.840257883 CET	443	50094	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:21.840786934 CET	50094	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:21.840792894 CET	443	50094	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.076956034 CET	443	50092	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.080837965 CET	443	50092	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.080884933 CET	443	50092	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.080904961 CET	50092	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:22.080976963 CET	50092	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:22.081120968 CET	50092	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:22.081137896 CET	443	50092	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.081145048 CET	50092	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:22.081151009 CET	443	50092	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.083826065 CET	443	50093	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.088098049 CET	443	50093	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.088176012 CET	50093	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:22.088200092 CET	50093	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:22.088211060 CET	443	50093	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.088222027 CET	50093	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:22.088227987 CET	443	50093	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.272949934 CET	443	50094	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.273298025 CET	443	50094	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.273467064 CET	50094	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:22.273566008 CET	50094	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:22.273580074 CET	443	50094	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:22.273591995 CET	50094	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:22.273597002 CET	443	50094	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.102304935 CET	443	50095	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.102858067 CET	50095	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:23.102888107 CET	443	50095	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.103454113 CET	50095	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:23.103460073 CET	443	50095	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.414885044 CET	443	50096	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.415395021 CET	50096	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:23.415421963 CET	443	50096	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.415879965 CET	50096	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:23.415888071 CET	443	50096	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.535687923 CET	443	50095	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.538830996 CET	443	50095	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.538889885 CET	50095	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:23.538925886 CET	50095	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:23.538939953 CET	443	50095	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.538950920 CET	50095	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:23.538957119 CET	443	50095	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.852380991 CET	443	50096	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.852458000 CET	443	50096	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.852660894 CET	50096	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:23.852688074 CET	50096	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:23.852699041 CET	443	50096	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:23.852710962 CET	50096	443	192.168.2.6	13.107.246.63
Dec 9, 2024 11:10:23.852716923 CET	443	50096	13.107.246.63	192.168.2.6
Dec 9, 2024 11:10:27.963006020 CET	50097	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:10:27.963061094 CET	443	50097	20.198.118.190	192.168.2.6
Dec 9, 2024 11:10:27.963210106 CET	50097	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:10:27.963922977 CET	50097	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:10:27.963938951 CET	443	50097	20.198.118.190	192.168.2.6
Dec 9, 2024 11:10:30.198666096 CET	443	50097	20.198.118.190	192.168.2.6
Dec 9, 2024 11:10:30.198749065 CET	50097	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:10:30.200809002 CET	50097	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:10:30.200818062 CET	443	50097	20.198.118.190	192.168.2.6
Dec 9, 2024 11:10:30.201071978 CET	443	50097	20.198.118.190	192.168.2.6
Dec 9, 2024 11:10:30.202959061 CET	50097	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:10:30.203059912 CET	50097	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:10:30.203067064 CET	443	50097	20.198.118.190	192.168.2.6
Dec 9, 2024 11:10:30.203200102 CET	50097	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:10:30.243330002 CET	443	50097	20.198.118.190	192.168.2.6
Dec 9, 2024 11:10:30.752126932 CET	443	50097	20.198.118.190	192.168.2.6
Dec 9, 2024 11:10:30.752214909 CET	443	50097	20.198.118.190	192.168.2.6
Dec 9, 2024 11:10:30.752274036 CET	50097	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:10:30.752414942 CET	50097	443	192.168.2.6	20.198.118.190
Dec 9, 2024 11:10:30.752429008 CET	443	50097	20.198.118.190	192.168.2.6
Dec 9, 2024 11:10:50.953481913 CET	50098	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:10:50.953542948 CET	443	50098	142.250.181.68	192.168.2.6
Dec 9, 2024 11:10:50.953612089 CET	50098	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:10:50.953857899 CET	50098	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:10:50.953866959 CET	443	50098	142.250.181.68	192.168.2.6
Dec 9, 2024 11:10:52.644541025 CET	443	50098	142.250.181.68	192.168.2.6
Dec 9, 2024 11:10:52.644937992 CET	50098	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:10:52.644973040 CET	443	50098	142.250.181.68	192.168.2.6
Dec 9, 2024 11:10:52.645334005 CET	443	50098	142.250.181.68	192.168.2.6
Dec 9, 2024 11:10:52.645658016 CET	50098	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:10:52.645773888 CET	443	50098	142.250.181.68	192.168.2.6
Dec 9, 2024 11:10:52.686602116 CET	50098	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:11:02.338305950 CET	443	50098	142.250.181.68	192.168.2.6
Dec 9, 2024 11:11:02.338381052 CET	443	50098	142.250.181.68	192.168.2.6
Dec 9, 2024 11:11:02.338493109 CET	50098	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:11:02.719582081 CET	50098	443	192.168.2.6	142.250.181.68
Dec 9, 2024 11:11:02.719624043 CET	443	50098	142.250.181.68	192.168.2.6
Dec 9, 2024 11:11:03.359149933 CET	49799	80	192.168.2.6	142.250.181.69
Dec 9, 2024 11:11:03.478786945 CET	80	49799	142.250.181.69	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 11:08:31.238750935 CET	56599	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:08:46.255697966 CET	59711	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:08:46.255809069 CET	55767	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:08:46.392157078 CET	53	56755	1.1.1.1	192.168.2.6
Dec 9, 2024 11:08:46.392190933 CET	53	59711	1.1.1.1	192.168.2.6
Dec 9, 2024 11:08:46.392250061 CET	53	55767	1.1.1.1	192.168.2.6
Dec 9, 2024 11:08:46.399893045 CET	53	54188	1.1.1.1	192.168.2.6
Dec 9, 2024 11:08:48.099168062 CET	63427	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:08:48.099462986 CET	54813	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:08:48.236394882 CET	53	63427	1.1.1.1	192.168.2.6
Dec 9, 2024 11:08:48.236417055 CET	53	54813	1.1.1.1	192.168.2.6
Dec 9, 2024 11:08:49.210742950 CET	53	60821	1.1.1.1	192.168.2.6
Dec 9, 2024 11:08:50.828432083 CET	54425	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:08:50.828896999 CET	54805	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:08:50.965297937 CET	53	54425	1.1.1.1	192.168.2.6
Dec 9, 2024 11:08:50.965713024 CET	53	54805	1.1.1.1	192.168.2.6
Dec 9, 2024 11:08:52.674518108 CET	53	61281	1.1.1.1	192.168.2.6
Dec 9, 2024 11:08:57.303567886 CET	53	52304	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:01.579762936 CET	53	65157	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:01.644675970 CET	53	57227	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:06.207547903 CET	53	61743	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:08.574851036 CET	60216	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:09:08.574999094 CET	65347	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:09:08.711899042 CET	53	65347	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:08.711991072 CET	53	60216	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:11.089392900 CET	60724	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:09:11.089392900 CET	52397	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:09:11.231348038 CET	53	60724	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:11.231594086 CET	53	52397	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:11.529418945 CET	53	54898	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:16.379111052 CET	63414	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:09:16.379467964 CET	56370	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:09:16.515764952 CET	53	63414	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:16.517132044 CET	53	56370	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:18.417418957 CET	59317	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:09:18.417557955 CET	57647	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:09:18.554049969 CET	53	59317	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:18.554456949 CET	53	57647	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:25.170244932 CET	53	64329	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:46.281028986 CET	53	53736	1.1.1.1	192.168.2.6
Dec 9, 2024 11:09:48.247473955 CET	53	49500	1.1.1.1	192.168.2.6
Dec 9, 2024 11:10:08.953855991 CET	53	59891	1.1.1.1	192.168.2.6
Dec 9, 2024 11:10:18.759706020 CET	53	57534	1.1.1.1	192.168.2.6
Dec 9, 2024 11:11:02.951929092 CET	53	58743	1.1.1.1	192.168.2.6
Dec 9, 2024 11:11:07.398017883 CET	49698	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:11:07.398225069 CET	64219	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:11:07.534782887 CET	53	49698	1.1.1.1	192.168.2.6
Dec 9, 2024 11:11:07.535156965 CET	53	64219	1.1.1.1	192.168.2.6
Dec 9, 2024 11:11:09.605074883 CET	53	60306	1.1.1.1	192.168.2.6
Dec 9, 2024 11:11:09.971951962 CET	63223	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:11:09.972146988 CET	56887	53	192.168.2.6	1.1.1.1
Dec 9, 2024 11:11:10.108706951 CET	53	56887	1.1.1.1	192.168.2.6
Dec 9, 2024 11:11:10.108764887 CET	53	63223	1.1.1.1	192.168.2.6
Dec 9, 2024 11:11:26.342847109 CET	53	57731	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 9, 2024 11:08:31.238750935 CET	192.168.2.6	1.1.1.1	0x6c07	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:08:46.255697966 CET	192.168.2.6	1.1.1.1	0xbf93	Standard query (0)	gmail.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:08:46.255809069 CET	192.168.2.6	1.1.1.1	0xb415	Standard query (0)	gmail.com	65	IN (0x0001)	false
Dec 9, 2024 11:08:48.099168062 CET	192.168.2.6	1.1.1.1	0x8430	Standard query (0)	mail.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:08:48.099462986 CET	192.168.2.6	1.1.1.1	0x2b2e	Standard query (0)	mail.google.com	65	IN (0x0001)	false
Dec 9, 2024 11:08:50.828432083 CET	192.168.2.6	1.1.1.1	0xd06b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:08:50.828896999 CET	192.168.2.6	1.1.1.1	0x167a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 9, 2024 11:09:08.574851036 CET	192.168.2.6	1.1.1.1	0xe761	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:09:08.574999094 CET	192.168.2.6	1.1.1.1	0x1528	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Dec 9, 2024 11:09:11.089392900 CET	192.168.2.6	1.1.1.1	0x752c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:09:11.089392900 CET	192.168.2.6	1.1.1.1	0x2208	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 9, 2024 11:09:16.379111052 CET	192.168.2.6	1.1.1.1	0xfdf7	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:09:16.379467964 CET	192.168.2.6	1.1.1.1	0x1eca	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 9, 2024 11:09:18.417418957 CET	192.168.2.6	1.1.1.1	0xbe2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:09:18.417557955 CET	192.168.2.6	1.1.1.1	0x40f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 9, 2024 11:11:07.398017883 CET	192.168.2.6	1.1.1.1	0x39a4	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:11:07.398225069 CET	192.168.2.6	1.1.1.1	0x1126	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 9, 2024 11:11:09.971951962 CET	192.168.2.6	1.1.1.1	0x58de	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:11:09.972146988 CET	192.168.2.6	1.1.1.1	0x15a5	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 9, 2024 11:08:31.473026037 CET	1.1.1.1	192.168.2.6	0x6c07	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 11:08:46.392190933 CET	1.1.1.1	192.168.2.6	0xbf93	No error (0)	gmail.com		142.250.181.69	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:08:48.236394882 CET	1.1.1.1	192.168.2.6	0x8430	No error (0)	mail.google.com		172.217.21.37	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:08:50.965297937 CET	1.1.1.1	192.168.2.6	0xd06b	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:08:50.965713024 CET	1.1.1.1	192.168.2.6	0x167a	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 9, 2024 11:09:08.711899042 CET	1.1.1.1	192.168.2.6	0x1528	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 11:09:08.711991072 CET	1.1.1.1	192.168.2.6	0xe761	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 11:09:08.711991072 CET	1.1.1.1	192.168.2.6	0xe761	No error (0)	www3.l.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:09:11.231348038 CET	1.1.1.1	192.168.2.6	0x752c	No error (0)	play.google.com		172.217.19.206	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:09:16.515764952 CET	1.1.1.1	192.168.2.6	0xfdf7	No error (0)	play.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:09:18.554049969 CET	1.1.1.1	192.168.2.6	0xbe2	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:09:18.554456949 CET	1.1.1.1	192.168.2.6	0x40f	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 9, 2024 11:11:07.534782887 CET	1.1.1.1	192.168.2.6	0x39a4	No error (0)	play.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Dec 9, 2024 11:11:10.108764887 CET	1.1.1.1	192.168.2.6	0x58de	No error (0)	play.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

arc.msn.com

otelrules.azureedge.net

tse1.mm.bing.net

www.bing.com

fs.microsoft.com

https:

p13n.adobe.io

www.google.com

armmf.adobe.com

slscr.update.microsoft.com

mail.google.com

g.bing.com

gmail.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49799	142.250.181.69	80	7520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 9, 2024 11:08:46.961164951 CET	424	OUT	GET / HTTP/1.1 Host: gmail.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 9, 2024 11:08:48.096668959 CET	606	IN	HTTP/1.1 301 Moved Permanently Location: https://mail.google.com/mail/u/0/ Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: sffe Content-Length: 230 X-XSS-Protection: 0 Date: Mon, 09 Dec 2024 10:01:16 GMT Expires: Mon, 09 Dec 2024 10:31:16 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 451 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 6d 61 69 6c 2f 75 2f 30 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://mail.google.com/mail/u/0/">here</A>.</BODY></HTML>
Dec 9, 2024 11:09:33.107825041 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 9, 2024 11:10:18.234014034 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 9, 2024 11:11:03.359149933 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49798	142.250.181.69	80	7520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 9, 2024 11:09:31.655000925 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49802	142.250.181.69	80	7520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 9, 2024 11:09:32.075922966 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49715	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:16 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 55 5a 75 64 55 58 68 48 30 61 61 77 43 42 57 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 64 63 61 35 34 36 31 62 30 33 38 35 33 36 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: tUZudUXhH0aawCBW.1Context: 4dca5461b0385369
2024-12-09 10:08:16 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-09 10:08:16 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 74 55 5a 75 64 55 58 68 48 30 61 61 77 43 42 57 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 64 63 61 35 34 36 31 62 30 33 38 35 33 36 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 7a 55 45 6b 33 4e 66 59 68 39 44 37 4a 45 5a 56 62 6c 51 70 7a 62 55 68 49 35 31 6e 4c 71 31 6c 79 78 73 49 65 70 6c 50 58 6f 72 4f 79 52 49 56 48 6e 75 53 2b 51 69 6e 32 63 6a 51 38 47 78 6c 52 66 65 2f 66 72 53 38 6e 4e 35 33 45 6b 50 56 49 67 5a 54 76 4c 63 7a 43 74 4b 2f 74 4b 78 6b 4e 6c 45 66 39 33 48 61 4b 43 39 4b Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: tUZudUXhH0aawCBW.2Context: 4dca5461b0385369<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXzUEk3NfYh9D7JEZVblQpzbUhI51nLq1lyxsIeplPXorOyRIVHnuS+Qin2cjQ8GxlRfe/frS8nN53EkPVIgZTvLczCtK/tKxkNlEf93HaKC9K
2024-12-09 10:08:16 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 74 55 5a 75 64 55 58 68 48 30 61 61 77 43 42 57 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 64 63 61 35 34 36 31 62 30 33 38 35 33 36 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: tUZudUXhH0aawCBW.3Context: 4dca5461b0385369<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-09 10:08:17 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-09 10:08:17 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 52 62 47 64 30 32 4b 32 2b 55 61 51 49 63 74 4c 52 49 59 59 54 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: RbGd02K2+UaQIctLRIYYTw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49716	20.190.147.8	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:16 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4831 Host: login.live.com
2024-12-09 10:08:16 UTC	4831	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-12-09 10:08:17 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 09 Dec 2024 10:07:16 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_BAY x-ms-request-id: 99ecc9a6-c516-4c34-84d0-c4ad51e201c5 PPServer: PPV: 30 H: PH1PEPF0001200D V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 09 Dec 2024 10:08:16 GMT Connection: close Content-Length: 11197
2024-12-09 10:08:17 UTC	11197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49717	20.190.147.8	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:16 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4831 Host: login.live.com
2024-12-09 10:08:16 UTC	4831	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-12-09 10:08:17 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 09 Dec 2024 10:07:16 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_SN1 x-ms-request-id: 7548955d-1ffb-42ee-9bf5-a998ba05652e PPServer: PPV: 30 H: SN1PEPF0002FA74 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 09 Dec 2024 10:08:16 GMT Connection: close Content-Length: 11197
2024-12-09 10:08:17 UTC	11197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49718	20.223.36.55	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:18 UTC	2587	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241209T100813Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=0e44774ec2f243658ad9797c19bfcf20&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=620870&metered=false&nettype=ethernet&npid=sc-280815&oemName=VMware%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=VMware20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=620870&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waas [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: HGuePnZUAkyUg3ov.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-12-09 10:08:19 UTC	955	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2937 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116123-T1-C128000000001627409+B+P20+S1"},{"OPTOUTSTATE":"65792"},{"REGIONALPOLICY":"1"}] X-ARC-SIG: S9zwT0W0PtvzfwVONr9QgtK5fohHiuiF1VIqVizJClN/M23XkWZH9lS3+yZBxxwHjILHh593wdy2MWblpO3O1+ksUh+UZbBrfxM5lJ5X4LxLLkq69KJT4nHK7UHPjRZh5GAZrAQdJykD/xvuPY4VXRL1tevyJ9dFzz8t3lVmLoW0RnAHK7x2tOETugIOoQyQ1KuDp+3whA1XuZCmbWZ8MaPVR4flhApJju4y0Lba4SkhU5k/AUh6IVfFe65T9onx+BDu+jxH6S3grD2U+mARqY/SmtyOAFqPy6klgIpklQOHRq3HQWLsN1GjiPofR2apqrVw+Gt3rBvHmHDxN9zTDw== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 09 Dec 2024 10:08:18 GMT Connection: close
2024-12-09 10:08:19 UTC	2937	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49719	20.223.36.55	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:18 UTC	2604	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241209T100813Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=97ab0944e20e4d65a9891b3004c57f42&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=620870&metered=false&nettype=ethernet&npid=sc-338387&oemName=VMware%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&sc-mode=0&scmid=Public&smBiosDm=VMware20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=620870&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1& [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: HGuePnZUAkyUg3ov.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-12-09 10:08:19 UTC	815	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 25264 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-ARC-SIG: gg7v3Jlx/V3RF4BZilSDzAaKqkm7VmQPU1ItZUMUXaHn0VOhNkSNydO7nhpnkytui5QTw19zs1QjE/0G40ndh87QjjS1o2PGoa6weN4sPVLb4NA+u8yHSa0O72J4Jux39Y+9ov+00kkRpCQVf5FErvJ/TtXmSvOs0f6NiWBNvKyxGHyB0wdvXDARNjMQSubNGnAGDSYXX3/Rwp4DHTpeOIRO42rho7xoTZP0JT012ZCBGhOP65d1OoXnT1oKaZnpNraMGG/25IQNwr6ZPJFIIFHb57PrYLnUEmNDK4DZGnJ22+24kRc7i25AG3u5ik+LAY93Xzup4KJCvXE8cS0KJQ== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 09 Dec 2024 10:08:18 GMT Connection: close
2024-12-09 10:08:19 UTC	15569	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 4c 6f 63 6b 53 63 72 65 65 6e 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6c 61 6e 64 73 63 61 70 65 49 6d 61 67 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 69 6d 61 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"LockScreen\",\"propertyManifest\":{\"landscapeImage\":{\"type\":\"ima
2024-12-09 10:08:19 UTC	9695	IN	Data Raw: 33 52 70 62 6d 46 30 61 57 39 75 59 32 46 74 63 47 46 70 5a 32 34 6c 4d 32 45 6c 4d 6a 55 79 4d 6e 52 79 64 57 55 6c 4d 6a 55 79 4d 69 55 79 4e 6d 4e 6a 4a 54 4e 6b 56 56 4d 6c 4d 6a 5a 7a 5a 58 52 73 59 57 35 6e 4a 54 4e 6b 52 55 34 74 56 56 4d 6c 4d 6a 5a 6d 62 33 4a 74 4a 54 4e 6b 54 54 51 77 4d 30 6f 34 4a 54 49 32 62 32 4e 70 5a 43 55 7a 5a 45 30 30 4d 44 4e 4b 4f 41 25 32 36 72 6c 69 64 25 33 44 32 30 39 34 37 38 37 66 36 33 38 33 31 31 66 31 61 35 35 34 31 66 32 39 61 32 31 30 39 36 38 31 5c 5c 75 30 30 32 36 54 49 4d 45 3d 7b 44 41 54 45 54 49 4d 45 7d 5c 5c 75 30 30 32 36 43 49 44 3d 35 33 31 33 34 34 37 30 38 5c 5c 75 30 30 32 36 45 49 44 3d 7b 45 49 44 7d 5c 5c 75 30 30 32 36 74 69 64 73 3d 31 35 30 30 31 5c 5c 75 30 30 32 36 61 64 55 6e 69 74 Data Ascii: 3RpbmF0aW9uY2FtcGFpZ24lM2ElMjUyMnRydWUlMjUyMiUyNmNjJTNkVVMlMjZzZXRsYW5nJTNkRU4tVVMlMjZmb3JtJTNkTTQwM0o4JTI2b2NpZCUzZE00MDNKOA%26rlid%3D2094787f638311f1a5541f29a2109681\\u0026TIME={DATETIME}\\u0026CID=531344708\\u0026EID={EID}\\u0026tids=15001\\u0026adUnit

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49720	20.223.36.55	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:18 UTC	2594	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241209T100813Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=6aa682a446e34455b4996f8077afce7f&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=620870&metered=false&nettype=ethernet&npid=sc-338388&oemName=VMware%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&scmid=Public&smBiosDm=VMware20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=620870&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=EwDoAppeBAAUGoFunEzxzyai/T0i5tnZAAR1eX0AAWUBWvth1LjDE7i4HZ/o4ULchb6dIOuqNbsqDzxuJT2vFMMtLmv4e61oV0p2hJgY0tuIptnAO1pUxUQp3vKsy36yxodFmNHNsNtdXGsUHJJwaTr3D+m6/w8PhGG+w6kUfg6UvauwyslspNCy7EdlG+fgyLVq8bgHqF5ANmOnx/rwYZatxmKYlv89T9NMU6kTIJbN8w/Dx1pl6Rf8qfjQWy6Jod5ZDhtzDBd8IlDojAmQQIsPzEdbhRd5rGXM3yH4fOaOLQ9BSRlvdQBPTx7aqR14onL1YR1Xw9et4/N58UYURtxIm9zKALMHSQNPlIzwyN76cUZshGofloFTaK4OTMkQZgAAEJDhZh34t/0Jvu/vP2ee7NGwAXSngzk1HNbbNAWp+YPG9aZ/1YPMPADi1tExJKMoyJMJYN94VNFEoalHOrHp8gDfyp8kOV+YzBugGp69Gh4JolL2ztCWVy/cPA0FP+Db0Cwwz+oWYXvtY1dE7vrgmjD0eZ1kdTc0gis6PXaAntASbnxCysqfMpO6XWQs7e2q6od8vfEVUSVnNw+VZLbFVWWp9T2a7sFisPe/S13WW0PqU9PiOakT1DDZRFQYOqqaE7V90rLLwOoy3adxH1OlW+kmC9uTUkaT8V97vx7XnfqbQFuw3vkrvdK4RUveJcr0r6WaAVAoKSdlHIziDBt+Ghgs5WDshjNAkloQrbGxjU9KF1KgSGYAbPKfohJf0rsTt1O2KB72EXpR7E9dnuIOa2YMX30Rw23wSFysZnMfI++5df9+cCDsR745sHSbH5sJA5hqOdqE/A+vDzbzU+vKH0JYzkmHzKPZ0Ez2c787UOSnB42RvVgmz28vXaRhkJKNGbVrE0xwR4otETqLTRoSmkmybBWCKj1a0C+l8/xv9OWzjIm/vb3y/yvoRT6wMKBrLaGTFYtfmPY7fLS03HSBDCCyDtgB&p= Cache-Control: no-cache MS-CV: HGuePnZUAkyUg3ov.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-12-09 10:08:19 UTC	814	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 3892 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-ARC-SIG: rLtlnx2uN4wLoYreITQwH7MtAwSlFlFCkENFQD1gMzVzPx2u3gVkahV32AIBS6FGzMdbvwSyjo1YqrUXTs9ULXdyz7zwAf868uWoBGNEd1KctNsZuEfw0HI3iGI35b5kCMBONNGpeR+OQqIQsmZAmu1rQi0uWDDnfOoUD34hpP96aWiukZdkSV9ajsCMrEE/3VVMC3G+yHYtQZjEEyztQPzV8ZgE4S+zM+mJkZyST/+BObNtQokkbnDPlWBrjAu6nikrYa95Bm3e+wsSOcAB2sVsvgz8Yshaj0+dh2oWKBw8kDX7TdvCkDltvk68QM8k787OylwAZNDNfuSxd74q0w== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 09 Dec 2024 10:08:19 GMT Connection: close
2024-12-09 10:08:19 UTC	3892	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 75 67 67 65 73 74 69 6f 6e 73 4f 6e 53 74 61 72 74 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 7d 2c 5c 22 70 72 6f 70 65 72 74 69 65 73 5c 22 3a 7b 7d 2c 5c 22 74 72 61 63 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"SuggestionsOnStart\",\"propertyManifest\":{},\"properties\":{},\"trac

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49721	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:21 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 2f 39 78 39 43 39 45 73 66 55 75 44 52 6a 38 63 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 66 63 66 33 38 30 37 38 36 38 61 63 32 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: /9x9C9EsfUuDRj8c.1Context: c3fcf3807868ac2e
2024-12-09 10:08:21 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-09 10:08:21 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 2f 39 78 39 43 39 45 73 66 55 75 44 52 6a 38 63 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 66 63 66 33 38 30 37 38 36 38 61 63 32 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 62 70 36 30 4b 78 64 36 33 79 54 50 32 59 4d 31 72 6a 38 6e 75 5a 4d 42 4e 77 45 7a 6e 34 4a 74 41 75 79 46 35 4e 70 46 63 50 79 61 34 34 6d 4b 50 47 62 37 56 6f 37 2b 30 58 5a 6b 37 33 47 6f 69 70 77 74 4c 78 59 49 61 5a 45 46 42 69 2f 55 67 6e 4f 4e 61 4e 30 6f 4f 56 67 4b 66 54 77 63 4a 66 4f 78 6b 48 42 67 7a 63 46 6e Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: /9x9C9EsfUuDRj8c.2Context: c3fcf3807868ac2e<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdbp60Kxd63yTP2YM1rj8nuZMBNwEzn4JtAuyF5NpFcPya44mKPGb7Vo7+0XZk73GoipwtLxYIaZEFBi/UgnONaN0oOVgKfTwcJfOxkHBgzcFn
2024-12-09 10:08:21 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 2f 39 78 39 43 39 45 73 66 55 75 44 52 6a 38 63 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 66 63 66 33 38 30 37 38 36 38 61 63 32 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: /9x9C9EsfUuDRj8c.3Context: c3fcf3807868ac2e<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-09 10:08:22 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-09 10:08:22 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 58 75 51 37 30 6c 6e 2b 45 32 43 6b 31 39 50 74 71 37 53 34 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: AXuQ70ln+E2Ck19Ptq7S4w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:24 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:25 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:25 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 08 Dec 2024 17:57:40 GMT ETag: "0x8DD17B1CF2A0A7C" x-ms-request-id: df7ee72c-101e-0034-6bad-4996ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100825Z-r1cf579d7788c742hC1EWRr97n0000000290000000002mdp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:25 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-09 10:08:25 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-09 10:08:25 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-09 10:08:25 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-09 10:08:25 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-09 10:08:25 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-09 10:08:25 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-09 10:08:25 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-09 10:08:25 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-09 10:08:25 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49725	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:26 UTC	375	OUT	GET /th?id=OADD2.10239398630131_1CB6KQXGNLM1EBCZG&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-09 10:08:27 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 795949 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 7031B05A3EE94634943E6903059A4159 Ref B: EWR30EDGE0410 Ref C: 2024-12-09T10:08:26Z Date: Mon, 09 Dec 2024 10:08:26 GMT Connection: close
2024-12-09 10:08:27 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1b fc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 39 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 38 3a 30 36 20 30 39 3a 35 32 3a 31 36 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 25.9 (Windows)2024:08:06 09:52:168
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: fd 6b aa 54 e9 2a 4e d1 df 6d 0e 1a 38 8a f2 ad 69 cf 45 77 e5 dd fe 5b 79 9f 6f 48 62 49 12 16 92 35 91 be e2 6f f9 9f e9 43 25 78 27 c4 0b bb cd 37 4d b1 f1 e7 87 f4 d9 3c 9b fb 78 e7 7d 45 27 fb 64 bf 3f cd bd 83 e3 a7 4e 3a 56 2f 8a bf 68 1d 7a 7d 56 1d 2f 43 9e 38 95 a6 b7 83 ce fb 2e e6 76 3f 2c 87 e6 03 6f cc 57 e5 3f 9d 79 9f 56 94 95 d1 ef 4b 17 08 5d 49 7d de 67 d2 78 a4 db ed 50 f8 7d a7 6f 0f da 49 79 e7 ac db 36 cc f7 09 b5 b7 0f 94 ee 1f de ab 8c 2b 95 e8 d9 da bd e4 99 0e df 6a 36 7e f2 a6 51 ba b9 2d 53 c6 f6 76 be 38 ff 00 84 75 60 f3 7e ce 8b 2d dc db d7 6a 2b e1 53 6f 3d 77 1e 6a a1 19 49 e8 88 a9 28 53 57 6e c7 4e c2 86 1b ab 9e f8 c5 e2 4b 9f 0b f8 06 ef 54 d2 e0 92 7d 42 5f f4 6d 3b f7 7b a2 49 9f 85 69 3f ba 83 b9 35 e1 de 0b f8 f3 Data Ascii: kT*Nm8iEw[yoHbI5oC%x'7M<x}E'd?N:V/hz}V/C8.v?,oW?yVK]I}gxP}oIy6+j6~Q-Sv8u`~-j+So=wjI(SWnNKT}B_m;{Ii?5
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: dd ee 67 3a f2 8e 96 db e6 6d 59 cb 05 d4 6c d6 fe 5b 2a bf cf fb bd ac ed db f2 a4 d4 96 34 ba 58 db e5 8d 2b 1b 62 46 8d 1c 72 7c ad ff 00 01 df 53 4d e6 b2 ee 93 ef 6c fe ff 00 f0 f3 55 1c 3d a4 4c f1 bc d4 9c 52 d6 e6 86 fd f1 ed f2 d2 56 7d cd fe af e6 a9 ed ec 34 fb 7b 79 a4 69 23 89 9b e5 4f bd fc ab 32 ce 56 8b e6 85 e4 f9 5f fb 9f 2f d2 95 a2 9e e2 46 65 ff 00 5d fe ff 00 f1 52 a9 42 eb 47 64 14 f1 77 7c d3 57 96 c8 9b 49 2d 6b 3f 98 d1 da b7 94 ff 00 26 f4 56 5e 7f d9 e8 5b eb 52 ea 57 c6 49 9e e3 cb 82 df 77 df f2 63 55 5f 4f e1 fb b5 95 31 6f 21 61 6f 97 6f cd f7 db e7 6f 5a 63 16 69 be 5f bc bf 7a af d8 a7 ac ba 19 c7 13 28 7c 1b 75 2f de 5c bb 7c cf 77 bf 6a 2a ff 00 b3 c7 a7 a5 52 bb 7f 39 51 64 44 66 f9 bf 83 e6 ab 30 88 42 6e 91 fe ee ef Data Ascii: g:mYl[4X+bFr\|SMlU=LRV}4{yi#O2V_/Fe]RBGdw\|WI-k?&V^[RWIwcU_O1o!aoooZci_z(\|u/\\|wjR9QdDf0Bn
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 00 33 ed db 1b 9b 3d 46 c6 2b ed 3e 78 ee ad 6e 13 74 33 27 cc ae a6 9c c3 f7 7f 2f dd af 19 fd 95 fc 67 be c5 fc 33 34 71 c5 6f 6f f2 db a2 22 af f1 1d c5 ab da 66 0b e5 ff 00 79 6b ee f0 b8 a8 d7 a4 a7 13 e5 b1 14 1d 1a 8e 2c 8a 93 14 fc 6e a6 b7 cd 5d 37 30 e5 b0 98 db 4e 54 db 1d 27 fc b4 db 4e f9 bc cf 96 90 5b 4b 09 fe cd 2b 0f dd d1 f7 63 f9 ab 8f f8 a9 f1 0f 45 f0 56 8f 71 75 79 e7 b5 d2 ee 5b 78 62 b5 66 59 a4 db b9 53 77 4e 9e f4 e3 b9 32 ee f6 3a d5 5d b4 b8 56 f9 ab e7 1d 57 f6 a6 ff 00 89 72 b6 9b e1 68 16 eb ca 8f e4 bb ba 6e eb b9 8a ec 18 db e9 f3 66 bd 23 e0 af c6 4d 23 c7 d6 b6 eb 25 8b e9 b7 92 cb e5 79 3e 7a ca bc 2f de f5 da 4f 03 bd 68 e3 2b 18 47 13 49 b4 ae 7a 33 15 59 3e 6f bb 4e 51 fc 2d 52 49 03 79 9b 5a 3a cd f1 66 a7 16 87 e1 Data Ascii: 3=F+>xnt3'/g34qoo"fyk,n]70NT'N[K+cEVquy[xbfYSwN2:]VWrhnf#M#%y>z/Oh+GIz3Y>oNQ-RIyZ:f
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 53 4f 82 fa 5b 5b 88 27 95 77 ae f7 74 6d a8 c7 fb bf e7 15 c4 5b cd 2f 99 14 cb bd 7c a7 5d 95 d4 69 f7 32 ea 1f 64 fb 54 6f 2f d9 e2 55 77 7d cd f2 ee 3b 79 1f 95 63 3c 1b a7 7a 8e 57 5a 1d 74 f1 ea 7c b4 ed 66 5e bc d3 ae 7c b8 af ad 7e 6b 79 53 f7 30 cd fc 7f f0 25 fb ab 50 c3 e7 b5 d2 35 bd a4 9f f4 c6 1d 9e 6f 9d 95 fb a7 f0 fd 6a 3f b4 ea f7 b6 b0 c7 1f ca b1 3b 36 cd fb 5b 71 fb bd 4d 58 d0 6e 9a e2 d6 e3 c9 8e 48 af 17 e6 7d ff 00 c7 ed fe cb 37 d2 ba 28 4e 5c 96 92 57 39 e5 38 3a cd c6 4e cf ef f4 45 9d 73 4f b9 8b 66 df 23 6c bb 97 7a 22 ae cc fd c0 5b e9 59 16 a8 d6 17 cf 63 24 7e 6c 2c 8b fb d4 76 fc 5b 8f ca ba 29 a2 8b fb 2b 6c d7 7e 52 cb ba 78 5d e7 56 f5 5e 3e ad b8 66 b0 9a e5 6d 6f a6 b7 92 de 49 63 97 e5 49 9f e5 6d bf 4a eb 8b bc 5c Data Ascii: SO[['wtm[/\|]i2dTo/Uw};yc<zWZt\|f^\|~kyS0%P5oj?;6[qMXnH}7(N\W98:NEsOf#lz"[Yc$~l,v[)+l~Rx]V^>fmoIcImJ\
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: ef f9 76 2f f7 be 5f e9 5a 1e 1d d5 2d b4 b8 6f 9a 1f 32 29 3e 65 b6 fb 42 79 aa f9 fe f6 6a 1d b0 79 0e be 5f d9 f7 3a fc ef fd d2 dd b1 50 ea 89 1b 7f a0 db d8 49 e5 ae d9 26 bb b8 dd bb 69 c7 5f c7 a0 a2 75 e9 ca 3c 96 14 29 d6 a5 5a 33 6e df d3 44 b0 ea 77 77 5a 94 d3 5d dc 79 ac bf 37 df dd b3 fb df 37 f7 6a 85 ad c7 db 75 5d ad f2 43 f3 6f 78 bd ff 00 fa f5 3b 4f 04 5b 76 f9 6a cd b9 bf 7d bb 74 d8 f4 ff 00 64 d5 78 e5 55 93 ed 0d 06 ed bf ec 2a ec f4 db dc fb 54 b4 ea 42 69 75 36 e7 f6 53 85 dd ed f3 d5 77 3a 28 64 81 60 dc be 62 c2 db 7e fa 2a af 97 51 5d 46 c9 3a 34 72 6d b7 ff 00 be 99 db 6f 6a c0 bd b9 65 3f b8 f3 e2 56 fb bf c2 af f2 8e b4 eb 26 bb f2 61 ba 31 fd a2 d7 cd f2 9f 7e d6 5f a7 4f 96 b0 8e 0d c5 27 29 23 b1 e6 bc f7 84 61 77 e4 6b Data Ascii: v/_Z-o2)>eByjy_:PI&i_u<)Z3nDwwZ]y77ju]Cox;O[vj}tdxUTBiu6Sw:(d`b~Q]F:4rmoje?V&a1~_O')#awk
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: d9 1e cf c5 5a 0d ad c5 ac 5f 2d c5 ba 27 ef 53 b4 92 43 dd 3f dd e9 bb 9a f3 28 d3 84 f9 a5 2f 79 27 6b f6 3d 2e 79 c2 29 47 4b ed 75 74 d1 6f 4f f1 f7 c3 3d 1d ed f5 2f 0e d8 5f 69 b7 92 cb 1b 5f 5b dc de b4 f6 b6 d8 93 6a ed 4e 0b 6d f9 5b 93 f7 6b a7 f8 91 e3 95 83 c3 f6 37 5a e5 a4 1a ce 8b ab 24 92 43 76 93 ab 79 37 b0 af 96 36 63 00 c6 ca dc 27 6f 7a e0 db 4f f0 55 e4 7a 87 84 e4 b1 82 d6 f2 58 97 ec e9 7c 8a d3 fd dd d0 b6 f4 fe 20 8d b5 aa ef 83 7e 1f e8 1f f0 83 d8 b5 c7 8b 23 d6 d9 6e e4 d9 a1 db c9 b7 ec db f0 b1 3e e6 fb bf bc e0 f1 5d 34 fd 9d 36 ea 26 f4 d5 df aa e9 63 38 d4 9d 48 25 65 6d bd 3e 46 75 be 9d 3b f8 7f ed 9a 7c 91 b5 f5 c2 47 17 d9 12 d7 73 4d 8d e7 6b 2b 0e bc a2 ee 14 ef 0a e8 7a ae af a3 a7 88 24 b0 fb 55 ac a9 24 af 6f fb Data Ascii: Z_-'SC?(/y'k=.y)GKutoO=/_i_[jNm[k7Z$Cvy76c'ozOUzX\| ~#n>]46&c8H%em>Fu;\|GsMk+z$U$o
2024-12-09 10:08:27 UTC	16067	IN	Data Raw: e9 1e 9f 3c 91 7d 97 6c b3 24 d0 7c a8 c7 fe 7a 67 d1 5b e5 db fc eb 9e d2 66 f0 d5 fc 12 d9 dc 48 eb 6f 3a 47 e6 be c9 25 54 93 70 44 78 bf b9 b5 7a a9 1b 5b f9 75 be 13 91 74 bd 62 6d 16 69 2d 6e ad 62 9a 49 6e ee 6d fc b9 67 48 e1 6f 2c 49 c3 73 e8 54 16 18 af 3e bc 60 da 9c 63 67 bf 91 d5 4a 4f 58 b7 75 a2 38 3d 5a df 53 b2 f1 55 c5 9a d8 49 75 23 ee 6f 25 36 b7 cd d1 8e 0f 45 fc 7f 5a 65 d6 9d af 5b df 24 9a 94 70 69 ab 6f e5 b3 ff 00 17 f0 be 37 6e ec db 79 ed 5b 3e 36 f0 b5 b7 f6 ac de 20 d0 7c 51 1d fc 2c fe 6c db f7 2b 43 23 b7 dd f3 3a 7d ef 6f ce b9 f9 ad a0 5d 1d ed 6e 2f fe cf b7 73 4d 73 33 f9 ad b9 5b 8d a9 d3 ee ed e7 ea 38 af 63 0f 5b da 52 4d b5 e7 dd 1c 55 a9 be 66 bb fd de 47 21 a8 6b b2 d9 dd 4d 63 ac 58 79 51 cb b7 fd 21 13 e5 f5 f9 Data Ascii: <}l$\|zg[fHo:G%TpDxz[utbmi-nbInmgHo,IsT>`cgJOXu8=ZSUIu#o%6EZe[$pio7ny[>6 \|Q,l+C#:}o]n/sMs3[8c[RMUfG!kMcXyQ!
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 61 78 1b fb be 6c 6e ed bb 3c 7c 8b f9 67 d2 a1 f1 05 ce 9d ad f8 73 4f bc 6b bd b2 5a d8 c8 d3 3c d3 ac 12 dc ac 7f 2b 33 be 1b 72 36 70 37 74 ae 2b c3 b1 79 57 17 da b5 8f da a5 be b7 85 60 d4 74 e8 a0 dd 2a 2b e5 43 79 83 04 30 f9 5b 77 63 f4 ad 1d 17 41 6f ed 2d 41 61 d5 bc d9 af 2d 1a 24 f3 63 dc d3 37 99 99 63 9a 24 3b 64 f9 1b b9 1f 37 35 e1 d5 a7 4a 15 7d e9 bb a4 95 ff 00 3d bc 99 b4 2b f3 fb d2 86 ba fc b5 f5 ee 5d d7 35 1f f8 4d 3c 33 36 9a b3 c0 da 7e a5 6e cd be 14 56 8a d6 61 b1 d4 6f 53 95 61 bb 1b 7d 1e bc 4a 4d 51 b4 dd 1e 6d 26 1f 3d 6f 22 be 56 74 74 56 5e 17 cb 18 6f bc ac bf f7 c9 fa d7 ac 78 2f e1 92 fd 95 e3 5f 12 c7 f6 15 4f f9 74 9e 3f dc b6 ef ba ea f9 29 f5 2d f2 f4 af 3f f8 d9 e1 2b 9f 04 df 5b db e9 fa 97 db ec 75 67 69 e1 b8 Data Ascii: axln<\|gsOkZ<+3r6p7t+yW`t*+Cy0[wcAo-Aa-$c7c$;d75J}=+]5M<36~nVaoSa}JMQm&=o"VttV^ox/_Ot?)-?+[ugi
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 6d cf e7 41 fb a8 63 8f 7f 2c bd 7e ef b7 4a e6 f5 ed 57 4a ff 00 84 47 ec ff 00 6f fb 1c 6c ec c9 fd ef 30 7c c9 27 ca 31 bb 19 c1 26 ba 0d 17 c6 ba 2b e9 56 f6 bf e9 5f 6a b3 45 64 b8 7d db ae 7f e0 4a 47 f1 57 9f 1a 75 5f bf 18 e8 b4 b5 8e ce 6a 52 93 87 35 ae b7 f3 f4 3c 73 c4 1a ac 11 79 da 4e 9b 71 75 2c 8f f7 df 4b 93 74 08 a7 f8 73 8e 72 bd 7b fa d5 df 86 7a cd 8b f9 d6 b3 47 1d bc d7 1b be d1 b3 f7 ac f1 f3 bf 8c 7c df 9d 74 12 7f c2 31 f6 1d 4f ec f1 d8 aa ac d3 6c 9b c8 65 fb 6c 92 67 6a 63 03 67 1f f0 1a e5 ec f4 8f 0f 69 71 ff 00 a6 41 24 57 4a 8a c8 96 f7 5b 7e 52 df 30 e3 23 76 de de 9d ab db a7 6a f0 6b 95 df f1 3c 19 c2 54 2a 73 4a 6a cf cf d4 3c 2b 65 14 50 6b de 1f fb 44 0a cd f7 37 fd e7 fe ea fa f3 5c d7 82 fc 33 79 e2 5f 1d fd 96 38 Data Ascii: mAc,~JWJGol0\|'1&+V_jEd}JGWu_jR5<syNqu,Ktsr{zG\|t1OlelgjcgiqA$WJ[~R0#vjk<T*sJj<+ePkD7\3y_8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49723	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:26 UTC	346	OUT	GET /th?id=OADD2.10239394254867_1F6ONY1CP3G3QNK5Y&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-09 10:08:27 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 422369 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 443C38D389F2443D875B65AE7BDB8F09 Ref B: EWR30EDGE0220 Ref C: 2024-12-09T10:08:27Z Date: Mon, 09 Dec 2024 10:08:26 GMT Connection: close
2024-12-09 10:08:27 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 39 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 37 3a 31 37 20 31 30 3a 35 37 3a 34 35 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 25.9 (Windows)2024:07:17 10:57:458C
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 34 87 b0 eb 81 db a7 ff 00 ae a4 07 0a 30 3d 31 c7 14 92 63 71 c0 20 e7 27 d7 9f e9 9a 77 19 16 c2 78 3d 4f 5c 76 f4 fd 69 36 87 41 9d a0 76 cf f4 eb 53 04 52 c4 13 83 cf e9 ce 29 15 3a 0e 9d f9 1d ba d1 a0 14 ae 2c ad ae 3f e3 e2 ca 1b 85 1d 56 45 ea 07 bf 04 7d 45 63 ea de 0b d1 af a4 92 74 96 5b 49 1f d1 43 2e 7d 76 8e 40 f6 15 d1 e3 a9 07 9f e4 0d 30 8f 94 93 9c 0f c7 fc 8a cd d1 83 77 3b a8 e6 58 aa 5a 29 5d 79 ea 79 96 b9 e0 8d 5e c8 33 db c6 b7 91 a8 ce f8 0e 4f fd f3 c1 cf e1 5c eb db 4d 14 de 5c b1 b2 b8 ea ae 30 40 fa 1c 1a f6 de 47 23 a8 e0 1a 83 54 b3 b6 d4 63 54 d4 2d 22 b9 55 05 54 ca 3e 75 07 d1 86 08 f6 a8 70 9c 56 8e e7 a9 47 3a 83 d2 ac 6d e6 bf c8 f1 4e 43 7a e7 ad 26 7a 1e c3 b7 d2 bb fd 7b c0 96 ec c0 e8 f2 98 cb e3 f7 77 2f 95 07 d9 Data Ascii: 40=1cq 'wx=O\vi6AvSR):,?VE}Ect[IC.}v@0w;XZ)]yy^3O\M\0@G#TcT-"UT>upVG:mNCz&z{w/
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 91 de 8d 26 04 5b 30 19 a3 66 6f 98 e5 4a 1a af 71 23 bc c4 44 24 d8 09 00 ab 07 04 f7 c0 35 1a dc b2 3b 74 21 54 26 70 7f e7 9c a0 8f c8 d3 d4 28 e5 c2 8f 4f 32 22 bc ff 00 bc 29 06 c2 70 fb 33 8c 02 f1 10 7f 31 53 27 0b f2 31 04 0f f9 67 36 73 f8 1e f5 5a 88 17 27 94 27 03 a0 49 43 0f c8 f3 4d 64 01 be 60 b9 07 3f 3c 65 3f 36 07 14 e6 42 1b 32 03 8f f6 e1 cf ea 29 c9 b5 70 55 d4 67 fb b2 91 fa 1e 33 ed 42 16 80 0b 1e 01 27 fd d9 43 7e 87 a5 0c 8a 57 94 e7 9c 6e 88 8e 3d 32 0e 29 59 59 f1 b8 33 7d 54 3e 7f 2a 67 ca 3a 95 53 9f f6 a3 3f 87 6a 07 d4 50 dd 14 3f 18 ed 28 6e 3e 8d 41 8c 2a 96 31 e7 3c e3 ca 3c e7 d4 a9 ef 4b 92 cb c1 2d ed b9 5c 7e bc 9a 36 10 d8 31 f7 ff 00 9e 65 7f 55 34 0e c3 43 7a bf d4 79 bf c8 30 a7 05 ca 92 17 ff 00 21 fe b9 43 4a 5f Data Ascii: &[0foJq#D$5;t!T&p(O2")p31S'1g6sZ''ICMd`?<e?6B2)pUg3B'C~Wn=2)YY3}T>g:S?jP?(n>A1<<K-\~61eU4Czy0!CJ_
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 07 d6 cf fa 3b 7d 6b bf 0f f1 fd df 92 38 71 3f ee 52 f5 9f fe 94 cc b9 8e 2d ce 2a 18 f9 c6 3b 0a 9a e3 26 df 3e d5 0c 67 a6 4e 38 af 52 3b 1f 15 8b f8 90 a7 ee f1 4c 6c 77 1f 4a 7f 45 19 f4 a6 49 c7 f8 d3 39 7a a2 ed 9f 11 8c f4 e4 fe 18 a9 34 f5 cd f3 10 3b 53 2d 94 98 78 ee b8 c7 e3 52 e9 9c dc b9 f6 ac 67 b3 3d fc 2e b5 29 a3 bd f8 27 a5 1d 6f e2 97 87 f4 ac 12 2e b5 18 23 6c 0c 9c 17 19 e3 e9 9a f5 af f8 28 e6 ae f7 df 1e a3 d2 56 30 91 68 fa 6c 50 20 5e e5 b2 e4 fb 7d e0 31 ed 5c 6f ec 67 66 6f 7f 68 ef 0b 20 ea 97 c2 4f 6f 94 31 fe 95 2f ed 75 74 6e ff 00 69 cf 13 33 ca f2 ac 77 c1 14 b1 dc 42 85 1f 28 f6 1e 95 e7 ed 77 fd 68 9f f9 9f 49 cb cd 8b 8d fa 45 fe 2d 7e 88 7f c4 c0 91 fc 0a f8 78 3c a6 49 9a 0d 41 8b 76 65 f3 f0 38 fa e6 bc bd 31 b7 81 Data Ascii: ;}k8q?R-*;&>gN8R;LlwJEI9z4;S-xRg=.)'o.#l(V0hlP ^}1\ogfoh Oo1/utni3wB(whIE-~x<IAve81
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 38 40 71 c6 41 c9 e7 9c fb 73 52 59 e8 d6 9a 83 15 96 32 87 1c ba 70 41 ed ed 43 a2 d1 b5 1c f6 9c 9a e7 8d bf 13 93 e0 f4 fc e9 41 1d 7b d6 af 88 3c 3d 7b a5 e6 5c 09 6d bf e7 a2 0e 01 ff 00 68 76 ac 96 3f 9d 64 cf 62 9d 68 54 8a 94 1d d0 a7 9f eb ff 00 d6 a4 23 0d 8f ca 90 12 0e 0d 29 cf 42 28 34 68 78 23 18 63 d6 90 ae 57 2a 78 a8 f9 1c 10 73 f5 a7 31 04 e7 bd 16 b0 06 4e e0 3d f3 4e 03 3d 73 4c 07 e6 fe 94 e5 24 74 a0 a1 eb 9d fc f6 ae a9 75 0d 3b c4 da 6c 1a 6e b0 b0 db 6a b1 10 96 ba c1 6d aa eb d0 47 70 3a 11 9f f9 69 d4 77 cd 72 7b bd 3e 83 26 9c ac 73 fe c8 1c d4 72 f5 1c 6a b8 92 6b ba 65 f6 8f aa 4d a7 6a 56 e6 1b 88 1b 0e 87 04 1f 42 08 e0 83 d4 11 c1 aa 60 1d bf 8d 74 1a 7e a7 6d 7f 67 1e 93 ac f3 02 e1 6d ae 8f 2f 65 f4 3d 59 3d 54 f6 e9 8c Data Ascii: 8@qAsRY2pACA{<={\mhv?dbhT#)B(4hx#cW*xs1N=N=sL$tu;lnjmGp:iwr{>&srjkeMjVB`t~mgm/e=Y=T
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 5c 51 70 d4 31 8e bf 8e 29 40 3d 7b fb d2 9f bc 48 3c 7a d3 e2 45 2d 92 7a d4 dc 11 20 cf 96 a0 83 83 53 2c 60 6d c3 64 9f f3 cd 46 ee 42 84 c9 20 76 35 35 ba bb e0 20 cb 36 02 0c 64 92 78 03 f3 ac 99 a2 b1 d0 7c 44 94 69 1f 01 74 3d 31 51 d2 5f 11 ea 93 df ca c4 63 7c 30 81 12 63 db 7e f3 5c 37 82 6d be d3 af 44 4f dd 87 32 1e 9d ba 7e b5 da 7e d5 37 21 7e 22 d8 f8 6a 0c 0b 6f 0b e8 d6 9a 6c 41 48 c1 70 9b e5 6f 62 64 76 fc ab 1b e1 a5 a9 16 b3 de 10 7f 78 c1 17 b7 03 93 83 f5 af 42 8c 54 68 af 33 e5 71 d5 9c a5 29 9d 19 c9 cb 10 7d 3f 0a 23 8f 6b 1c 0f a5 4a 4f 62 98 00 77 18 fc 69 47 38 52 70 7d f1 8f c0 d6 87 86 5d d0 20 2f 75 bc 0c 2a d6 fa a6 17 23 81 cf 5a a7 a1 c2 12 cf 79 1f 33 9d d9 c0 ad 10 bd c8 fc 7d aa 6e 3d 84 09 85 e1 bb 74 02 93 1e 9d 8f Data Ascii: \Qp1)@={H<zE-z S,`mdFB v55 6dx\|Dit=1Q_c\|0c~\7mDO2~~7!~"jolAHpobdvxBTh3q)}?#kJObwiG8Rp}] /u*#Zy3}n=t
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 28 1d b6 fd 69 00 c6 49 1d 69 54 73 f5 a5 3f a0 a4 1d 04 07 e6 c7 51 4c 23 d3 a0 a9 3d ff 00 1c d2 28 c9 e4 64 77 a6 84 96 a1 08 f9 b9 60 30 33 c9 fd 29 58 80 a3 19 a4 85 07 98 17 1c 93 81 8f 7a 73 80 bc 0e 83 a8 f7 a5 d4 a6 49 6e 41 7c 1c 0e a4 fe 55 ec 5f b2 84 42 e3 c3 df 10 6d 8c 8a 82 5f 09 5c 93 90 7b 1c e7 3e d5 e3 91 c9 f7 93 03 0e 47 3e 98 af 53 fd 99 b5 13 a7 5a f8 d8 14 62 92 f8 52 f6 36 c0 e8 4e c0 33 f8 9c 56 55 74 89 86 21 37 4a cb 7f f8 24 7f 0a 51 cf ec 53 f1 09 81 dc bf db 16 1b 41 e7 04 13 93 ed d6 bc 0a f1 98 6a 6a e0 67 19 3f e3 5f 42 7c 23 1f f1 85 bf 12 2d 87 2e 9a a5 93 9f 6e 70 7f 95 7c f9 78 71 7c 71 fd c2 2b d7 a3 f1 3f 4f d5 9e 56 32 ea 8c ff 00 c4 bf f4 98 9b da d7 8d 75 8d 67 4b d1 ec 1d 20 82 d7 41 b5 fb 35 a2 46 a4 9c 17 67 Data Ascii: (iIiTs?QL#=(dw`03)XzsInA\|U_Bm_\{>G>SZbR6N3VUt!7J$QSAjjg?_B\|#-.np\|xq\|q+?OV2ugK A5Fg
2024-12-09 10:08:27 UTC	16067	IN	Data Raw: 27 c3 e9 b4 73 9b b5 ea 7b 7d ea 92 3d 5f e1 76 dd c6 f3 c3 f8 27 bd da 8c 7f e3 d5 f0 03 69 d7 2b 20 06 25 e7 80 3c c1 fe 34 8b 63 33 b1 02 35 c8 ff 00 6d 7f c6 9f d5 ff 00 be be ef f8 22 fe cf f2 7f d7 c8 fd 01 5d 4f e1 63 b0 54 bb f0 eb 13 d0 0b d5 07 f5 6a 57 b9 f8 60 ec 14 49 a2 b7 40 15 2f 94 e7 d7 f8 ab e0 3f ec f7 f2 c4 62 18 c4 bc 92 de 7a f4 1e 83 35 1c 7a 7d c3 30 0b e5 7c dc 8f de a8 cf a7 53 47 d5 ff 00 bf f8 7f c1 0f ec ef 26 7e 80 9b 1f 87 b2 fe f1 06 9f b7 9f bb 7a a0 7b 77 a6 0d 0f c0 af 36 62 48 5f 19 2c 89 74 87 3f 8f 5a f8 25 74 6d 47 72 ae c8 bf 79 9d bf bf 5c 1f 6e 0f 1f 8d 49 36 99 a9 46 33 1a 48 81 57 e7 26 75 3c 8f 4c 1e 9e d5 0f 0f ff 00 4f 17 f5 f3 1f f6 73 5d 1f dc 7d e8 7c 31 e0 47 46 01 19 59 b3 8c 4e bf 29 f4 1e b4 e5 f0 5f Data Ascii: 's{}=_v'i+ %<4c35m"]OcTjW`I@/?bz5z}0\|SG&~z{w6bH_,t?Z%tmGry\nI6F3HW&u<LOs]}\|1GFYN)_
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: be 1d 4f f2 35 1b 78 0f c5 51 e1 5f 42 bb cf b2 83 fc 8d 7b f6 e6 19 ce 4f d2 94 16 1f c6 dc 1e 99 f5 a4 f0 eb b9 4b 3c ad d6 28 f9 e6 5f 05 f8 aa 25 39 d0 2f 08 03 aa c6 4f f2 aa 97 1e 1d d7 62 6f df 68 97 e9 9f 5b 76 c7 f2 af a4 83 ba 8c e4 ff 00 2a 68 91 f9 c4 87 f3 34 7d 5f cc a5 9e cf ad 35 f7 9f 32 cb a7 df 45 91 2d 9d c2 30 ec d1 11 fd 2a 3f 25 c7 ca f1 b0 3d 31 83 5f 4e bb bb ae 0f 3f 51 9f e7 51 48 90 91 87 b7 b7 6e bc f9 4b fd 45 1e c1 f7 34 59 ea eb 4f f1 ff 00 80 7c d2 aa bb c6 1f a8 ce 0d 35 89 2d 82 01 fa 7f 80 af a3 a7 d2 b4 a9 89 33 69 56 6c c7 ab 1b 75 cf e8 2a 9d d7 85 fc 35 70 b8 97 41 b3 20 67 95 5d 87 9f a1 15 3e c2 7e 46 8b 3c a5 d6 0c f9 fe 34 07 04 af 1e fe 94 ef 29 08 e3 a7 bd 7b 93 78 13 c1 ec d8 3a 46 d2 47 f0 cc c3 07 f3 aa f7 Data Ascii: O5xQ_B{OK<(_%9/Oboh[vh4}_52E-0?%=1_N?QQHnKE4YO\|5-3iVlu*5pA g]>~F<4){x:FG
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: ba 92 08 22 bd 4b c1 be 36 8e e5 56 db 53 21 64 e8 b3 0e 87 fd e1 da bd 2c 3e 36 fe e5 5d 1f 7f eb 6f c8 e1 c4 60 d7 c5 4b 6e df e4 76 94 53 63 75 74 0e a4 32 91 90 41 c8 22 9d 5e 91 e7 10 de 5a c3 73 09 8e 74 0c bf a8 f7 15 ca f8 83 43 30 23 1d 9e 6c 0d fc 5d d7 eb e9 f5 ae c2 91 80 2a 41 e7 3d 45 63 56 8c 6a 2d 4d 69 56 95 37 a6 c7 82 78 d3 c1 ed f3 5d e9 a4 24 83 e6 e0 60 13 ef e8 7d eb 07 47 d5 e7 b5 bf 58 ae 1e 4b 6b a8 08 2b 22 e5 48 6e c7 3d bf 0e 0d 7b d6 bd a1 82 ad 35 a0 f5 2d 17 af d3 fc 2b cf 7c 61 e1 4b 5d 4d 19 d2 3f 2e 75 04 64 0f 98 7f 88 f6 35 e3 d5 c3 ce 94 b4 3d 5a 55 a3 51 00 9f 4a f1 72 ac 3a ab c7 61 ad 60 2c 57 ea b8 8e e4 f6 59 54 70 09 f5 ff 00 f5 57 3b aa 58 5f e8 9a 91 b2 d4 60 30 c8 39 1d d5 87 f7 95 ba 30 ac 6c df 68 d7 22 cf Data Ascii: "K6VS!d,>6]o`KnvScut2A"^ZstC0#l]*A=EcVj-MiV7x]$`}GXKk+"Hn={5-+\|aK]M?.ud5=ZUQJr:a`,WYTpW;X_`090lh"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49722	2.16.158.83	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:26 UTC	367	OUT	GET /th?id=OADD2.10239337201808_1NREAF5SJS6TG8GUU&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive
2024-12-09 10:08:27 UTC	627	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Type: image/png Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QWthbWFp"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Content-Length: 1874 Date: Mon, 09 Dec 2024 10:08:27 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.4d9e1002.1733738907.49f32bc
2024-12-09 10:08:27 UTC	1874	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 06 e7 49 44 41 54 48 4b 95 93 0b 54 93 e7 19 c7 3f 2e 81 90 1b b7 ba a3 67 dd 7a a6 75 a7 83 40 88 dc ca aa d4 1d 94 02 02 81 90 ac 5e d0 8e e3 8e 5d 2f 93 22 0c 08 01 af 08 a2 a0 20 a2 50 44 ec 9c 73 dd d9 dc ea ac 68 5b 35 17 92 70 27 5c 12 12 42 a2 dc aa 88 a8 79 9f 8f 90 48 4b f6 26 fb 8e eb d6 d9 6d bf 73 fe e7 3b 39 e7 7d fe bf ef 79 bf 13 e2 bb 58 ad 34 ae e4 ca 47 8b b9 72 e3 17 5c b9 6e 3c 44 31 f0 24 44 d9 83 a3 9a 0c 51 de 54 87 2a db 8e 87 2a ff b2 9e f8 a3 d8 8b 1a f9 df e0 7d 31 f1 fd 08 d9 Data Ascii: PNGIHDRw=sRGBgAMAapHYsodIDATHKT?.gzu@^]/" PDsh[5p'\ByHK&ms;9}yX4Gr\n<D1$DQT**}1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49726	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:26 UTC	346	OUT	GET /th?id=OADD2.10239398630132_1ZBVZAVRHAL2Q9QL5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-09 10:08:27 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 671982 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 8D016CAB001344CFA710DE0282BFA28C Ref B: EWR30EDGE0416 Ref C: 2024-12-09T10:08:27Z Date: Mon, 09 Dec 2024 10:08:26 GMT Connection: close
2024-12-09 10:08:27 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 19 ba 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 39 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 38 3a 30 36 20 30 39 3a 35 33 3a 31 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 25.9 (Windows)2024:08:06 09:53:198
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 4f 45 ae 9b 3d c4 d1 42 f0 4b 1f 99 27 fa cf ee 57 43 95 34 f5 31 a6 e7 cc ec 32 1b 44 d4 a5 f3 be d9 14 7f f4 d2 5a f4 8b 1f 88 3e 28 4f 07 47 e1 7b a9 be db 63 6f b2 39 23 f3 7f d6 45 1f fb 6b f7 56 b9 7b 2b 48 17 4a 95 21 86 6f f4 7f 92 39 7f f6 6a 67 da 60 f3 b6 41 0f 97 24 7b ff 00 79 2d 79 b5 bf 7b 35 cb d0 fa 2c 15 a8 41 ec dc 8d 4f 17 6a 77 fa f4 31 da bc 30 c7 63 6f 1f fa 17 95 68 88 f6 88 bf f2 cf 7f df d9 5d 7f c0 cf 88 da 97 c3 2d 27 56 fb 2f 86 ed 2f 24 d4 2d d2 3b 2b df f7 7e ee ee fb 2b cd 6d 65 92 ef cc 83 f7 31 c7 fe af cb ff 00 9e 9b 6b 47 4a b9 91 21 df e7 5d c7 1c 91 f9 71 d6 35 28 d4 84 5d f5 45 d0 c4 c2 a4 d6 bd 2c 9f 6f 22 fc df 13 fc 7d a9 78 b3 4d 9f 5e d7 b5 6b d9 2c f5 18 6e fe cd fc 1f f0 15 af b5 f5 8f 15 69 b6 9e 1e fe d4 b2 Data Ascii: OE=BK'WC412DZ>(OG{co9#EkV{+HJ!o9jg`A${y-y{5,AOjw10coh]-'V//$-;+~+me1kGJ!]q5(]E,o"}xM^k,ni
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 8d 3c c9 3c dd 8f 22 7f b5 b6 b7 2e b5 3d 77 5b 86 34 bd d7 ae ee 20 f2 fc bf f4 eb b7 7f 91 bf bb fe 15 a4 b0 8d b5 6d 0c e9 e6 34 94 7d ed 59 f7 44 6d 07 f6 7f db 7c e8 64 b5 f2 fc cf b4 c5 2e f4 d9 5c 6f 8f 3c 75 a6 e9 5a 1c 77 5e 1e bc d3 f5 1d 57 51 b9 86 d2 ca db ed 7f eb 1e 4f ba ec ab f3 71 5f 28 dd 78 97 c4 3a 3e 93 63 a5 e9 7a f6 a1 1d 8d 94 be 64 71 db 4b fe ad ff 00 bd 54 b5 8b cd 6b 58 d7 23 d5 1e 6f 32 ea cb 64 9f 69 8b e4 9b 7a ff 00 15 63 f5 76 b5 ba 37 fa dc 64 d4 54 1f fc 03 da e0 f1 2f c5 fd 13 50 fe c8 f1 e7 f6 7d ed ae ab 1f da ed bc ad 88 f6 e8 af b5 e3 f9 f6 ee a8 3c 71 fb 42 f8 6f fb 3a e6 d7 c0 7a 6c d7 1a 94 72 25 c5 cc 77 31 6c fd ea ff 00 1a 47 fc 75 e2 de 2a f1 47 88 75 d8 63 4f 10 eb 17 77 12 5b fe e2 38 e5 97 fd bf bb 4e fb Data Ascii: <<".=w[4 m4}YDm\|d.\o<uZw^WQOq_(x:>czdqKTkX#o2dizcv7dT/P}<qBo:zlr%w1lGu*GucOw[8N
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: ae ea ba d7 4e fa 72 96 67 97 4d d5 7e d2 89 a6 cd 24 ff 00 66 f3 24 b9 97 fe 59 ed aa 3a 7d cf 93 15 8c 67 ca 93 fe 59 dc ff 00 7f 67 f7 7f 0a d3 d1 fe c9 6b 69 2e 97 24 3f f1 f3 fb 89 65 8f fe 79 7f 0f de fe ed 50 d5 2c 74 64 d2 7e da 9a 97 97 25 bc 7f bc 8e db fe 5a 7f 0d 6b 09 43 9b 96 cf d4 c6 a5 1a b0 87 b4 4e 36 ec 5a 8f 55 b4 d1 2d 24 83 4b f3 bc bf 2f cc fd ef f7 ff 00 e0 55 42 fb 5e b8 b8 87 c8 9b f7 73 c7 1f 99 6d 24 91 6f f2 37 7f 0d 61 4f 71 98 f6 3c 3f be 8f fe 7a 7f 7a aa cc d2 43 f7 3e fc 75 d7 2c 25 3b 73 48 e5 8e 3a bb 8a 8c 5d 99 dc 69 5a d6 9b e4 c9 0f 9d 77 e7 fd 9b fe 5a fc 89 ff 00 4d 3f da a8 35 88 35 6b 7d 43 ed 4f a9 7d a3 cc b6 49 2d be cd f7 3c aa e4 e0 5f 2a ea 39 13 ef fc ff 00 eb 25 ad fb 19 e7 97 4f b6 b5 f2 7c cf b3 c6 f2 Data Ascii: NrgM~$f$Y:}gYgki.$?eyP,td~%ZkCN6ZU-$K/UB^sm$o7aOq<?zzC>u,%;sH:]iZwZM?55k}CO}I-<_*9%O\|
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 16 b9 ab dd ea 1a 7f cf 34 d1 c9 fe ae 4f dd 7c ff 00 7e ac e8 eb e6 e9 3e 4c 1e 74 93 db c9 fe 8d e6 fc fe 67 f9 5a ad 1d a5 da da fd 8b fb 37 cc fd df ee ee 7c af 92 0f e2 ff 00 3b aa e4 17 96 9a 64 d6 d6 a9 a6 fe ff 00 e7 ff 00 49 fb 9f c1 f2 ab 7f f6 35 d3 39 42 09 42 92 d4 cb 0f 4e a5 66 ea 62 5e 96 dc bf a5 69 50 26 9f 24 ef a9 7d 8a ee df fd 5c 72 fc ff 00 7b f8 7f e0 35 63 43 96 38 be 4b ab 39 bf 77 ff 00 3c e2 ff 00 8f 8a 93 4e d3 ed 2d fe c2 fa a7 ee e4 92 3f f5 75 b5 a6 dc cf 71 e6 7f cb c4 72 46 f1 c9 fc 15 e1 62 aa 4a 4d 5d 9e d5 0a 4a 9e cb 46 73 de 6c 7f da 16 d7 49 34 d1 c1 e5 fe f2 3f f9 e7 2a ff 00 72 9f 7d 14 ef 77 f6 28 21 86 e3 cc 8d e4 ff 00 5b bf cb ff 00 67 cc 6a d4 9e da 0d 43 50 f2 34 e9 a6 92 49 37 ff 00 cb 2d 9f 3f f1 7c b4 e8 Data Ascii: 4O\|~>LtgZ7\|;dI59BBNfb^iP&$}\r{5cC8K9w<N-?uqrFbJM]JFslI4?*r}w(![gjCP4I7-?\|
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: da 3c cf dd f9 7f ed ff 00 7a a3 92 ee 76 9a 39 a4 fb 92 6f ff 00 59 5b 1a 06 9d a6 cf e6 5e dd 5e 6a 16 50 47 fb c8 fc a8 b7 cd 23 af f1 ff 00 77 65 6b 39 ca 94 76 d0 ce 9c 61 5a a3 6d b3 26 d7 51 bb b7 f3 20 4f de 79 9b fc cf 33 ef fc d5 04 73 da a3 48 e9 0f c9 1c 75 3f ef 2e 35 0d 89 17 fc bc ff 00 ac 93 fe 5b b6 ff 00 ca aa ea 90 f9 52 c8 13 ef f9 89 1f ee a5 fe ef de ab 75 13 ea 65 1a 53 b3 ed b1 34 30 a4 be 64 ff 00 6b f2 de 39 3f 77 e6 51 4b a3 bf ef a3 fd cc 31 c7 e6 f9 72 79 bf 71 37 51 59 4b 17 4e 0e cc d6 8e 06 a4 e3 76 61 78 6e fa 3b 76 ba 82 e6 19 7c 8f 2d 24 92 3f f6 ab 6f 52 d4 be cf 77 e4 c7 fb bf b4 47 fe 8d e5 ff 00 f1 2b fa d7 b5 f8 7f c3 9f f0 8d 78 66 e6 d7 5b b3 d2 63 b1 b8 8d 2d 2f 63 96 2f 3b f7 ad f7 9f cd 4f e0 ff 00 6a a5 d4 be Data Ascii: <zv9oY[^^jPG#wek9vaZm&Q Oy3sHu?.5[RueS40dk9?wQK1ryq7QYKNvaxn;v\|-$?oRwG+xf[c-/c/;Oj
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 49 e2 3d d7 73 c8 ee a1 9c cd 24 eb e5 5c 7f d3 4f e0 7f f6 fe b5 41 17 ed 1e 63 ff 00 ac fd e7 ef 2b b5 f8 84 be 6f 88 63 d4 6d 6c e6 92 c7 51 fd fd b5 cd ce cf f4 88 95 fe f3 2a 7d c3 5c d6 a8 d6 a9 79 70 96 72 c5 27 99 27 ee e4 af 5e 85 47 28 26 f7 3c 7a d4 dd 2a 8e 36 d3 a7 a1 43 cb db 14 7b 25 ff 00 59 ff 00 a1 2d 4f a4 cd 23 cb 26 cf 2b f7 9f eb 24 fe e6 da 65 a8 8d 26 8f 7f fa 9f f9 69 1c 9f 3f dd a6 43 e6 3f fa c8 7f d5 ff 00 ab 8e 3a de f6 61 c9 cc 9a b9 76 ee e7 ed 5e 5f ef bc c9 ff 00 d5 fe ef fb df c3 56 a3 b5 f2 22 b9 fb 57 fa c8 ff 00 77 fd ff 00 bd ff 00 a0 d5 7d 34 a5 b4 7b 3f e5 a4 7f f2 d2 38 fe e5 47 2b 3f ee d3 fd 64 7e 62 3c 9e 5d 1c 8a f7 22 58 89 3f 75 74 29 c6 bb 23 91 26 fd df 97 f3 c7 fc 4b 52 7d 9a 48 ad 23 91 3c af de 49 ff 00 Data Ascii: I=s$\OAc+ocmlQ}\ypr''^G(&<z6C{%Y-O#&+$e&i?C?:av^_V"Ww}4{?8G+?d~b<]"X?ut)#&KR}H#<I
2024-12-09 10:08:27 UTC	16067	IN	Data Raw: 7f ef ba f3 9f 88 56 d2 78 7f 5c b9 48 61 fb 44 fe 5f 99 25 ef fc f4 dd fe b3 ff 00 89 ad bd 37 5e 9e cb ed 30 41 34 3a 8f 99 b2 4f fa 6d 69 fe c7 9b d7 e4 aa 7e 3b f1 0c 9e 20 d5 b7 bc de 5c 1e 5a 47 e5 c5 69 bf e7 fe fb 35 74 50 a3 2a 75 5b 51 f7 5d b5 39 aa 72 72 dd c9 de f6 29 e9 b7 33 a7 83 64 b1 b5 87 cc ba b8 8f cc ff 00 6e dd 3e ee e4 fe f6 57 fe f9 a3 c2 b3 c7 2c d1 fd aa 6f de 5b c8 91 dc ff 00 d7 2f e2 93 fd b6 15 4b 47 96 4b 4b bf b5 6b d0 cd 7b 6b 1e cf fa ed b3 fd 9a d9 83 c3 56 97 76 9f 6a d2 e6 fb 3c 77 1b e3 8e 48 be 79 bf eb 9b fd 6b 5a ee 14 9b 8c 96 fa dc c6 9f 3d 68 68 f6 e8 ca be 31 bc 8f 50 f0 9d cc f6 57 9f f1 ef 73 e6 49 fd f9 3c cf f1 af 3f b5 6c 5d ef 78 7c c4 8f e7 92 29 3f 8e bb b8 6c 63 d0 a6 93 54 d6 ec fc b8 e4 df f6 68 ee Data Ascii: Vx\HaD_%7^0A4:Omi~; \ZGi5tP*u[Q]9rr)3dn>W,o[/KGKKk{kVvj<wHykZ=hh1PWsI<?l]x\|)?lcTh
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: f3 99 75 49 2f 1f f7 9f bc ff 00 96 9f 3f dd 4a f5 92 49 58 f2 dd db b3 db a1 6e 4d 2b 53 d3 ed 7e d8 83 cc 87 fe 5a 49 6f 17 c9 ff 00 7d 56 3f fb 6f fb ca b0 d7 2e be 5b ff 00 cb 1a 85 d9 0f de f2 a3 aa 64 41 49 6b 2d c3 e4 6f b9 fe fc 72 54 6a ae bf f7 ee ad 3f fd 3a ff 00 e4 4f f6 a9 9e 6e ef 31 cf df ff 00 96 92 7d ff 00 9a 95 ae 52 6d 8d 46 b8 59 3f e5 ad 58 b4 d5 7c 89 77 bc 46 49 a3 d9 e5 c9 24 bf 34 75 5f cd db 2e cf f9 e7 ff 00 3c ea 5b 79 1e e2 58 d3 c9 8b 7c 7f e7 e6 a7 28 d8 1a 4d 7b cb 43 77 47 d6 a3 4f 9e 0b cf ec eb ef 9e 3f 32 38 77 ef dc 9b 7f 95 53 74 83 c9 f3 e6 97 f7 92 49 fe af fb f5 05 c4 09 0c 96 f3 27 df 92 df cc 92 ad 69 cd 1d c4 3b ee 7f d6 47 27 ee e3 f2 bf d8 fe 74 e9 d3 4a ee db 91 5a 7a 2b 6c 8e 83 c1 f7 7a 96 a5 ab 47 07 f6 Data Ascii: uI/?JIXnM+S~ZIo}V?o.[dAIk-orTj?:On1}RmFY?X\|wFI$4u_.<[yX\|(M{CwGO?28wStI'i;G'tJZz+lzG
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 8e ab 5d 79 79 cb ff 00 a3 f9 9f 27 fa ad e9 5b 72 45 ab 1c f3 c4 54 8b 72 44 11 dd c0 df 7c 45 fb bf f5 71 fd cd eb 4c b7 ff 00 48 d4 37 cf 2f c9 1f cf 24 9f c7 4c ba b4 d9 0f cf 0f fa bf fc 89 54 e3 d9 f6 a8 f6 79 52 7f 05 6a b4 95 8e 19 46 ea e6 f6 8e d1 bf da 64 9a 69 a4 8f fd 5c 71 ff 00 07 fb 3f ee d1 ac 59 c7 0d dc 96 49 79 e6 4f 1f fc f2 ff 00 96 9f ef 56 4e f9 d6 1f f5 32 ec f3 3f f1 ea 24 9f 74 bb df cd df 1f cf e5 c9 4b 91 5e e5 fb 49 ba 7c 8d 0f b5 36 a9 36 fb 98 62 92 3f 91 e4 f2 fd a9 d7 4b f6 a9 bc bd 3e 19 bf 79 f3 c7 fb da ab 6f 39 32 f9 b7 32 ff 00 ab ff 00 9e 95 2a ef cf fa df df 7f d3 4a 57 b1 9e aa 44 ba 52 5a 45 e6 3e a1 2f 99 e5 c7 fe ae 3a 7d c1 b4 fb f6 b1 4b 1a 7f cb 4a 8a 06 db 2f da 66 b4 e2 49 1d 3f 77 56 7c 4d 1c f6 f7 fe 5c Data Ascii: ]yy'[rETrD\|EqLH7/$LTyRjFdi\q?YIyOVN2?$tK^I\|66b?K>yo922*JWDRZE>/:}KJ/fI?wV\|M\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49724	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:26 UTC	375	OUT	GET /th?id=OADD2.10239394254868_1GI7NCR9RVLW4CPD2&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-09 10:08:27 UTC	856	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 377425 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 8B5CE4AE2C8C47FF95E1AFC61ED8008A Ref B: EWR311000107029 Ref C: 2024-12-09T10:08:27Z Date: Mon, 09 Dec 2024 10:08:26 GMT Connection: close
2024-12-09 10:08:27 UTC	15528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 39 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 37 3a 31 37 20 31 30 3a 35 36 3a 35 33 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 25.9 (Windows)2024:07:17 10:56:538C
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 31 13 db 4d 1b 29 c1 0f 19 52 0f d0 8a a4 d3 d9 8d c5 f6 22 d9 f2 e7 34 d2 a7 bd 04 fa 75 a5 cf a1 e6 9e a4 09 8e f4 0a 46 34 10 69 80 b9 14 87 1b b1 4a b8 e9 8c d0 12 80 d8 28 c7 63 4e c6 17 de 8c 63 af 5a 09 dc 6d 36 9c a7 af d2 97 8a 07 61 00 f9 69 30 39 e6 9d 8e e6 8d a7 6f b5 17 0b 0d 22 92 95 85 00 50 20 1f 7b 34 87 3d e9 f8 f4 a4 c6 16 82 46 91 9e 47 a5 0a 3f 2a 90 2f 4c 52 e3 24 fd 28 e6 02 3c 61 a8 3d 69 e4 76 f4 a6 e0 d0 08 4c 7a 52 6d a7 60 9e 94 aa 09 e9 40 09 81 9a 31 fd 69 58 72 29 28 0b 0c 71 d0 d2 a8 a7 32 f4 3d a8 5a 2f a0 06 33 4c 61 8a 7d 34 9e a0 d3 44 ec 35 b0 39 a4 fc 29 5b 14 dc 9e f4 c9 d8 6f 4e b4 99 f7 a7 9e 7f 0a 6e 71 de a8 87 a0 67 3e f4 8c 33 47 56 cd 2b 67 9c 53 17 41 bd 3b 53 69 de f9 a2 99 22 12 3f 4a 4a 1b ad 0c 31 41 2c Data Ascii: 1M)R"4uF4iJ(cNcZm6ai09o"P {4=FG?*/LR$(<a=ivLzRm`@1iXr)(q2=Z/3La}4D59)[oNnqg>3GV+gSA;Si"?JJ1A,
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: c3 0e 95 36 9f 74 0e 36 f3 5e 9d e2 df 0c 34 0a f0 cf b6 7b 59 4e 22 70 39 1e c7 b6 47 b7 5a f3 2f 11 68 d7 1a 2d c8 96 3f 9e dd fe 60 47 6c d7 44 2a 46 6b cc e7 9c 5c 5e a7 a5 fc 1a f8 8b 71 e1 59 9b 4e bf 89 af b4 1b c6 ff 00 4b b3 3c 98 89 eb 24 5e 84 75 c7 7f 6e 0d 74 ff 00 15 3c 09 04 d6 71 f8 ab c2 53 ad e6 9f 7a bb d5 a3 e8 fd c8 20 7d d7 1e 9c 67 d8 d7 87 69 d7 5b d4 10 79 1f d7 b5 7a 37 c1 df 88 37 3e 12 bc 7b 69 e2 37 da 2d e9 0b 79 62 c7 20 8f ef a6 78 57 1f af eb 5a c5 db 4e 9f 97 fc 02 5a e6 db 7f cf fa e8 cc 3b 79 40 60 09 39 ce 39 e3 9f 4a d0 b5 9c ee c0 73 f4 f5 3f e3 5d ef c4 cf 03 59 ea 1a 6c 7e 2e f0 74 eb 79 63 79 f3 7c bf c4 7b ab 0f e1 90 74 c1 1c ff 00 3f 37 86 42 1b 07 82 0e 08 e8 7d c6 0f 7a 2d 6d c1 3b dc de b5 9f 77 19 27 3f 95 Data Ascii: 6t6^4{YN"p9GZ/h-?`GlD*Fk\^qYNK<$^unt<qSz }gi[yz77>{i7-yb xWZNZ;y@`99Js?]Yl~.tycy\|{t?7B}z-m;w'?
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 49 3f e4 54 37 52 80 09 25 bb 9e b9 39 ef 93 4d d2 34 cb ad 5e e7 e4 cc 70 03 f3 49 d3 f0 15 37 b0 ae 57 b4 82 e3 50 b9 fb 3d a2 64 9f bc dd 94 77 ae bf 47 d2 ad 74 7b 52 e4 ee 97 f8 e4 3c f3 e8 3d 4f b5 5d d1 f4 e4 b4 d9 a6 e9 d6 e6 5b 89 70 15 10 65 d8 9e e4 f6 1e e7 b5 7a 0f 84 fc 25 06 99 22 5f ea 2e b7 37 eb cc 63 ac 76 ff 00 ee 8e e7 dc ff 00 f5 eb 8e a5 77 27 c9 4f ef 3a 29 d1 49 73 54 fb 8c 9f 09 78 41 ae 36 6a 3a e4 45 23 e1 a2 b2 6e a7 d1 a5 ff 00 e2 7f fd 55 da 31 f9 42 20 01 46 00 00 60 01 e8 07 6a 99 12 49 e6 08 88 59 98 e0 01 c9 26 bb bf 06 78 3a 3b 6d 97 ba a2 07 97 82 90 9e 42 fb b7 a9 f6 aa c3 e1 65 37 68 7c d8 eb 62 23 4e 37 97 c9 19 3e 09 f0 7c b7 cc b7 ba 90 31 db 67 2a 9d 19 c7 f4 1e f5 e8 96 d0 c5 6f 6e b0 41 18 8e 34 18 55 51 80 05 Data Ascii: I?T7R%9M4^pI7WP=dwGt{R<=O][pez%"_.7cvw'O:)IsTxA6j:E#nU1B F`jIY&x:;mBe7h\|b#N7>\|1g*onA4UQ
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: ea d0 da 5a da 34 f7 12 90 12 20 38 1f ed 37 a0 1d 79 af 52 f1 87 88 3c 1b fb 3f f8 4f ed fa a3 c5 aa 78 ae ee 23 f6 5b 34 7f 9b 27 8c 8e e9 18 ee c4 65 ba 0a cd f8 c5 f1 3b c2 5f 02 34 39 7c 37 e1 61 0e ab e2 eb 88 f1 34 8f 86 5b 6c 8e 1a 5c 74 c7 51 18 3f ef 7b fc 6b e2 bf 11 6a fe 22 f1 15 c6 b9 ae 5f 4b 7d 7d 73 26 f9 65 9d b7 96 3e 87 3c 63 b6 3a 01 4a 14 e5 51 dd 9d d4 30 aa 51 52 9e 91 fc ff 00 c9 7e 66 a7 c5 2f 1d f8 8b c7 fe 28 9b 5d f1 15 f3 5c 5c 49 f2 c7 1a f1 1c 09 9c 84 45 e8 aa 3d 3f fd 75 97 a2 e8 d3 5f c6 6f 2e 24 fb 2e 9f 13 01 35 d3 0c fe 08 a7 97 6f 61 fa 56 94 1a 72 c9 0f f6 df 89 bf 76 97 09 9b 5b 48 42 c7 25 c7 03 0d b4 0f 96 33 eb 8e 70 6a 3d 67 53 bc d5 cc 5e 7b 05 8a d2 21 1d bd bc 63 11 c2 80 01 c0 ec 4f 52 7b 9a bf 69 a7 2c 34 Data Ascii: Z4 87yR<?Ox#[4'e;_49\|7a4[l\tQ?{kj"_K}}s&e><c:JQ0QR~f/(]\\IE=?u_o.$.5oaVrv[HB%3pj=gS^{!cOR{i,4
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: 36 cf 07 a7 a7 a5 4c a7 f0 f7 f4 aa 91 9c e3 07 23 b1 ff 00 3f 9d 4f 09 05 b3 d0 8f 5a 66 0f 52 cc 47 19 c7 23 d7 fc ff 00 9c d4 a9 f7 73 fc aa bc 78 ef c7 a6 2a 55 24 f6 e7 d4 50 32 55 3f 37 07 fc ff 00 9f ce 9f 8f 98 10 a7 39 f4 ff 00 0a 62 73 c1 39 1e e2 a4 51 8c 64 60 7a 8f f0 a6 1a 0a 06 3a 75 fa d4 8a 0e ec 01 d0 77 14 8b cf 24 fe 62 9c a0 13 ce d1 f8 e2 81 0b 82 1b 8e bf 8d 29 e1 b0 31 fe 7f cf ff 00 aa 91 7e 9f ad 39 47 f9 cd 30 15 88 2b 9c 67 f5 a4 c6 3a ed a7 02 7b ff 00 3a 51 cf 43 c7 d6 8b dc 62 05 ff 00 22 9f 8c 64 51 8c 75 ef 41 18 e3 83 f4 a0 43 58 67 92 73 ef 4e 07 fc fa d0 57 1f 8f bd 2a 8e e2 81 f4 0c 74 cf e6 29 76 9e d8 a1 41 23 34 f1 f7 b8 ff 00 1a 00 45 5c 71 d2 a4 51 f9 e3 f0 a3 80 b8 eb 42 fb d0 02 a8 3b b3 e9 e9 4f 40 36 f3 d6 85 Data Ascii: 6L#?OZfRG#sxU$P2U?79bs9Qd`z:uw$b)1~9G0+g:{:QCb"dQuACXgsNWt)vA#4E\qQB;O@6
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: c6 6b 77 c2 be 27 d3 f5 5d 25 3c 37 e2 e2 d2 5a 0e 2c ef c7 32 d9 37 6c 9e ac 9f a8 f7 ac cf 17 78 7a ff 00 c3 5a 82 c1 71 b6 5b 79 46 eb 6b a8 f9 8e 75 3c 82 08 e3 a7 6a bf 35 b1 9e ee cf 72 78 65 dd 82 3f 1c d4 f1 b6 57 eb 58 f6 b3 fc c2 b5 2d 64 57 5c 77 ef fe 35 51 13 45 85 c7 43 d7 d6 9c cb 9c 8c 7c bf c8 d2 20 25 70 07 bd 3d 13 b7 ad 50 88 99 70 df 77 1e b4 d6 52 57 81 d3 bd 58 29 dc 7a 74 a6 b2 f3 9e f8 ed 4a c4 95 98 7c d9 15 1b 21 e7 1f 4a b0 c2 98 ca 36 9f f3 9a 40 55 64 3b 73 51 38 ed de ac c8 b5 13 27 7f ca a4 64 05 40 a8 a4 03 6f ff 00 5e ac 30 3f 8d 31 be e9 1d 49 ed 52 c6 54 94 15 e3 8a ab 20 1b 8f 3c 55 a9 86 78 3f a5 52 9b 8c e3 a5 22 8a b7 2c 17 73 7f 0f 39 fa 0a c4 bf 91 a4 63 9e 9d 85 5e d4 25 de c5 07 dd f6 ef 55 6c 2d 65 bf bc 10 45 Data Ascii: kw']%<7Z,27lxzZq[yFku<j5rxe?WX-dW\w5QEC\| %p=PpwRWX)ztJ\|!J6@Ud;sQ8'd@o^0?1IRT <Ux?R",s9c^%Ul-eE
2024-12-09 10:08:27 UTC	16069	IN	Data Raw: 61 9e d5 8c b4 d0 fa ec 3d 68 57 a6 a7 01 0f b5 3a d6 59 61 b8 8e 68 64 68 e4 89 c3 c6 e8 70 ca c0 e4 10 7b 10 46 69 bb 4f 4a 4d a4 73 48 d5 68 77 ba d1 87 c4 de 1f 1e 29 b2 8a 38 ef 21 61 0e b5 04 40 00 25 3f 76 75 51 d1 64 03 9f 47 07 d4 0a e6 59 7d 7b d1 e1 0d 6e e3 c3 fa d2 df 45 18 9e 29 10 c1 77 6c c7 e5 b9 81 b1 be 33 e9 9c 64 1e a0 80 7b 57 5d e2 1f 0c c3 b6 1b fd 16 43 75 a6 df c5 e7 d9 4d d0 b2 e7 05 58 76 75 3f 2b 0e c4 7a 10 4f 35 65 cb ef 74 3e cb 24 cc 23 5e 9f b0 a8 fd e5 b7 9a ff 00 80 72 5a 7d d5 de 97 a9 c1 a8 69 f3 c9 6f 75 6b 2a cb 04 d1 9d af 1b a9 c8 60 47 70 6a 7f 89 76 09 a8 46 3c 6f a5 69 c9 6b 63 a8 5c 79 57 f0 c0 a4 45 69 78 57 71 55 07 ee a3 80 5d 47 6f 98 0f bb 56 2e f4 8b 95 8c bf 96 40 50 73 9e d8 a7 f8 47 52 b7 d3 ee 2e 34 Data Ascii: a=hW:Yahdhp{FiOJMsHhw)8!a@%?vuQdGY}{nE)wl3d{W]CuMXvu?+zO5et>$#^rZ}iouk*`GpjvF<oikc\yWEixWqU]GoV.@PsGR.4
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: f4 a7 37 24 54 6e c4 d0 3b 88 e4 0e 29 9b a9 18 e5 a9 8c 71 d6 a4 62 b3 1d b8 ef 4d 63 8e 69 b9 cf 5e d4 dd dd bd e8 b8 d0 a6 9a 4e 3a f5 a5 dd 9a 63 36 3d aa 0a 42 e7 d3 a5 34 9c 2d 21 39 a6 e7 b5 21 83 1a 8f 39 fc 69 cd fe 4d 37 a2 d5 0f a0 99 3d 0d 27 55 c9 e9 41 34 dd dd 73 40 5c 19 bb 75 a8 f2 79 53 da 9d 9c f4 a6 4d 96 c3 2f de 14 0c 42 71 d3 a7 bd 35 8e 79 34 a3 9e 45 35 ce 38 ef f5 a0 06 e4 f6 a4 e9 c9 a0 a9 3e d4 9b 7d e8 17 41 1b 9a 43 eb fa d3 80 ef b7 83 d2 82 33 ed c7 f9 ff 00 3f 4a 04 30 2e 58 60 d3 b1 eb f4 22 9c 30 bc 77 fe b4 d6 3c e7 a5 3b 09 08 07 42 3a 75 ff 00 3f e7 bd 23 1f ff 00 5f f9 fc 2a 6b 58 67 b9 93 c8 82 32 ee 72 42 a8 cb 1c 72 78 1e d9 fc aa 16 5c 70 78 1d 29 0c 37 65 78 e9 8a 6b 1e fd 3f cf ff 00 ae 97 8e bd 3f cf ff 00 ae Data Ascii: 7$Tn;)qbMci^N:c6=B4-!9!9iM7='UA4s@\uySM/Bq5y4E58>}AC3?J0.X`"0w<;B:u?#_*kXg2rBrx\px)7exk??
2024-12-09 10:08:27 UTC	16384	IN	Data Raw: f9 6c 56 0b 17 83 fe 3c 3d df e6 5a af f3 5f 33 cc 7c ca 92 39 70 b8 35 bd e2 ef 06 6a da 26 5e e2 d8 88 89 c0 b8 84 f9 91 37 fc 08 72 bf 43 8a e6 e6 86 48 57 2d d3 b1 15 47 3a 94 64 8b 42 50 78 fb a7 de 86 39 5c 1a a6 24 cd 3d 66 2b c0 fc a9 a9 11 2a 49 ea 89 88 f7 a4 63 f9 f7 a6 ac 8a dd 3b f6 a3 3f 36 45 5a 66 2e 2d 3d 41 8e 3a 53 58 f1 41 e7 8e d4 7b 7a 55 22 46 9f 53 46 3d fd e9 c1 68 db eb c7 ad 20 1a 46 78 1c 53 70 47 bd 49 8e c4 52 63 18 34 0c 6e de 9e d4 87 86 e6 9c 47 cd c5 35 8f 6f 7a 04 37 24 2d 34 8f 4c e2 9c df 7b 3d a9 b8 cf 06 81 a0 ff 00 e2 a9 08 3c 60 f0 3f 95 3b f9 52 37 0b e8 33 c7 ad 01 62 fe 97 ad 6a 56 16 73 da 59 df 4d 0c 17 6a 16 e2 34 62 16 50 39 01 87 e9 eb 8a cd 99 b7 39 2a 29 bb ff 00 bb d3 a5 35 f7 1c 64 fe 55 42 b5 80 e0 37 Data Ascii: lV<=Z_3\|9p5j&^7rCHW-G:dBPx9\$=f+Ic;?6EZf.-=A:SXA{zU"FSF=h FxSpGIRc4nG5oz7$-4L{=<`?;R73bjVsYMj4bP99)5dUB7

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:27 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:28 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: c0354b8f-f01e-0071-139a-49431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100828Z-r1cf579d778l2x6lhC1EWRsptc000000013g0000000005zy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:28 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:27 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:28 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:28 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: ccb20ac6-d01e-0049-6f7e-49e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100828Z-r1cf579d778gg9hlhC1EWRh7nw00000000k0000000000x0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-09 10:08:28 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:27 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:28 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 63a77e6f-f01e-0052-2825-499224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100828Z-r1cf579d778pftsbhC1EWRa0gn00000002mg0000000027ds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:28 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:27 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 75167780-601e-000d-444b-492618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100828Z-r1cf579d778mpnwnhC1EWRfgng00000001rg000000004nf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:28 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:28 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: a36b2733-e01e-0051-6f03-4884b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100828Z-r1cf579d778qlpkrhC1EWRpfc800000008t0000000001hcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:28 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49739	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:29 UTC	375	OUT	GET /th?id=OADD2.10239398628025_15DMLIN1UWYBCWWBK&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-09 10:08:30 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 432873 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B34348E0E86A45F889CCFD99E01BD2E4 Ref B: EWR30EDGE0219 Ref C: 2024-12-09T10:08:29Z Date: Mon, 09 Dec 2024 10:08:29 GMT Connection: close
2024-12-09 10:08:30 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 f6 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 3b 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 ae 87 69 00 04 00 00 00 01 00 00 00 c2 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 32 30 32 34 30 36 32 33 2e 6d 2e 32 36 37 35 20 31 36 64 66 39 39 36 29 20 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 38 3a 30 32 20 31 31 3a 30 34 3a 33 38 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 Data Ascii: JFIFHHExifMM*bj(1;r2i``Adobe Photoshop 25.11 (20240623.m.2675 16df996) (Windows)2024:08:02 11:04:38
2024-12-09 10:08:30 UTC	16384	IN	Data Raw: 21 b8 34 60 d3 a8 a0 04 c5 26 31 4e c1 a3 06 80 1b b7 da 8c 76 a7 63 34 50 03 76 fb 52 62 9f 8e f4 50 03 31 46 29 f8 c5 26 28 01 84 51 b7 da 9f 8a 4a 00 6e df 6a 4c 53 e8 6e 94 01 19 5c d2 62 a4 6a 4a 02 c3 31 48 cb e9 52 37 4a 46 14 01 1e 29 08 f5 a9 30 29 08 a0 56 23 c5 26 0d 49 81 48 45 01 61 94 d2 31 52 52 62 81 0c c6 68 c0 a7 11 8a 08 cd 00 33 14 94 ec 1a 36 fb 50 03 48 a6 b7 5a 90 8c d3 68 01 b4 1e 69 d8 c5 26 28 01 b8 a4 a7 51 8e f4 ee 03 70 29 31 4e 22 93 06 8b 80 98 a3 06 97 19 a4 c5 17 01 28 a5 c5 21 18 a2 e0 1f 5a 3a 50 dd 68 a2 e0 21 1d e8 22 96 8a 2e 02 60 d2 1f 6a 75 18 ed 45 c0 6e 05 14 e6 e9 49 8a 77 10 98 cd 18 14 ea 4c 52 b8 0d e9 46 29 48 a3 18 a2 e1 61 31 48 46 29 d4 51 70 b0 dc 1a 30 69 d4 74 a2 e2 1b 8c 51 8e d4 ec 0a 4c 51 71 8d c5 Data Ascii: !4`&1Nvc4PvRbP1F)&(QJnjLSn\bjJ1HR7JF)0)V#&IHEa1RRbh36PHZhi&(Qp)1N"(!Z:Ph!".`juEnIwLRF)Ha1HF)Qp0itQLQq
2024-12-09 10:08:30 UTC	16384	IN	Data Raw: 47 30 72 89 45 3a 8a 7c c1 ca 35 ba 51 45 14 73 07 28 52 35 2f bd 19 f4 a5 cc 16 11 a9 28 a3 9a 39 85 ca 14 7b 51 45 1c c1 ca 14 51 43 74 a3 98 39 44 f7 a5 a2 8e 94 f9 87 ca 14 52 75 a1 a9 73 0b 94 08 cd 26 4d 14 53 e6 0e 50 a2 8a 3e b4 b9 83 94 29 09 ed 49 46 4d 3e 61 72 86 69 78 34 99 34 52 e6 0e 52 4a 29 80 e3 a5 2e ef 7a f3 b9 cf 47 90 93 22 8c d3 73 9a 01 ef 47 30 72 0f cf ad 29 38 a6 66 97 e9 47 38 72 0e e2 95 69 94 a0 d1 ce 1c 82 d3 81 a6 fd 68 07 34 73 87 20 ec 8a 0f ad 37 3d a8 a7 cc 3e 51 d9 a3 22 9b 45 1c e1 ca 38 d1 93 49 9f 5a 16 8e 60 e5 14 71 47 d6 93 f8 a8 fc 69 73 87 28 a3 8a 5e 29 29 33 47 38 72 8f f6 a4 cd 32 97 34 73 87 28 ec f6 34 7d 69 33 9a 3e 94 73 07 28 ad c5 2d 34 1a 33 8a 39 c3 94 75 1c 8a 4c d2 64 d1 ce 1c a3 ba f4 a5 cd 26 45 Data Ascii: G0rE:\|5QEs(R5/(9{QEQCt9DRus&MSP>)IFM>arix44RRJ).zG"sG0r)8fG8rih4s 7=>Q"E8IZ`qGis(^))3G8r24s(4}i3>s(-439uLd&E
2024-12-09 10:08:30 UTC	16384	IN	Data Raw: aa 45 03 bb 30 38 20 05 24 90 7b 53 e8 16 e8 61 fc 52 f1 9e 89 e0 af 0e cc da ac e3 ed d7 76 f2 2d 8d 98 07 7d c3 63 1c 10 08 50 0b 03 93 81 f5 e9 5f 1a 5c da 42 90 ac 71 a1 0d 92 58 8e 9d 6b 56 f7 53 d5 75 9b 9b 71 a9 ea 97 97 e2 d5 0c 76 e2 e6 66 95 a1 42 d9 0a 09 24 e0 93 9e b5 53 c4 92 2a 3f 95 1a 7f 16 33 eb 8a fb 0c bf 00 b0 ea ed dd b3 c9 c4 d7 e6 d3 a2 24 d3 61 8e d7 42 92 fd e3 2f 24 cc 22 84 1e 01 3d cf e1 54 66 91 91 fc 98 b0 ac 06 5d 87 52 4f 5a d8 f2 c7 92 b9 24 25 9c 3b 55 48 38 dd d4 b7 d7 3c 56 5d 8d b1 79 01 7e 0b 1e fd 6b d5 8c 4e 49 3e c5 ad 26 dc 0c 4d 39 6c 37 dd 5c 76 f7 a9 dc 47 e7 93 1a 95 ff 00 64 03 d2 9f 22 48 67 58 50 81 b3 27 f4 a6 15 60 cd 96 24 f1 8e d4 f9 45 76 0e d1 15 c8 42 4f 70 41 02 9f 12 c0 db 41 00 0e dc 9c 54 2d 2a Data Ascii: E08 ${SaRv-}cP_\BqXkVSuqvfB$S?3$aB/$"=Tf]ROZ$%;UH8<V]y~kNI>&M9l7\vGd"HgXP'`$EvBOpAAT-
2024-12-09 10:08:30 UTC	16384	IN	Data Raw: 9c c6 3d 05 26 c0 3a ad 57 6b f8 43 60 bf d2 a3 6d 4e 01 d4 e6 ad 4a 24 f2 b7 d0 b8 55 47 6a 4c 01 d9 6a 8b 6a b0 75 09 9f c4 53 0e b1 08 e0 46 6a d4 a3 dc 4e 12 ec 5f da 0f 6a 46 51 d8 0f ce a8 7f 6b c1 c0 f2 cd 21 d5 e3 0b c4 63 f3 ad 14 a2 66 e1 2e c5 e6 03 76 00 14 60 9f 4a a6 ba a4 47 82 06 4f a1 a9 12 f5 59 7a 75 ab f6 91 21 c6 45 80 a7 f0 a7 6c 3b 6a 14 ba 0c b9 18 cd 36 4b b7 5e 36 29 fa d3 e7 44 3a 6e c4 8c b8 fa 53 48 1d 3a 9a 86 4b d5 1d 13 3f ca a1 fb 70 3f f2 cc 9f a1 15 a2 91 9f 23 2d e4 0e c7 f3 a4 2e 47 1f cc d5 71 76 a5 7e e6 29 8f 72 a1 b0 63 62 3d 6b 48 c9 19 ca 0c b6 1c f5 19 a5 12 38 ef c5 52 fb 50 0d 8d 8d 9f 70 6a 03 7e e3 38 00 1a d3 43 37 16 6b 07 7e d4 a6 47 1c 7f 2a c7 5b f7 ea 4a e3 e8 69 c3 51 8f 8d ef 1f d7 38 a7 a0 72 b3 59 Data Ascii: =&:WkC`mNJ$UGjLjjuSFjN_jFQk!cf.v`JGOYzu!El;j6K^6)D:nSH:K?p?#-.Gqv~)rcb=kH8RPpj~8C7k~G*[JiQ8rY
2024-12-09 10:08:30 UTC	16384	IN	Data Raw: 25 9d b1 29 8e 8c 08 1c 75 62 a0 e0 7e 74 d8 6d 36 79 b2 4a 3c c2 b8 0c dd 40 c8 e3 eb 57 12 d1 b6 82 ae ea 18 60 a8 24 03 f5 c6 2a 46 b7 1b 04 7e 69 60 b8 f9 40 c6 7f c6 86 c6 a2 cc 8d 45 18 23 2c 5e 5c 81 c7 1c 1e 3f 95 45 a7 c7 1d ae 65 78 cb ca c9 c9 ce 02 9c e4 63 e9 5b 4b 00 0c 31 16 f6 18 24 15 dc 09 1e c6 9a 22 3b ff 00 d5 81 c9 3b 70 09 19 ed 53 76 3e 5d 4c f4 12 5d cc af 30 d8 b8 c6 42 e7 3f 40 4d 4c fe 5a 6d 45 04 15 eb cf 24 fa f1 d3 f0 a9 98 dc 17 c2 02 00 38 fb a3 8a 5b 7b 3b 89 66 ce cd c3 e9 d4 d2 bb 2b 95 11 33 be cf 94 29 f6 14 e9 a2 0f 6e 65 e7 6e e0 a4 0c 02 1b 19 e9 de a6 be b4 b8 58 f2 c1 46 3a 0e ff 00 a5 35 60 28 a6 53 10 32 76 38 e6 90 d9 5e 6b 68 f6 9f 90 48 7f 87 72 f3 f5 ea 68 78 e0 68 43 af ee 59 3e 5f 29 63 32 6f e3 ef 6e ed Data Ascii: %)ub~tm6yJ<@W`$*F~i`@E#,^\?Eexc[K1$";;pSv>]L]0B?@MLZmE$8[{;f+3)nenXF:5`(S2v8^khHrhxhCY>_)c2on
2024-12-09 10:08:30 UTC	16384	IN	Data Raw: 0e 3b 8e 48 c1 f7 1c 55 db 60 0b 79 62 35 65 50 0b 91 c0 50 06 79 cf 53 f4 ad 39 ac 61 ca e4 55 b3 b5 98 ae 76 33 63 9e 98 fa 75 ae a7 43 90 8b 70 87 01 94 00 79 1c 1f c2 a8 5a a2 ad bb ba 45 85 60 3f d6 48 0f 07 db 24 f3 e9 57 f4 30 97 12 b8 16 db 54 1d a7 a8 53 ee 33 da b8 eb 3b a3 b3 0f ee 32 a6 bb 04 df 6c dd 12 a9 dd 93 b4 b0 04 fd 39 c5 11 d8 5e dc c7 e5 9b 5c 7c a4 95 62 bc 2f ae 73 de ad f8 82 ce ce ca 40 ef 29 91 09 18 40 37 7e 06 a3 b3 b8 d2 de dd 7e 42 af cb 1d cb b4 67 d0 63 fa d1 17 ee a0 9f c6 d1 8d 79 a6 5d 24 ca 0c 00 48 c0 14 5f 30 6e c1 38 c8 00 e6 ab 49 63 7c ab e6 3d b4 85 71 92 71 c0 15 b5 7a 61 79 9e 78 ac e4 91 46 00 75 23 20 f7 19 3d aa 3b c2 f7 2d 18 82 33 2e ec 0c b0 2b b7 d7 f0 cf e0 6b 68 c9 9c d2 56 b9 8f 6f 3c 90 72 23 38 1c Data Ascii: ;HU`yb5ePPyS9aUv3cuCpyZE`?H$W0TS3;2l9^\\|b/s@)@7~~Bgcy]$H_0n8Ic\|=qqzayxFu# =;-3.+khVo<r#8
2024-12-09 10:08:30 UTC	16067	IN	Data Raw: bf 68 f2 1f 4e 64 89 40 6d 86 3d c3 8e f9 19 3f 99 a7 c9 ab db 2a 13 1c 79 72 3a 80 07 41 f8 e6 aa cf 7d 35 ec c5 3c c3 6e 81 3e 54 dd 9e 83 f8 88 1c e7 f4 a3 99 76 1f b3 6c b9 a7 6a 56 b2 a4 6c 96 c0 38 6c 97 6c 9e bd c0 c6 6a 86 ad 7d 1f 92 0d ac 97 11 2c 84 ee 62 43 2b 1f f6 46 78 aa 89 e5 bf fa db 98 a2 09 92 ab 09 cf 3d 02 f3 d0 1f a7 34 cb 8b 26 48 c4 c0 86 00 90 be 74 a4 81 c6 78 1e fe a0 75 a9 72 6c 6a 29 13 c7 77 33 2a b3 19 64 65 1f 26 ec 7e 95 62 3b a1 e6 19 2e c2 b4 64 1c 2e e0 a7 77 62 4f a0 35 9b 69 25 f5 e2 cf e5 5b 82 b6 80 19 64 27 6c 6a 09 c0 e4 03 92 4f e3 4d b8 d5 6d ac d8 79 91 fd a9 97 96 55 1b 53 e9 9c 92 7e bc 54 b8 b3 45 38 9d 4f 9d 15 cf c9 1e 97 6c f3 85 c7 ee a5 c0 38 1d 47 50 7f 0a cb b1 10 c9 31 4b fb 6b bb 6d ac 4b cb 6f fb Data Ascii: hNd@m=?yr:A}5<n>TvljVl8llj},bC+Fx=4&Htxurlj)w3de&~b;.d.wbO5i%[d'ljOMmyUS~TE8Ol8GP1KkmKo
2024-12-09 10:08:30 UTC	16384	IN	Data Raw: 6a fb 24 97 e5 66 27 05 87 5e 7d 6a 95 3d 6e 45 4a b7 5c a8 db d3 75 59 60 b6 60 d2 b1 20 ee f9 81 38 3f e0 69 ed e2 27 0b e6 49 f2 82 b9 1b 46 dc 8e c4 76 e2 b1 f4 c4 9e 6d 96 e1 77 4a df 29 19 03 27 e9 d2 ba 4b 4f 0c b5 d5 9a 5a 5c af 91 22 44 f2 c5 23 80 55 b6 8e 17 1f 5f 4e 7a 56 aa c9 1c b2 8c 9b 2f b4 5a 8d da c5 77 6c 82 48 dd 72 9b 1b 07 71 e8 7f 2f 4a d2 d2 ad 2f f5 24 b9 9a 63 14 be 5c 63 f7 81 8e e5 ce d3 f3 0f 61 93 56 7c 34 ed a6 e9 2b 63 1f 96 47 0f 13 2f 54 24 03 c7 7e bd bd 6b 43 c3 77 32 09 8c b1 ed 8e 69 d3 69 00 0e 59 47 5c e3 1c f2 2b 19 5c e9 8c 52 48 e6 bf e1 1d d6 24 b9 b8 30 e9 f2 2a a6 51 59 40 c3 e7 80 72 79 19 3c f3 5c ee af a4 78 82 d5 24 96 e7 cd 64 db 9c e3 80 00 cf 39 ef fe 35 f4 0d 9d e1 b5 b6 8e 29 d1 59 cc 61 99 b0 39 20 Data Ascii: j$f'^}j=nEJ\uY`` 8?i'IFvmwJ)'KOZ\"D#U_NzV/ZwlHrq/J/$c\caV\|4+cG/T$~kCw2iiYG\+\RH$0*QY@ry<\x$d95)Ya9
2024-12-09 10:08:30 UTC	16384	IN	Data Raw: 3d 4f 5b 82 e6 0b 6b 16 12 c8 d1 4b b1 ce 39 24 73 9e 7d ba d6 27 8b fc 4f e2 1d 5f c4 92 cb 69 6f e5 db 9e 22 82 68 c3 00 09 eb 83 d3 f1 e6 a2 9c a5 3b f3 31 2e 55 67 18 ea 76 73 df e8 6d 0a 46 b0 5f 5e 49 37 02 3e 8a 17 a8 27 24 80 07 a6 2a 1b cd 6a de 19 23 81 ed a1 83 71 20 22 c6 24 75 04 63 83 8e 3e bd 2b 9c b1 be d6 1d 16 37 d2 9b a1 66 74 62 01 61 d7 a6 07 e1 d2 b2 bc 5d ad 4d 63 a6 89 5e 30 93 97 c9 eb 9c 63 92 41 e9 cd 6f 08 26 ec 82 b4 b9 63 76 75 d7 7a b6 99 a7 41 33 c9 6e 98 c8 09 22 42 11 b8 3c 8d c3 19 eb 58 b3 6b be 1f bd b1 46 28 ef 29 72 08 79 0e 07 70 46 0d 79 4e ab e2 1b cb e9 94 5d dc 32 ab 3e dc b3 1e 14 73 90 a0 70 0f f9 15 6a d9 cc 72 1b 9b 58 59 ed 5b 6b 86 60 41 07 a6 dd b8 ce 32 07 ff 00 5a ba 55 18 a3 85 e2 66 f6 d8 ee 2f ee e4 Data Ascii: =O[kK9$s}'O_io"h;1.UgvsmF_^I7>'$*j#q "$uc>+7ftba]Mc^0cAo&cvuzA3n"B<XkF()rypFyN]2>spjrXY[k`A2ZUf/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49745	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-09 10:08:30 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=142808 Date: Mon, 09 Dec 2024 10:08:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:30 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:30 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 09beb194-c01e-008e-544f-497381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100830Z-r1cf579d778469knhC1EWR2gqc00000000r0000000005zvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:30 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:30 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: c8d44b57-401e-0067-6578-4909c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100830Z-r1cf579d7789jf56hC1EWRu588000000036g00000000293e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:30 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:30 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: b81bee07-c01e-0046-209b-492db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100830Z-r1cf579d778pftsbhC1EWRa0gn00000002gg000000004ms3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:30 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:30 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 27a1a40f-f01e-0096-7d0b-4810ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100830Z-r1cf579d778qgtz2hC1EWRmgks00000008000000000000h3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49746	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:30 UTC	346	OUT	GET /th?id=OADD2.10239398628026_1EWIUP9AYMDP71JJ5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-09 10:08:30 UTC	856	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 404149 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: A1041019F127407E8C8018DA55D42DB6 Ref B: EWR311000105037 Ref C: 2024-12-09T10:08:30Z Date: Mon, 09 Dec 2024 10:08:30 GMT Connection: close
2024-12-09 10:08:30 UTC	15528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 f6 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 3b 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 ae 87 69 00 04 00 00 00 01 00 00 00 c2 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 32 30 32 34 30 36 32 33 2e 6d 2e 32 36 37 35 20 31 36 64 66 39 39 36 29 20 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 38 3a 30 32 20 31 31 3a 30 35 3a 33 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 Data Ascii: JFIFHHExifMM*bj(1;r2i``Adobe Photoshop 25.11 (20240623.m.2675 16df996) (Windows)2024:08:02 11:05:328
2024-12-09 10:08:30 UTC	16384	IN	Data Raw: 18 89 8a 5c 66 81 ed 4a 07 6a 07 61 07 bd 28 04 d0 a3 bd 2e 33 d2 80 b0 01 8a 17 ad 03 9a 70 14 05 84 c5 2f b5 18 34 ec 0a 2e 31 b4 ec 0a 29 71 4a e0 22 f1 4e c0 a3 e9 45 20 00 b4 60 d2 e2 94 0c 50 01 81 46 05 14 50 01 46 0d 2f 14 a0 77 a0 04 03 d2 97 da 8c 0a 28 00 03 14 74 e6 85 eb 45 00 14 51 4b 83 40 09 45 2e 28 c5 00 25 14 b8 ef 46 28 01 28 a7 60 51 81 40 09 83 46 0d 2d 14 05 86 e0 d1 83 4e c0 a0 8f 5a 07 61 a0 51 4e 03 34 7b 50 1c a3 70 68 c1 a7 0f 4a 28 17 28 dc 1a 08 cd 3b 02 8c 77 a0 a1 b4 60 53 b1 49 8e d4 05 84 23 34 98 a7 62 90 8c 50 02 60 d2 63 f2 a7 63 34 6d cf 34 00 d2 33 46 33 c5 38 8a 30 28 02 3c 1a 5c 53 b1 41 14 00 d2 31 48 46 69 df 5a 30 28 01 b8 f4 a3 02 9d 8c 75 a2 80 1b 81 49 d3 eb 4b 45 00 23 51 83 4a dd 29 b4 00 7f 2a 28 a2 81 d8 Data Ascii: \fJja(.3p/4.1)qJ"NE `PFPF/w(tEQK@E.(%F((`Q@F-NZaQN4{PphJ((;w`SI#4bP`cc4m43F380(<\SA1HFiZ0(uIKE#QJ)*(
2024-12-09 10:08:30 UTC	16384	IN	Data Raw: 2d bc 45 21 8d b7 11 6c bb ff 00 87 19 73 8f af 7a f9 d2 2c 15 fc 6b ea 4f d8 aa 04 4f 03 eb 33 0c 6e 7b e8 94 fa 80 23 24 7f 3a e4 c5 3d 17 a8 49 7e ee 5f d7 54 7b 0b 53 2a 47 5f 5a 63 57 2f 31 c7 61 98 34 60 53 88 ed 4d a5 cc 3b 08 78 e9 49 4a 40 ef 49 81 45 ca b0 51 f4 a2 8a 9e 60 b0 64 51 45 14 5c 7c a1 42 8c f4 a2 8a 39 87 61 71 4b 46 3d 68 03 b5 1c c1 61 7a 72 29 47 bd 20 14 ab 9a 57 18 b8 a5 a4 02 94 0a 57 0b 05 18 34 a0 52 81 9e 68 e6 1d 81 7a 51 ef 4a b4 b4 b9 82 c2 0c d1 d6 95 7a 52 67 34 73 05 85 a2 8a 5c 13 4b 98 7c a2 2f 5a 5c 7a 51 8a 5c 1a 39 82 c1 45 2e df 6a 5d b5 3c c5 72 8d a3 34 ed a2 9c 00 db 47 30 72 8d a3 22 9d 81 4b 8a 5c c3 e5 18 01 a5 55 34 fc 0a 31 da 97 30 58 6e dc d0 ab 4e c1 a2 97 30 f9 44 c5 2e 05 18 34 b8 f7 a5 cc 16 13 02 Data Ascii: -E!lsz,kOO3n{#$:=I~_T{S*G_ZcW/1a4`SM;xIJ@IEQ`dQE\\|B9aqKF=hazr)G WW4RhzQJzRg4s\K\|/Z\zQ\9E.j]<r4G0r"K\U410XnN0D.4
2024-12-09 10:08:31 UTC	16384	IN	Data Raw: 93 ee 55 4d 45 4a 10 e2 6f 94 75 c0 fe 54 2d e4 5b 37 a1 93 1d d7 18 3c 7b 8a b2 e8 c8 ac bf 66 56 5e 3e 6d 80 91 55 d8 c2 17 12 c7 8c 9c 0e 3f c2 81 d9 f7 26 b6 bd b6 9b 85 94 96 e4 90 e3 18 fc e9 f2 4a 86 50 a4 fc d8 f9 58 73 55 da da 17 60 44 7c 75 0d ce 29 c6 c9 55 83 02 79 38 04 7e 94 0b 52 77 99 82 2b 03 85 07 9e 31 93 f8 d4 91 cf 1b b1 27 23 27 9a a4 6d 81 51 fb e9 08 ce 76 92 7f c9 a4 b7 86 36 6c ef 65 2c 48 e7 9e 6a 58 cd 18 ee 61 dc 54 90 17 24 ff 00 8d 49 0c 91 17 dc 0e 41 5e 33 d6 b2 66 b4 65 5c 7c a4 0e fb 48 eb 4a 1e f2 18 36 2c 91 91 9e 01 5f f2 69 58 7c cc d7 99 93 05 d6 71 93 d4 0e 29 ad 3e d6 19 19 52 3e 5e 73 cf b5 65 c0 d7 2f ff 00 2c e3 ea 3b 54 91 a4 cd 37 2e 06 dc 90 bd 78 3f 5e d4 9a 1a 91 a8 b3 c6 78 6e bf d2 86 09 c7 af f3 aa b3 Data Ascii: UMEJouT-[7<{fV^>mU?&JPXsU`D\|u)Uy8~Rw+1'#'mQv6le,HjXaT$IA^3fe\\|HJ6,_iX\|q)>R>^se/,;T7.x?^xn
2024-12-09 10:08:31 UTC	16384	IN	Data Raw: 98 ba 3e cd f2 b0 a9 15 6b 1b 56 73 b3 4b 90 78 ab 92 dd 6c 4e 1a b0 ed 64 28 c4 83 4e 9e e4 9e 2b cc 95 1b c8 e6 74 93 66 dc 77 99 8f 71 a8 d6 eb 2c 4b 9e 0d 63 c1 74 4c 24 1e 31 53 46 e1 a3 c9 35 1f 57 48 9f 65 67 b1 35 c4 ea d2 b2 67 e5 ae 4b c5 2d 3e 95 78 ba 85 99 2a 72 37 6d e3 f1 ad 6b eb c5 5b ac 74 fe b5 0e a4 a9 79 66 f1 b0 ce e1 5e 86 15 7b 29 26 d6 8f 73 a2 9c 79 5a b9 6b c3 3e 2f 4b d8 42 5d 61 d8 75 23 86 1f 87 7a d8 99 61 bc 8c c9 6d 20 63 dc 0e a3 ea 2b c5 f5 2f b4 69 7a 89 11 b9 52 a4 e0 fb 57 41 e1 bf 13 89 99 62 9d fc a9 47 46 07 19 af 63 13 90 f2 45 62 28 eb 17 d8 99 e1 e3 7f 75 d8 ed 27 85 d1 b0 c3 18 aa ee ac 29 8b ad 4a 51 45 c2 47 2a e4 02 e3 86 c7 af a5 5d b9 8f 6a ee 5c 15 61 95 61 c8 22 bd 2c 04 28 55 8d 92 d5 1c 35 23 38 3d 4a Data Ascii: >kVsKxlNd(N+tfwq,KctL$1SF5WHeg5gK->xr7mk[tyf^{)&syZk>/KB]au#zam c+/izRWAbGFcEb(u')JQEG]j\aa",(U5#8=J
2024-12-09 10:08:31 UTC	16384	IN	Data Raw: b3 2e c8 d9 97 3c 67 b1 a6 19 c8 48 ff 00 76 0f 63 83 d2 ae ea 3a 55 da 33 4b 64 ff 00 31 1c ab 77 06 a9 9b 6b d1 b3 cd 8b 83 c7 4f 4a b5 63 37 cc 98 e5 76 2a cf e5 fd 0e 79 a8 51 9b 78 06 3e a7 d7 ad 3b ca be 65 60 23 c0 1f 9d 45 04 b2 25 e2 23 85 56 cf 19 a4 26 5b d5 65 c2 04 30 60 8c 00 7d 69 4c b9 85 54 c0 46 3f 5a 5d 4a 69 4a a9 79 23 e3 21 71 51 2d c3 18 d7 21 46 0e 39 cf 26 91 5d 4d 0b 30 c7 ac 11 82 07 56 60 38 ff 00 1a 46 80 3d cc 8d b0 02 63 1d f3 92 29 b6 ed 95 50 5a 2e 3d 06 4f e5 4e 0f 22 dc 16 32 46 54 01 c6 de 30 7f cf 4a 46 8b 61 90 c2 1a 66 56 88 1c af 18 3d 6b 2b 58 8f ca 70 04 64 00 fe be b5 ab f6 87 13 92 be 52 f0 7a 80 47 ff 00 ae b2 fc 55 3b ec 8f 88 9c 93 9d c3 83 4d 6e 44 ad ca 4b 62 0b ed 3e 5f 50 79 35 6a 38 03 b6 04 40 fa 9a cb Data Ascii: .<gHvc:U3Kd1wkOJc7v*yQx>;e`#E%#V&[e0`}iLTF?Z]JiJy#!qQ-!F9&]M0V`8F=c)PZ.=ON"2FT0JFafV=k+XpdRzGU;MnDKb>_Py5j8@
2024-12-09 10:08:31 UTC	16384	IN	Data Raw: bb 49 e4 05 fd 73 57 1a e7 50 7b 56 88 ed 3b 4e 49 db 90 3d cf a6 6b 37 a9 ac 52 89 56 4b 67 2e 41 2c bf 8f 18 fa 51 15 b4 8d d6 4d cc 3a 1a 6c 6f 78 54 3b 48 1b 39 f9 53 24 8c 77 39 e9 44 37 53 14 dc 51 4a 93 d4 1c 75 aa b1 3c c9 84 d0 4a 38 cc 84 76 19 ff 00 eb d3 45 99 59 37 ae e5 63 d4 f3 8f d2 ac f9 ac 50 31 1f 30 e3 9e 69 92 5c 5c 77 8c ae 0f de 3c 0a 07 a1 5d e2 91 97 0f 90 dd 01 04 fa fa d4 66 d1 e3 c9 05 ca 9e c7 9f a9 1e 95 7e 4b 99 42 a0 06 35 24 f0 76 82 32 7d 2a 77 67 10 8c 9e 4b 64 ed c6 4f a6 3d 2a 43 43 28 c4 c1 80 3b 94 fd 49 fd 69 c9 6e cc e2 46 0e c3 bf cd cd 5f 0e 24 62 ef 9d d9 c1 0d df fa fe 74 e6 74 3c 28 e4 76 23 ff 00 d5 40 d3 33 1e ca 49 64 2c a4 a8 18 38 26 a6 8e d0 af ce 4c 98 f6 26 ad db c0 62 84 ec 63 b5 8e 4e e2 47 e5 52 46 Data Ascii: IsWP{V;NI=k7RVKg.A,QM:loxT;H9S$w9D7SQJu<J8vEY7cP10i\\w<]f~KB5$v2}wgKdO=CC(;IinF_$btt<(v#@3Id,8&L&bcNGRF
2024-12-09 10:08:31 UTC	16069	IN	Data Raw: a8 dd d9 91 47 79 0a c8 04 33 4b e6 e0 2e d2 4a b1 c7 d3 06 b5 23 be d4 0e c2 b7 2c aa a7 23 7c 87 0a 3a 1e 7a 8f ad 52 b9 78 a3 44 9a 17 f3 64 04 64 85 da 49 fc 4d 4a d2 5d dc 2a 46 d2 a6 d6 03 18 8c 29 53 d8 12 3a d4 dc e8 51 49 13 5d 5c 4b 75 99 6d 9f ca 99 b3 e6 5c 46 c5 95 c8 f6 e4 66 a2 cd fc 51 c6 6d b5 78 a4 79 01 76 41 19 59 17 b7 cd 91 fa d2 ca 97 56 3b a5 87 0e c0 67 08 06 09 3e a0 f1 f9 54 31 6a 37 82 06 63 6c 77 48 bc ba 64 48 0f 39 e3 a6 2a a3 23 29 46 d6 b2 2e 58 de 78 89 2d a5 82 3c 48 08 f9 de 41 bc 00 4f bf 2a 0f b1 14 6a 09 e2 55 5f 3e fa d2 d2 65 d9 b9 1c 40 00 0b f5 1d 71 ef 54 6c 26 ba 97 cd 9c 5e 4c a0 0d b2 e6 22 1c 1f 70 72 08 3f 95 1a 5d f7 db ee bf b2 ad af 1a 32 ad b4 f9 90 e1 7d db 81 91 9f 63 83 54 43 64 9a 7d c5 ed ed d3 44 Data Ascii: Gy3K.J#,#\|:zRxDddIMJ]F)S:QI]\Kum\FfQmxyvAYV;g>T1j7clwHdH9#)F.Xx-<HAO*jU_>e@qTl&^L"pr?]2}cTCd}D
2024-12-09 10:08:31 UTC	16384	IN	Data Raw: d5 ee a4 fa e3 fa 51 0d 8e 9b b0 45 71 cb 17 04 90 38 38 eb ff 00 eb a5 7e a3 71 29 69 3f 0e 25 9e c6 1b a7 9f 12 32 86 20 72 30 7a 55 5d 4b c0 f7 76 32 79 b3 0c 42 c4 ed 61 cb 1c 74 e3 de bb cb cf 10 bd a2 46 b0 3a f9 4a a0 02 46 30 a0 74 3f 4a a9 aa 6a 11 6a 56 a2 79 0f ce dd 81 c7 1f e1 59 47 9e f7 7b 15 25 04 8e 42 c7 c2 96 89 22 c8 9f bd 66 c3 3a e7 18 c1 ed ec 6b b4 b7 b9 d3 46 9a b6 52 5a 46 cd d4 70 09 c8 15 99 14 fa 5b d8 b2 ac be 5d dc 43 6a 6d c2 86 1d 39 f7 03 ad 54 ba 4b cf b3 66 19 04 85 81 19 c0 c9 3e d5 72 8a 6f 51 2d 16 85 a0 96 ad 62 2d 0b 87 8c e7 27 18 03 3d 78 1e d5 b1 a6 b5 80 8e 32 87 e5 b7 84 44 08 c0 c8 c7 71 de bc fa ea e2 e2 d6 62 8e 9b d0 f4 c3 63 e6 07 9c 83 57 74 df 12 5b 41 71 f2 61 94 91 bb 00 f1 da 9b a6 82 33 d4 eb ad 34 Data Ascii: QEq88~q)i?%2 r0zU]Kv2yBatF:JF0t?JjjVyYG{%B"f:kFRZFp[]Cjm9TKf>roQ-b-'=x2DqbcWt[Aqa34
2024-12-09 10:08:31 UTC	16384	IN	Data Raw: 42 82 d6 ed e4 b5 90 62 30 87 2c bd 0f 4e 0e 3d bd 0f 5a 27 5d db 63 a2 8e 1e 0f 76 79 fe 93 e1 67 2c a2 77 8d 15 33 85 51 93 cf a9 e9 5b 16 7e 12 d3 ca ae fb 28 70 aa 47 20 92 4f a8 3c 01 f8 e6 bb 8d 37 c3 5a 64 0a 85 2e 23 40 eb b9 97 76 71 9e fc d5 98 ed 74 f5 dd 17 da 04 84 13 9d cc 31 e9 d3 23 23 f0 ac fd a4 a4 ce d5 46 92 5b 1c b5 9f 87 74 59 3e 69 4f ca 06 48 79 7e 5e 3f 4c 8a d3 87 4e d1 3e cd 1c d6 d0 c2 ff 00 c2 82 38 8b 93 9f a5 6f fd 9e d2 3b 56 f2 92 36 68 d3 23 1b 4a e3 db 9f e9 5c 8a f8 d6 de db 5a 30 67 cb 8f 76 c7 70 07 ca c3 b2 e3 ad 54 61 26 44 ea 42 0f b1 ad e5 58 6e 36 d1 e9 d3 3b 30 f9 89 5d aa 3d 06 3f a7 34 ff 00 ec 1b ab bb 72 f6 9a 78 da 99 c9 79 0f 18 f4 50 39 fc 6a de 93 e2 5d 36 e6 c1 ae 8c c3 2a df 37 f1 36 3f d9 f7 e2 a1 bb Data Ascii: Bb0,N=Z']cvyg,w3Q[~(pG O<7Zd.#@vqt1##F[tY>iOHy~^?LN>8o;V6h#J\Z0gvpTa&DBXn6;0]=?4rxyP9j]6*76?

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:30 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:30 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: de887255-201e-0085-4749-4934e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100830Z-r1cf579d778t76vqhC1EWRdx4w000000020g0000000030v4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:31 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49754	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-09 10:08:32 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=41924 Date: Mon, 09 Dec 2024 10:08:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-09 10:08:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49755	52.6.155.20	443	7172	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:32 UTC	1473	OUT	GET /psdk/v2/content?surfaceId=ACROBAT_READER_MASTER_SURFACEID&surfaceId=DC_READER_LAUNCH_CARD&surfaceId=DC_Reader_RHP_Banner&surfaceId=DC_Reader_RHP_Retention&surfaceId=Edit_InApp_Aug2020&surfaceId=DC_FirstMile_Right_Sec_Surface&surfaceId=DC_Reader_Upsell_Cards&surfaceId=DC_FirstMile_Home_View_Surface&surfaceId=DC_Reader_RHP_Intent_Banner&surfaceId=DC_Reader_Disc_LHP_Banner&surfaceId=DC_Reader_Edit_LHP_Banner&surfaceId=DC_Reader_Convert_LHP_Banner&surfaceId=DC_Reader_Sign_LHP_Banner&surfaceId=DC_Reader_More_LHP_Banner&surfaceId=DC_Reader_Disc_LHP_Retention&surfaceId=DC_Reader_Home_LHP_Trial_Banner&adcProductLanguage=en-us&adcVersion=23.6.20320&adcProductType=SingleClientMini&adcOSType=WIN&adcCountryCode=US&adcXAPIClientID=api_reader_desktop_win_23.6.20320&encodingScheme=BASE_64 HTTP/1.1 Host: p13n.adobe.io Connection: keep-alive sec-ch-ua: "Chromium";v="105" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 x-adobe-uuid: 0b65fa77-f9dd-4c6e-a1b5-fa4d63973307 x-adobe-uuid-type: visitorId x-api-key: AdobeReader9 sec-ch-ua-platform: "Windows" Origin: https://rna-resource.acrobat.com Accept-Language: en-US,en;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://rna-resource.acrobat.com/ Accept-Encoding: gzip, deflate, br
2024-12-09 10:08:32 UTC	617	IN	HTTP/1.1 429 Too Many Requests Server: openresty Date: Mon, 09 Dec 2024 10:08:32 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Headers: Authorization, Content-Type, X-Api-Key, cache-control, User-Agent, If-None-Match, x-adobe-uuid, x-adobe-uuid-type, X-Request-Id Access-Control-Expose-Headers: x-request-id Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-Request-Id: 6sCsmlgMk0yOKNajsAfQiisgYW5hrjqq Retry-After: 1 Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-12-09 10:08:32 UTC	65	IN	Data Raw: 33 36 0d 0a 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 22 34 32 39 30 35 30 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 6f 6f 20 6d 61 6e 79 20 72 65 71 75 65 73 74 73 22 7d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 36{"error_code":"429050","message":"Too many requests"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:32 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 682fb484-401e-0083-5904-48075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100832Z-r1cf579d778w59f9hC1EWRze6w000000089g00000000326p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:32 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: e3724c3d-001e-0066-1678-49561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100832Z-r1cf579d7782v2q5hC1EWRt9bw00000002tg000000002dk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:32 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 3861519e-b01e-001e-7e3f-490214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100832Z-r1cf579d778mpnwnhC1EWRfgng00000001u0000000002uru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:32 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 3fcfbabf-e01e-0052-0903-48d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100832Z-r1cf579d778xr2r4hC1EWRqvfs000000083g000000002cws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:32 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: c753bf19-701e-0050-46aa-496767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100833Z-r1cf579d778qlpkrhC1EWRpfc800000008p0000000004mxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:34 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:34 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: cde31c1e-b01e-003e-33c8-498e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100834Z-r1cf579d778469knhC1EWR2gqc00000000sg000000003p0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:34 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:34 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 1f14184f-601e-0050-3802-482c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100834Z-r1cf579d778x776bhC1EWRdk800000000810000000003hp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:34 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: fff301c7-601e-0097-4606-48f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100834Z-r1cf579d778lntp7hC1EWR9gg400000007gg000000002esn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:34 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:34 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: b89b3fcb-001e-0065-4ece-490b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100834Z-r1cf579d778gg9hlhC1EWRh7nw00000000gg000000000t5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-09 10:08:35 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:34 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 229463e4-b01e-0021-2a03-48cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100835Z-r1cf579d778x776bhC1EWRdk800000000810000000003hpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49763	23.47.168.24	443	7172	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:35 UTC	475	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br If-None-Match: "78-5faa31cce96da" If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
2024-12-09 10:08:36 UTC	198	IN	HTTP/1.1 304 Not Modified Content-Type: text/plain; charset=UTF-8 Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Date: Mon, 09 Dec 2024 10:08:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49764	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:36 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sgUMWH4tFbHrZa7&MD=v2EvNTK5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-09 10:08:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 0efc03e9-7436-4ecc-b955-f5632ba5039e MS-RequestId: 9e29db3e-e51a-4b22-9d91-28d8b9f4bedf MS-CV: CW8UDEUcwUmu0jv1.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 09 Dec 2024 10:08:35 GMT Connection: close Content-Length: 24490
2024-12-09 10:08:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-09 10:08:36 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:36 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 7ebc7efb-d01e-00ad-787a-49e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100836Z-r1cf579d7782w22mhC1EWR2ebg00000002yg000000003r19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:36 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c060231a-801e-00ac-2403-48fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100836Z-r1cf579d7786c2tshC1EWRr1gc00000007q00000000030g9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:36 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: ebc14d87-b01e-0070-664c-491cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100836Z-r1cf579d7782w22mhC1EWR2ebg000000031g00000000187c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:36 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:37 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 987987f9-101e-0034-0e02-4896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100837Z-r1cf579d778z4wflhC1EWRa3h0000000081g0000000041yv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:37 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:37 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8ac5c401-401e-002a-771e-49c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100837Z-r1cf579d7782v2q5hC1EWRt9bw00000002qg000000004y8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:37 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:38 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:39 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 90a12f2a-001e-0079-1603-4812e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100839Z-r1cf579d778lntp7hC1EWR9gg400000007gg000000002ev0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:39 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:38 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:39 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 09188c3a-a01e-0021-2702-48814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100839Z-r1cf579d778qlpkrhC1EWRpfc800000008n00000000063x1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:39 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:38 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:39 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 90f2e2a0-001e-0014-5807-485151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100839Z-r1cf579d778d5zkmhC1EWRk6h800000008d0000000005gae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:39 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:38 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: fe216484-501e-008f-70b4-499054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100839Z-r1cf579d778469knhC1EWR2gqc00000000vg000000001fxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:39 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:39 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 48f2d82f-b01e-0084-1302-48d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100839Z-r1cf579d778z4wflhC1EWRa3h00000000860000000000rqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:39 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:40 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:41 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: d2d76441-101e-0065-2c82-494088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100841Z-r1cf579d778pftsbhC1EWRa0gn00000002kg000000002vtm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:41 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:40 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a32a4087-901e-0083-2b4e-49bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100841Z-r1cf579d778mpnwnhC1EWRfgng00000001qg000000005nr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:40 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4c33d105-301e-003f-6b44-49266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100841Z-r1cf579d7788c742hC1EWRr97n0000000270000000003eyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:41 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:41 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 759a56cd-c01e-0046-631d-492db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100841Z-r1cf579d778469knhC1EWR2gqc00000000wg000000000mhm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:41 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:41 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:41 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 2f0750f4-201e-0000-61a2-49a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100841Z-r1cf579d7782v2q5hC1EWRt9bw00000002t0000000002v52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:41 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:43 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:43 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d196cbda-901e-008f-5e03-4867a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100843Z-r1cf579d778qlpkrhC1EWRpfc800000008q00000000041td x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:43 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:43 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:43 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 00885abd-f01e-001f-4d2e-495dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100843Z-r1cf579d778gg9hlhC1EWRh7nw00000000pg000000000yzs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-09 10:08:43 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:43 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:43 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3aef8849-d01e-0028-2f9e-497896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100843Z-r1cf579d778pftsbhC1EWRa0gn00000002ng000000001s84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:43 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:43 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:43 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 45d7ff1d-301e-0033-4715-4afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100843Z-r1cf579d778mpnwnhC1EWRfgng00000001vg0000000017vs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:43 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:43 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:43 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 30883f21-801e-00a0-1802-482196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100843Z-r1cf579d7788pwqzhC1EWRrpd8000000089g000000003prw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:45 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:45 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: babd51c3-501e-008f-1378-499054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100845Z-r1cf579d7789jf56hC1EWRu588000000039g0000000007z2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:45 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:45 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:45 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: f8799778-401e-0064-72cc-4954af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100845Z-r1cf579d7782v2q5hC1EWRt9bw00000002tg000000002dwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:45 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:45 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:45 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: d23b658c-101e-000b-2402-485e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100845Z-r1cf579d778t5c2lhC1EWRce3w00000008v00000000006pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:45 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:45 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:45 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 7ea70f1c-301e-005d-1d26-49e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100845Z-r1cf579d7782v2q5hC1EWRt9bw00000002w0000000000psr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:45 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:45 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:46 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 35b89458-f01e-0099-4644-499171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100846Z-r1cf579d778pftsbhC1EWRa0gn00000002gg000000004n0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:46 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49791	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:47 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 62 7a 65 57 30 4c 2b 75 69 55 43 4f 76 2f 65 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 63 39 36 34 64 61 66 63 30 38 63 64 64 37 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: bzeW0L+uiUCOv/e6.1Context: 9c964dafc08cdd79
2024-12-09 10:08:47 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-09 10:08:47 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 62 7a 65 57 30 4c 2b 75 69 55 43 4f 76 2f 65 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 63 39 36 34 64 61 66 63 30 38 63 64 64 37 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 62 70 36 30 4b 78 64 36 33 79 54 50 32 59 4d 31 72 6a 38 6e 75 5a 4d 42 4e 77 45 7a 6e 34 4a 74 41 75 79 46 35 4e 70 46 63 50 79 61 34 34 6d 4b 50 47 62 37 56 6f 37 2b 30 58 5a 6b 37 33 47 6f 69 70 77 74 4c 78 59 49 61 5a 45 46 42 69 2f 55 67 6e 4f 4e 61 4e 30 6f 4f 56 67 4b 66 54 77 63 4a 66 4f 78 6b 48 42 67 7a 63 46 6e Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: bzeW0L+uiUCOv/e6.2Context: 9c964dafc08cdd79<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdbp60Kxd63yTP2YM1rj8nuZMBNwEzn4JtAuyF5NpFcPya44mKPGb7Vo7+0XZk73GoipwtLxYIaZEFBi/UgnONaN0oOVgKfTwcJfOxkHBgzcFn
2024-12-09 10:08:47 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 62 7a 65 57 30 4c 2b 75 69 55 43 4f 76 2f 65 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 63 39 36 34 64 61 66 63 30 38 63 64 64 37 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: bzeW0L+uiUCOv/e6.3Context: 9c964dafc08cdd79<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-09 10:08:47 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-09 10:08:47 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 49 76 36 35 43 38 74 56 6c 6b 75 68 62 42 5a 6c 64 69 51 30 44 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Iv65C8tVlkuhbBZldiQ0DQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:47 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:47 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 15edef34-f01e-0020-0f44-49956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100847Z-r1cf579d778w59f9hC1EWRze6w00000008b0000000001y14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:48 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:47 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:47 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 45682ef5-801e-0048-7703-48f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100847Z-r1cf579d778qlpkrhC1EWRpfc800000008mg000000005dct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:48 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:47 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:47 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 32c7c32d-b01e-003e-2b01-488e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100847Z-r1cf579d7788pwqzhC1EWRrpd800000008b0000000002336 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:48 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 359bf904-f01e-0099-5038-499171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100848Z-r1cf579d778469knhC1EWR2gqc00000000s000000000492a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:48 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:48 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: eb0f4028-701e-0021-6d9b-493d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100848Z-r1cf579d778mpnwnhC1EWRfgng00000001qg000000005nz5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:48 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:50 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 6578e9b9-801e-00a3-294a-497cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100850Z-r1cf579d778x776bhC1EWRdk8000000008300000000029u6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:50 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 704c87bc-501e-00a0-2501-489d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100850Z-r1cf579d7786c2tshC1EWRr1gc00000007p0000000003k84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:50 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 58ef7581-801e-0083-478a-49f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100850Z-r1cf579d7782v2q5hC1EWRt9bw00000002ug000000001k0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49807	172.217.21.37	443	7520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:50 UTC	667	OUT	GET /mail/u/0/ HTTP/1.1 Host: mail.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 10:08:50 UTC	778	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Location: https://accounts.google.com/ServiceLogin?service=mail&passive=1209600&osid=1&continue=https://mail.google.com/mail/u/0/&followup=https://mail.google.com/mail/u/0/&emr=1 Strict-Transport-Security: max-age=10886400; includeSubDomains Cross-Origin-Resource-Policy: same-site Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Date: Mon, 09 Dec 2024 10:08:50 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:50 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 9fa7fdc2-501e-007b-4648-495ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100850Z-r1cf579d778469knhC1EWR2gqc00000000wg000000000mrq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:50 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1f654f05-501e-008f-5009-489054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100850Z-r1cf579d778xr2r4hC1EWRqvfs00000008500000000018d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49809	20.223.36.55	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:50 UTC	2591	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000045&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241209T100844Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=dfd28f0742934775bc2d68966689dad6&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=620870&metered=false&nettype=ethernet&npid=sc-88000045&oemName=mqbyoj%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=mqbyoj20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=620870&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1& [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: v6qMyCyME0OMMjwl.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-12-09 10:08:50 UTC	955	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2945 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116216-T1-C128000000001627409+B+P10+S1"},{"OPTOUTSTATE":"65792"},{"REGIONALPOLICY":"1"}] X-ARC-SIG: e5Y8VA2nvBhC/ke1PdR/I78ZRgkpCp1w5D50avmThRDSSs//qhyTvRBXHdmKZ891lUAb49dm5xEeftVtbGucG4ZhweCyobSKOx/WAnmTd7KFOcZabV6xXVGaphortZ30S5TexE1x5h2GNT9tH3feI68ai3pZRL8Yyf51WbfZuGAhUOAz91UJJ0cFzoZCSl99043SiiwFarreVS7JF439Jb71PtN7Ly+exLtyE0IFaedDr9EeMwfgX4rrp0pYMA97D/xQkTibQU/Wehi1R4Ijks3joTvAf3XJofb7pRpda3MDQaWiHw8xJXMJdIUqm5UL2mh6oF73UqMJSMp8+ql1ng== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 09 Dec 2024 10:08:49 GMT Connection: close
2024-12-09 10:08:50 UTC	2945	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49811	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:50 UTC	831	OUT	GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8XIUgC05jctREhm1Rv4IYmjVUCUzyVeps-p1BXHUW_21yfHdHWxsfdEuuihLY_XJ2POlvqBNyv1eCJKzkhkX7V2KFxpEH-jX0EQQQvY_1IeDfUOZyU7MzAcNge3yM-YKAdV4opnTrzUgNtjRdoW9cAIHfth34uxJIcEjSzYT9VdRDk2OC%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmZWRnZSUyZndpbmRvd3MtZWRnZSUzZmZvY3VzJTNkY29udmVuaW5jZSUyNnNvdXJjZSUzZGlwJTI2ZXMlM2QwJTI2Zm9ybSUzZE01MDBFNyUyNk9DSUQlM2RNNTAwRTc%26rlid%3D28211863fcaa17278e567f353d39cc96&TIME=20241209T100846Z&CID=531538185&EID=531538185&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: g.bing.com Connection: Keep-Alive
2024-12-09 10:08:50 UTC	862	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=21883249D17D6262249E2719D01F6378; domain=.bing.com; expires=Sat, 03-Jan-2026 10:08:50 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=g.bing.com; expires=Mon, 16-Dec-2024 10:08:50 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 99715FBDFAD6450EA43374BB2343AFC8 Ref B: EWR30EDGE1011 Ref C: 2024-12-09T10:08:50Z Date: Mon, 09 Dec 2024 10:08:50 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:52 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:52 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: d83c6496-b01e-0002-0cbe-491b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100852Z-r1cf579d778t76vqhC1EWRdx4w00000001yg000000004q2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:52 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:52 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:52 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8a1a8cfd-901e-007b-2cfd-49ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100852Z-r1cf579d778l2x6lhC1EWRsptc000000013g0000000006fr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:52 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:52 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:52 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 8a885dcd-801e-0078-280b-48bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100852Z-r1cf579d778t5c2lhC1EWRce3w00000008n0000000005tgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:52 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:52 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 337dc70d-a01e-0053-5e05-488603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100852Z-r1cf579d778lntp7hC1EWR9gg400000007e0000000004fdg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:52 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:52 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a00703cc-001e-0017-37c7-490c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100852Z-r1cf579d778mpnwnhC1EWRfgng00000001x0000000000anh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:52 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49820	2.16.158.187	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:52 UTC	444	OUT	GET /aes/c.gif?RG=bd1d38db940b49e2a15b90c37678526d&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20241209T100846Z&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: www.bing.com Connection: Keep-Alive Cookie: MUID=21883249D17D6262249E2719D01F6378
2024-12-09 10:08:53 UTC	778	IN	HTTP/1.1 200 OK Cache-Control: private,no-store Pragma: no-cache Vary: Origin P3P: CP=BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C3EEB0E14BF7427B8E3643B07390363A Ref B: DXB251051109040 Ref C: 2024-12-09T10:08:53Z Content-Length: 0 Date: Mon, 09 Dec 2024 10:08:53 GMT Connection: close Set-Cookie: _EDGE_S=SID=228EAE2958FD69642702BB7959F468CE; path=/; httponly; domain=bing.com Set-Cookie: MUIDB=21883249D17D6262249E2719D01F6378; path=/; httponly; expires=Sat, 03-Jan-2026 10:08:53 GMT Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.b59e1002.1733738933.8faa7ab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49819	20.223.36.55	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:52 UTC	2614	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000045&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241209T100849Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=f032904655b84821ae6ade874e5fb1d0&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=620870&metered=false&nettype=ethernet&npid=sc-88000045&oemName=mqbyoj%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=mqbyoj20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=620870&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1& [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: v6qMyCyME0OMMjwl.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-12-09 10:08:53 UTC	955	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2972 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116216-T1-C128000000001627409+B+P10+S1"},{"OPTOUTSTATE":"65792"},{"REGIONALPOLICY":"1"}] X-ARC-SIG: JL/UKjA9HMeGD/HjeLb7Z0krKoTqX8Zd7RjmQ07YCjbB4vqrmDWJPoEL9SseZqn62viKQ5g3QV10nni9f3bmDD5fnw260oBl1Cq6J1GjEM09EgDGVNfF/8xllLgw3QokrIZfsgmGA6oQo73j8owAxucSAMByQI+JhdYG5Wyj/t+sIXwLLLPYnIlGXSHJXBq7pvE+TMBDtg3UqvTvVEKSYOUwTQz11ZacTsaPoZJTSrPw/RCq5r4Cq6YQ5jB3Hd9YUdeFulAOYMb7Z7S4sztjfMm1ZuhkNF5xUKNiigasusaWNQ9/3StajHDAZGEiT90/5lrKxqOr666bHRO+UX89+Q== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 09 Dec 2024 10:08:52 GMT Connection: close
2024-12-09 10:08:53 UTC	2972	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:54 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:54 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 7e558585-401e-0047-1037-498597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100854Z-r1cf579d778mpnwnhC1EWRfgng00000001r0000000004xu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:54 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:54 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:54 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: c2c382dc-f01e-0000-7f76-49193e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100854Z-r1cf579d778469knhC1EWR2gqc00000000tg000000002yq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:54 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:54 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:54 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 32118861-501e-0035-506d-49c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100854Z-r1cf579d7782v2q5hC1EWRt9bw00000002qg000000004ynd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:54 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:54 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:54 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1f17df4b-601e-0050-2d03-482c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100854Z-r1cf579d778lntp7hC1EWR9gg400000007k000000000199u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:54 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:54 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:54 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 59976b24-901e-002a-729a-497a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100854Z-r1cf579d778l2x6lhC1EWRsptc000000012g000000000wn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:54 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49829	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:55 UTC	921	OUT	GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8XIUgC05jctREhm1Rv4IYmjVUCUzyVeps-p1BXHUW_21yfHdHWxsfdEuuihLY_XJ2POlvqBNyv1eCJKzkhkX7V2KFxpEH-jX0EQQQvY_1IeDfUOZyU7MzAcNge3yM-YKAdV4opnTrzUgNtjRdoW9cAIHfth34uxJIcEjSzYT9VdRDk2OC%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmZWRnZSUyZndpbmRvd3MtZWRnZSUzZmZvY3VzJTNkY29udmVuaW5jZSUyNnNvdXJjZSUzZGlwJTI2ZXMlM2QwJTI2Zm9ybSUzZE01MDBFNyUyNk9DSUQlM2RNNTAwRTc%26rlid%3D28211863fcaa17278e567f353d39cc96&TIME=20241209T100847Z&CID=531538185&EID=&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: g.bing.com Connection: Keep-Alive Cookie: MUID=21883249D17D6262249E2719D01F6378; _EDGE_S=SID=228EAE2958FD69642702BB7959F468CE; MR=0
2024-12-09 10:08:55 UTC	763	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MSPTC=VN916gUgkt2J6nI6r1DJSJcX12FV4SmO5pJNq0DjBcM; domain=.bing.com; expires=Sat, 03-Jan-2026 10:08:55 GMT; path=/; Partitioned; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 4F9B689F60C14BBEA5FEC79313E9F582 Ref B: EWR30EDGE0908 Ref C: 2024-12-09T10:08:55Z Date: Mon, 09 Dec 2024 10:08:54 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:56 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:56 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: c8b0921d-001e-00a2-54be-49d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100856Z-r1cf579d778t76vqhC1EWRdx4w0000000210000000002q59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:56 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:56 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: a374b664-e01e-0051-1f05-4884b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100856Z-r1cf579d778xr2r4hC1EWRqvfs000000081000000000405u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:56 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:56 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: f6e8c48a-401e-000a-8008-484a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100856Z-r1cf579d778qlpkrhC1EWRpfc800000008ug000000000eq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:56 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:56 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 8332a10a-c01e-0079-4304-48e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100856Z-r1cf579d778xr2r4hC1EWRqvfs0000000840000000001y7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:56 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 11351553-001e-002b-2f7e-4999f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100856Z-r1cf579d778l2x6lhC1EWRsptc0000000130000000000tqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:57 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:58 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: c868132e-401e-00ac-58ad-490a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100859Z-r1cf579d778pftsbhC1EWRa0gn00000002kg000000002w3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:59 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:58 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 32d5c911-c01e-0079-1289-49e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100858Z-r1cf579d7782v2q5hC1EWRt9bw00000002x0000000000020 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:58 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: a2a82b19-a01e-0002-2e1e-495074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100858Z-r1cf579d778t5c2lhC1EWRce3w00000008r000000000374v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:58 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:58 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d2f4848f-f01e-0099-6fbe-499171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100858Z-r1cf579d778t76vqhC1EWRdx4w000000024g000000000d7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:59 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:08:58 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:08:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:08:59 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 18148ef3-001e-002b-2504-4899f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100859Z-r1cf579d7786c2tshC1EWRr1gc00000007tg000000000ave x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:08:59 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:00 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:01 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 1517d071-401e-0047-3b9a-498597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100901Z-r1cf579d7782v2q5hC1EWRt9bw00000002w0000000000q2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:01 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:00 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:01 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 42d07f15-f01e-0099-5306-489171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100901Z-r1cf579d778lntp7hC1EWR9gg400000007k00000000019dn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:01 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:00 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:01 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f8b9edf2-d01e-002b-0fbc-4925fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100901Z-r1cf579d778j4j5fhC1EWR3ge800000001q00000000005p0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:01 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:00 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:01 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: a48fda53-401e-008c-0477-4986c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100901Z-r1cf579d7782v2q5hC1EWRt9bw00000002tg000000002e37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:01 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:01 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:01 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 8f2f8f72-401e-008c-26e0-4986c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100901Z-r1cf579d778j4j5fhC1EWR3ge800000001m00000000028ts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:01 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:03 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:03 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 8a7a9c83-801e-0078-4106-48bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100903Z-r1cf579d778xr2r4hC1EWRqvfs000000080g000000004dm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:03 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:03 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:03 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 01033cfd-d01e-0014-236d-49ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100903Z-r1cf579d778mpnwnhC1EWRfgng00000001w0000000001cx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:03 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:03 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:03 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 5de186aa-101e-007a-6c91-49047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100903Z-r1cf579d778j4j5fhC1EWR3ge800000001eg000000006ae0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:03 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:03 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:03 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a85144f8-201e-0033-7f03-48b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100903Z-r1cf579d7788pwqzhC1EWRrpd800000008e00000000002x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:03 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:03 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:03 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:03 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3fcff9c6-e01e-0052-0a03-48d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100903Z-r1cf579d7786c2tshC1EWRr1gc00000007kg000000005fse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:03 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:05 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:05 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 49b561ed-d01e-0065-2706-48b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100905Z-r1cf579d778bb9vvhC1EWRs95400000007n0000000003658 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:05 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:05 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:05 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: d116e189-201e-006e-1038-49bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100905Z-r1cf579d7782w22mhC1EWR2ebg0000000320000000000tbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:05 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:05 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:05 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 83126420-c01e-002b-5c77-496e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100905Z-r1cf579d778469knhC1EWR2gqc00000000tg000000002z2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-09 10:09:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:05 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 44286e75-701e-0032-5705-48a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100905Z-r1cf579d778mpnwnhC1EWRfgng00000001wg000000000q2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:05 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:05 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 8eb9891a-501e-005b-7103-48d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100905Z-r1cf579d778lntp7hC1EWR9gg400000007cg000000005aap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:05 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:07 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:07 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 51bfefb4-e01e-001f-6915-491633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100907Z-r1cf579d778l2x6lhC1EWRsptc0000000100000000002gc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:08 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:07 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:07 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: fda51452-001e-005a-6630-49c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100907Z-r1cf579d778469knhC1EWR2gqc00000000rg000000004vpa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:08 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:07 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:07 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d7b640fd-b01e-0002-3989-491b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100907Z-r1cf579d778mpnwnhC1EWRfgng00000001qg000000005pc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:08 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:07 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:07 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: e2bfbc9d-f01e-0085-0f03-4888ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100907Z-r1cf579d778t5c2lhC1EWRce3w00000008sg0000000024ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:08 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:07 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:08 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:07 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 46868609-f01e-005d-1c48-4913ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100907Z-r1cf579d7782v2q5hC1EWRt9bw00000002rg000000004d86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:08 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:09 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:09 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 22946db9-b01e-0021-4e03-48cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100909Z-r1cf579d7786c2tshC1EWRr1gc00000007sg0000000010cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:10 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:09 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:10 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:10 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9801554c-401e-0035-4820-4a82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100910Z-r1cf579d778gg9hlhC1EWRh7nw00000000sg0000000000fx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-09 10:09:10 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:09 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:10 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 8857bbdf-701e-0050-75cd-496767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100910Z-r1cf579d778t76vqhC1EWRdx4w0000000240000000000ru0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:10 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:09 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:10 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 8332b9fd-c01e-0079-1704-48e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100910Z-r1cf579d778xr2r4hC1EWRqvfs0000000840000000001ygc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:09 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:10 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:10 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fdf36bd3-a01e-0070-1e03-48573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100910Z-r1cf579d778qlpkrhC1EWRpfc800000008u0000000000vm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:10 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:11 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:12 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:12 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 812207fe-e01e-0099-5703-48da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100912Z-r1cf579d778x776bhC1EWRdk80000000085g000000000bdu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:12 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:12 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:12 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:12 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 595b4847-801e-0083-2ebe-49f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100912Z-r1cf579d7788c742hC1EWRr97n000000029g000000001f73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:12 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:12 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:12 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:12 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 62ef0171-501e-000a-5a03-480180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100912Z-r1cf579d7789trgthC1EWRkkfc00000008sg0000000023b5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:12 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:12 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:12 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:12 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cd880ea1-701e-0098-43c5-49395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100912Z-r1cf579d778pftsbhC1EWRa0gn00000002qg0000000007gq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:12 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49906	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:12 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:12 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:12 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d1a1fe13-d01e-00a1-653f-4935b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100912Z-r1cf579d7782w22mhC1EWR2ebg00000002x0000000005f8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:12 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49913	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:14 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:14 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 5dd53741-b01e-0053-4993-49cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100914Z-r1cf579d778t76vqhC1EWRdx4w00000001xg0000000068yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49914	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:14 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:14 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:14 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4c8a77f3-f01e-0020-1a90-49956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100914Z-r1cf579d778469knhC1EWR2gqc00000000s00000000049td x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:14 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49915	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:14 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:14 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:14 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 566fb8fd-901e-0029-1e48-49274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100914Z-r1cf579d778j4j5fhC1EWR3ge800000001ng000000001d60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:14 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49918	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:15 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=sgUMWH4tFbHrZa7&MD=v2EvNTK5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-09 10:09:16 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 4f37be11-4e84-45d1-9d0a-7584e8bcf90a MS-RequestId: fc3d91c7-f68c-4c0e-a45b-8e28710b5e37 MS-CV: BGCi247gQkOai9jK.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 09 Dec 2024 10:09:15 GMT Connection: close Content-Length: 30005
2024-12-09 10:09:16 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-09 10:09:16 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49917	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:15 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: e7081ec1-301e-0052-6c89-4965d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100916Z-r1cf579d7782v2q5hC1EWRt9bw00000002vg00000000100n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49916	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:16 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: d5396cac-001e-0049-0b7e-495bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100916Z-r1cf579d7782v2q5hC1EWRt9bw00000002t0000000002vx4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49924	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:16 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: b92cf4e4-a01e-001e-6530-4949ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100916Z-r1cf579d778qgtz2hC1EWRmgks00000007x0000000002bh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49926	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:16 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: e72a0d5d-201e-0003-017e-49f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100916Z-r1cf579d778j4j5fhC1EWR3ge800000001hg000000003v5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49927	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:16 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:16 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c22706de-601e-00ab-7503-4866f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100916Z-r1cf579d778xr2r4hC1EWRqvfs00000008700000000001nm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49925	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:16 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 73 63 32 76 4d 74 64 68 54 55 6d 78 37 58 62 61 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 63 66 30 30 62 63 63 66 66 62 34 36 38 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: sc2vMtdhTUmx7Xba.1Context: 1cf00bccffb4687
2024-12-09 10:09:16 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-09 10:09:16 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 73 63 32 76 4d 74 64 68 54 55 6d 78 37 58 62 61 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 63 66 30 30 62 63 63 66 66 62 34 36 38 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 62 70 36 30 4b 78 64 36 33 79 54 50 32 59 4d 31 72 6a 38 6e 75 5a 4d 42 4e 77 45 7a 6e 34 4a 74 41 75 79 46 35 4e 70 46 63 50 79 61 34 34 6d 4b 50 47 62 37 56 6f 37 2b 30 58 5a 6b 37 33 47 6f 69 70 77 74 4c 78 59 49 61 5a 45 46 42 69 2f 55 67 6e 4f 4e 61 4e 30 6f 4f 56 67 4b 66 54 77 63 4a 66 4f 78 6b 48 42 67 7a 63 46 6e 78 Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: sc2vMtdhTUmx7Xba.2Context: 1cf00bccffb4687<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdbp60Kxd63yTP2YM1rj8nuZMBNwEzn4JtAuyF5NpFcPya44mKPGb7Vo7+0XZk73GoipwtLxYIaZEFBi/UgnONaN0oOVgKfTwcJfOxkHBgzcFnx
2024-12-09 10:09:16 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 73 63 32 76 4d 74 64 68 54 55 6d 78 37 58 62 61 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 63 66 30 30 62 63 63 66 66 62 34 36 38 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: sc2vMtdhTUmx7Xba.3Context: 1cf00bccffb4687<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-09 10:09:17 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-09 10:09:17 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6e 38 64 49 4b 6d 30 4e 34 55 6d 38 38 30 4c 58 67 65 57 4f 39 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: n8dIKm0N4Um880LXgeWO9g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49929	142.250.181.68	443	7520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:17 UTC	1005	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 10:09:18 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 08 Dec 2024 18:53:31 GMT Expires: Mon, 16 Dec 2024 18:53:31 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 54947 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-09 10:09:18 UTC	684	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-12-09 10:09:18 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<
2024-12-09 10:09:18 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-12-09 10:09:18 UTC	1390	IN	Data Raw: 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-12-09 10:09:18 UTC	576	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49930	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:17 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:18 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9d874cb7-b01e-0021-2326-49cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100918Z-r1cf579d778t76vqhC1EWRdx4w0000000200000000003hw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49933	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:18 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:18 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 1f576be4-501e-008f-5405-489054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100918Z-r1cf579d778lntp7hC1EWR9gg400000007g00000000037z0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49934	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:18 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:18 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 3570551d-f01e-0099-4426-499171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100918Z-r1cf579d778mpnwnhC1EWRfgng00000001vg0000000018fr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49935	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:18 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 7b8d486f-101e-0017-1506-4847c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100918Z-r1cf579d778w59f9hC1EWRze6w0000000880000000004g53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49936	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:18 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 145bb02d-e01e-0003-3277-490fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100918Z-r1cf579d7788c742hC1EWRr97n00000002b0000000000fpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49938	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:20 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 10:09:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 10:09:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: e1587d4e-001e-0046-7554-49da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T100920Z-r1cf579d778l2x6lhC1EWRsptc00000000wg0000000054c1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 10:09:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49939	142.250.181.68	443	7520	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 10:09:20 UTC	628	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=UhTqSKoMEwIN-rxUTptvC6w6B_0F0mvcsieTjFglPJO0WPL_kMl5aLGQKcH6rnFHbYHhK10UESLEQYov6_shHHBvLtja_PnSQeEY9OJ5nMlNPF7fpkgSGM1rTFMhOzB64xFmaWDx6oHxw9S6edhAgGfm59slgetRp6jCipu1mc6MWEUQGmUp-bs7
2024-12-09 10:09:20 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 08 Dec 2024 18:53:31 GMT Expires: Mon, 16 Dec 2024 18:53:31 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 54949 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-09 10:09:20 UTC	684	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-12-09 10:09:20 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<
2024-12-09 10:09:20 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-12-09 10:09:20 UTC	1390	IN	Data Raw: 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-12-09 10:09:20 UTC	576	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Target ID:	0
Start time:	05:08:19
Start date:	09/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\0029 .pdf"
Imagebase:	0x7ff651090000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	05:08:21
Start date:	09/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff70df30000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	05:08:21
Start date:	09/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1520,i,17592372357962665421,1916247962855733663,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff70df30000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	05:08:44
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://mailto:urss.consolato@gmail.com"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	05:08:44
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	05:09:09
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4992 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	05:09:09
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4116 --field-trial-handle=1996,i,8203544417282254836,4338402038895068739,262144 /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 0029 .pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\499196d2-7a41-4f21-88c6-f8124d631879.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF3f584f.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\ea758914-00fc-48c6-81b6-9544325e7c70.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241209100825Z-194.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6532

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.6532

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

C:\Users\user\AppData\Local\Temp\MSIf277b.LOG

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-09 05-08-23-852.log

Windows Analysis Report
0029 .pdf