Edit tour

Windows Analysis Report
https://chat.zalo.me/

Overview

General Information

Sample URL:	https://chat.zalo.me/
Analysis ID:	1546254
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1868 --field-trial-handle=2004,i,1877857276422922661,5910162750148439755,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chat.zalo.me/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://zaloapp.com/qr/l?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1976,i,8142727034678412112,14103828550631631722,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://zalo-chat-static.zadn.vn/v1/lazy/default-embed-render.964d9cd9be2140add15d.js	HTTP Parser: "object"!=typeof globalthis&&(globalthis=window),(this.webpackjsonp=this.webpackjsonp\|\|[]).push([[0],{"+7kn":function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"d",(function(){return i})),n.d(t,"b",(function(){return o})),n.d(t,"g",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"f",(function(){return c})),n.d(t,"c",(function(){return u}));var r=n("n0be");class a extends error{constructor(e){super(`[migrateactionmanager] an action handler has already registered for ${e} action type!`),this.name=r.a}}class i extends error{constructor(e){super(`[migrateactionmanager] no action handler found for ${e} action type!`),this.name=r.d}}class o extends error{constructor(){super("[securekeystomigrate] invalid initialized data for securekeystomigrate"),this.name=r.b}}class s extends error{constructor(){super("[securekeystomigrate] securekeystomigrate hasn't been initialized yet!"),this.name=r.g}}class l extends error{constructor(){super("[securekeystomigrate] invalid secure indexeddb key...
Source: https://zalo-chat-static.zadn.vn/v1/lazy/default-embed-web-startup.2effbe41f8c7dec32403.js	HTTP Parser: "object"!=typeof globalthis&&(globalthis=window),(this.webpackjsonp=this.webpackjsonp\|\|[]).push([[1],{"+2ci":function(e,t,a){"use strict";a.d(t,"a",(function(){return p}));var s=a("mgpg"),n=a("yi2m");class i{constructor(e){this.config=e,this.submitted=!1,this.name="baseviewerlogservice"}submit(){this.submitted\|\|(this.submitted=!1,queuemicrotask((()=>n.default.logactioninfov2(this.config.type,this.config.subtype,this.log))))}}class o extends i{constructor(e){super(e),this.name="captioninteractionservice",this._captionlength=0,this._mouseentertime=0,this._totaltime=0,this._mouseentertime=e.starttime,this.submitted=!0}updatecaptionlength(e){this.submitted=!1,this._captionlength=e}onmouseenter(){this._mouseentertime=date.now()}onmouseleave(){this._totaltime+=date.now()-this._mouseentertime}dispose(){}get log(){return{subtype:this.config.subtype,review_caption_duration:this._totaltime,total_caption_length:this._captionlength}}}class r extends i{constructor(...e){super(...e),this.name="timeonappservice",this._endti...
Source: https://zalo-chat-static.zadn.vn/v1/lazy/web-startup.b612538677d498545a0d.js	HTTP Parser: "object"!=typeof globalthis&&(globalthis=window),(this.webpackjsonp=this.webpackjsonp\|\|[]).push([[21],{"+eus":function(e,t,s){"use strict";s.d(t,"a",(function(){return u}));var i=s("jdhv"),a=s("+exh"),n=s("yctr"),r=s("yeoc"),o=s("kfm4"),d=s("teaq"),l=s("phbv"),c=s("1uuk"),h=s("hw41");function u(e){object(o.a)("runmode",e),e!==r.f.unknown&&(i.modulecontainer.resolve(c.b).install(),e!==r.f.background&&(settimeout((()=>{const e=i.modulecontainer.resolve(l.b);e.install(a.b),e.start()}),1),i.modulecontainer.resolve(d.b).install(n.a,n.b)),e===r.f.host&&i.modulecontainer.resolve(h.a).install())}},"+iat":function(e,t,s){"use strict";var i=s("vtbj"),a=s("yeoc"),n=s("xi/l"),r=s("c9dv"),o=s("teaq");const d={partitionkey:new o.d({tablename:"partition_key",name:"partitionkey",fields:{database:{name:"database",type:a.h.string},table:{name:"table",type:a.h.string},key:{name:"key",type:a.h.string},value:{name:"value",type:a.h.string}},indices:{primary:{name:"primary",fields:[{type:"raw",field:"database"},{type:"raw",field:"t...

Source: https://id.zalo.me/account?continue=https%3A%2F%2Fchat.zalo.me%2F	HTTP Parser: No favicon
Source: https://id.zalo.me/account?continue=https%3A%2F%2Fchat.zalo.me%2F	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50096 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50098 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50097 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50166 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /libs/libsignal-protocol.static.js HTTP/1.1Host: chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /session-sdk/session-sdk.min.js HTTP/1.1Host: stc-sp.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/vendors-embed-render.17bee88d4759f5ada63e.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/4.460ebe81b7d583573298.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/default-embed-render.964d9cd9be2140add15d.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/render.9c0875841efb5667ea74.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1/vendors-embed-web-startup.f85daca1da58d70b76b1.css HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /jr/userinfo HTTP/1.1Host: jr.chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://chat.zalo.meSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/libsignal-protocol.static.js HTTP/1.1Host: chat.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /session-sdk/session-sdk.min.js HTTP/1.1Host: stc-sp.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/4.460ebe81b7d583573298.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/render.9c0875841efb5667ea74.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/vendors-embed-render.17bee88d4759f5ada63e.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v1/lazy/default-embed-render.964d9cd9be2140add15d.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon-96x96.v1.png HTTP/1.1Host: chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/za.js HTTP/1.1Host: za.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/default-embed-web-startup.c74076b5055445f98284.css HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/web-startup.8f6f137d5bc84bfef54f.css HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-96x96.v1.png HTTP/1.1Host: chat.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /jr/userinfo HTTP/1.1Host: jr.chat.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon-144x144.png HTTP/1.1Host: chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn
Source: global traffic	HTTP traffic detected: GET /v1/lazy/vendors-embed-web-startup.1b4f48155c308b510e2d.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/za.js HTTP/1.1Host: za.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon-144x144.png HTTP/1.1Host: chat.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn
Source: global traffic	HTTP traffic detected: GET /v1/lazy/vendors-web-startup.ec7e6ea49b1c2468ba50.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/default-embed-web-startup.2effbe41f8c7dec32403.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/web-startup.b612538677d498545a0d.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/w/t HTTP/1.1Host: za.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v1/lazy/vendors-web-startup.ec7e6ea49b1c2468ba50.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v1/lazy/web-startup.b612538677d498545a0d.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v1/lazy/lang-en.1306566d23ee77941cf4.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/vendors-embed-web-startup.1b4f48155c308b510e2d.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/default-embed-web-startup.2effbe41f8c7dec32403.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/lang-vi.847c90765c3b5498f707.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mainless-worker.9c0875841efb5667ea74.js HTTP/1.1Host: chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /images/icons/image25_1484838643007.png HTTP/1.1Host: stc-chat.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/effect_icon_heart_1484223878985.png HTTP/1.1Host: stc-chat.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/favicon-96x96.v1.png HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://chat.zalo.mesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/login/getServerInfo?imei=ee44923a-15e4-45a5-a33f-405cab4e5851-22210ca73bf1af2ec2eace74a96ee356&type=30&client_version=645&computer_name=Web&signkey=7500a0b60093164461658cde9d2b7447 HTTP/1.1Host: wpa.chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /Content-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://chat.zalo.meSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /zd-worker.9c0875841efb5667ea74.js HTTP/1.1Host: chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /soc-worker.9c0875841efb5667ea74.js HTTP/1.1Host: chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /assets/logo-new.146dfa01c78183631d33b77999a18288.svg HTTP/1.1Host: chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /opfs-worker.9c0875841efb5667ea74.js HTTP/1.1Host: chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v1/lazy/lang-en.1306566d23ee77941cf4.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/lazy/lang-vi.847c90765c3b5498f707.js HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/logo-new.146dfa01c78183631d33b77999a18288.svg HTTP/1.1Host: chat.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /v1/favicon-96x96.v1.png HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /soc-worker.9c0875841efb5667ea74.js HTTP/1.1Host: chat.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /opfs-worker.9c0875841efb5667ea74.js HTTP/1.1Host: chat.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /images/icons/effect_icon_heart_1484223878985.png HTTP/1.1Host: stc-chat.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/login/getLoginInfo?zcid=19EC3E28DEB896275962AF9F476E6EED642AEAF3201A021F33CFEF4F2EA4AEDBE3622BEA51B145F206B4A11F96E2BD4459079B3745DB87607B751070B1C4C675DAA1035726B681B1948BDF8FD6FCCCBB568803B55CDDC09F9AF1FFE8327440D2&zcid_ext=d90a6922f92&enc_ver=v2&params=u0O4S2Y8lww1RX366Bq4du8zueos4yu5tEvzWPD0xfG%2F6OA0ZMXT6m%2Famn8388KiJnsHOCQ9HQTWfnVsCekrTvOqieQvgJyDIoim03q2ElmM6p85aQMfjBPfW%2BkIGyDpwBpTNxbfmYXQq%2BuRourruXEYApV1rccobYJnRRbWxyTFHxBpjKZN9qURHQM4IXsD&type=30&client_version=645&signkey=a18d010290869c65f9c552b2787c7e13&nretry=0 HTTP/1.1Host: wpa.chat.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /Content-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://chat.zalo.meSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /api/login/getServerInfo?imei=ee44923a-15e4-45a5-a33f-405cab4e5851-22210ca73bf1af2ec2eace74a96ee356&type=30&client_version=645&computer_name=Web&signkey=7500a0b60093164461658cde9d2b7447 HTTP/1.1Host: wpa.chat.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /mainless-worker.9c0875841efb5667ea74.js HTTP/1.1Host: chat.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/icons/image25_1484838643007.png HTTP/1.1Host: stc-chat.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/fonts/Zalo-Segoe-UI.dc1a7d868a0b3a0e2daa8b36567e9ea9.ttf HTTP/1.1Host: zalo-chat-static.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://chat.zalo.mesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zalo-chat-static.zadn.vn/v1/web-startup.8f6f137d5bc84bfef54f.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account?continue=https%3A%2F%2Fchat.zalo.me%2F HTTP/1.1Host: id.zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?render=6LcqC0UpAAAAAGWHMScrTGNdbU5jmnu8qPWJRRUM HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://id.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit&hl=vi HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://id.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main-5.5.7.css HTTP/1.1Host: stc-zlogin.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://id.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/sentry.min.js HTTP/1.1Host: stc-zlogin.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://id.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/zcaptcha-sdk-1.0.1.js HTTP/1.1Host: zalo-captcha.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://id.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /main-5.5.7.js HTTP/1.1Host: stc-zlogin.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://id.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/login/getLoginInfo?zcid=19EC3E28DEB896275962AF9F476E6EED642AEAF3201A021F33CFEF4F2EA4AEDBE3622BEA51B145F206B4A11F96E2BD4459079B3745DB87607B751070B1C4C675DAA1035726B681B1948BDF8FD6FCCCBB568803B55CDDC09F9AF1FFE8327440D2&zcid_ext=d90a6922f92&enc_ver=v2&params=u0O4S2Y8lww1RX366Bq4du8zueos4yu5tEvzWPD0xfG%2F6OA0ZMXT6m%2Famn8388KiJnsHOCQ9HQTWfnVsCekrTvOqieQvgJyDIoim03q2ElmM6p85aQMfjBPfW%2BkIGyDpwBpTNxbfmYXQq%2BuRourruXEYApV1rccobYJnRRbWxyTFHxBpjKZN9qURHQM4IXsD&type=30&client_version=645&signkey=a18d010290869c65f9c552b2787c7e13&nretry=0 HTTP/1.1Host: wpa.chat.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?render=6LcqC0UpAAAAAGWHMScrTGNdbU5jmnu8qPWJRRUM HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit&hl=vi HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/banner_icon.svg HTTP/1.1Host: stc-zlogin.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://id.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sdk/zcaptcha-sdk-1.0.1.js HTTP/1.1Host: zalo-captcha.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/sentry.min.js HTTP/1.1Host: stc-zlogin.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main-5.5.7.js HTTP/1.1Host: stc-zlogin.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/zlogo.png HTTP/1.1Host: stc-zlogin.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://stc-zlogin.zdn.vn/main-5.5.7.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/logininfo HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFvcqNNGzGOLUjB09K0rDZKAqi0b03Lc52VG
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcqC0UpAAAAAGWHMScrTGNdbU5jmnu8qPWJRRUM&co=aHR0cHM6Ly9pZC56YWxvLm1lOjQ0Mw..&hl=vi&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=1ik2xsmirzzm HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://id.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fonts/fontawesome-webfont.woff2 HTTP/1.1Host: stc-zlogin.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://id.zalo.mesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://stc-zlogin.zdn.vn/main-5.5.7.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/banner_icon.svg HTTP/1.1Host: stc-zlogin.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/verify-client HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFvcqNNGzGOLUjB09K0rDZKAqi0b03Lc52VG; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1
Source: global traffic	HTTP traffic detected: GET /account/authen/qr/generate HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFvcqNNGzGOLUjB09K0rDZKAqi0b03Lc52VG; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/zlogo.png HTTP/1.1Host: stc-zlogin.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/bg/b50FiC3GJqhOPkFyj4HYcajJNbVzXJ6nVw0XfMkHZ-k.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcqC0UpAAAAAGWHMScrTGNdbU5jmnu8qPWJRRUM&co=aHR0cHM6Ly9pZC56YWxvLm1lOjQ0Mw..&hl=vi&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=1ik2xsmirzzmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=vi&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcqC0UpAAAAAGWHMScrTGNdbU5jmnu8qPWJRRUM&co=aHR0cHM6Ly9pZC56YWxvLm1lOjQ0Mw..&hl=vi&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=1ik2xsmirzzmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/b50FiC3GJqhOPkFyj4HYcajJNbVzXJ6nVw0XfMkHZ-k.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /zaloid/client/images/favicon.png HTTP/1.1Host: stc-zaloid.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://id.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=vi&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /qr/l?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn HTTP/1.1Host: zaloapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /account/logininfo HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFvs8NNGvVOLUi8m9K0bnZKAmZ0b02MM52VG
Source: global traffic	HTTP traffic detected: GET /account/verify-client HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFvs8NNGvVOLUi8m9K0bnZKAmZ0b02MM52VG
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /zaloid/client/images/favicon.png HTTP/1.1Host: stc-zaloid.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: zaloapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/verify-client HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFvsqNNGvGOLUiB09K0bDZKAmi0b02Lc52VG
Source: global traffic	HTTP traffic detected: GET /account/logininfo HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFvsqNNGvGOLUiB09K0bDZKAmi0b02Lc52VG
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /account/verify-client HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFvsqNNGvGOLUiB09K0bDZKAmi0b02Lc52VG
Source: global traffic	HTTP traffic detected: GET /account/logininfo HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFvsqNNGvGOLUiB09K0bDZKAmi0b02Lc52VG
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: zalo.meConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc HTTP/1.1Host: zalo.meConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /session-sdk/session-sdk.min.js HTTP/1.1Host: stc-sp.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "660a34db-4f55"
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/css/layout.css HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/css/custom.css HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/jquery.min.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/pgwbrowser.min.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/verify-client HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFu6ONNGbROLUh9m9K1LXZKAid0b05NM52VG
Source: global traffic	HTTP traffic detected: GET /account/logininfo HTTP/1.1Host: id.zalo.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1; zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFu6ONNGbROLUh9m9K1LXZKAid0b05NM52VG
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /session-sdk/session-sdk.min.js HTTP/1.1Host: stc-sp.zadn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "660a34db-4f55"
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/ico_check.png HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://stc-zaloprofile.zdn.vn/pc/v1/css/layout.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/world.png HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/pgwbrowser.min.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/btn_download.png HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/logo.svg HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/img_pc.png HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/jquery.min.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/tether.min.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/bootstrap.min.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/ico_check.png HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/swiper.min.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/world.png HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/btn_download.png HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/logo.svg HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/main.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/conversion.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/tether.min.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/fonts/roboto/roboto-bold-webfont.woff HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://zalo.mesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://stc-zaloprofile.zdn.vn/pc/v1/css/layout.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/fonts/roboto/roboto-regular-webfont.woff HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://zalo.mesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://stc-zaloprofile.zdn.vn/pc/v1/css/layout.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/fonts/roboto/roboto-medium-webfont.woff HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://zalo.mesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://stc-zaloprofile.zdn.vn/pc/v1/css/layout.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/bootstrap.min.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/swiper.min.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/main.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/img_pc.png HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/js/conversion.js HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/img_btn_top.png HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://stc-zaloprofile.zdn.vn/pc/v1/css/layout.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/v1/images/img_btn_top.png HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: stc-zaloprofile.zdn.vnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pc?source=mainsitetopnav HTTP/1.1Host: zalo.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://zalo.me/pcAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; _ga=GA1.2.952122399.1730389828; _gid=GA1.2.673764523.1730389828; _gat=1; _ga_RYD7END4JE=GS1.2.1730389852.1.0.1730389852.60.0.0
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /session-sdk/session-sdk.min.js HTTP/1.1Host: stc-sp.zadn.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "660a34db-4f55"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /qr/l?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn HTTP/1.1Host: zaloapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: zaloapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_205.2.dr, chromecache_175.2.dr

String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: chat.zalo.me
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: stc-sp.zadn.vn
Source: global traffic	DNS traffic detected: DNS query: zalo-chat-static.zadn.vn
Source: global traffic	DNS traffic detected: DNS query: jr.chat.zalo.me
Source: global traffic	DNS traffic detected: DNS query: za.zdn.vn
Source: global traffic	DNS traffic detected: DNS query: za.zalo.me
Source: global traffic	DNS traffic detected: DNS query: stc-chat.zdn.vn
Source: global traffic	DNS traffic detected: DNS query: wpa.chat.zalo.me
Source: global traffic	DNS traffic detected: DNS query: id.zalo.me
Source: global traffic	DNS traffic detected: DNS query: stc-zlogin.zdn.vn
Source: global traffic	DNS traffic detected: DNS query: zalo-captcha.zdn.vn
Source: global traffic	DNS traffic detected: DNS query: zaloapp.com
Source: global traffic	DNS traffic detected: DNS query: stc-zaloid.zdn.vn
Source: global traffic	DNS traffic detected: DNS query: zalo.me
Source: global traffic	DNS traffic detected: DNS query: stc-zaloprofile.zdn.vn
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net

Source: unknown

HTTP traffic detected: POST /v3/w/t HTTP/1.1Host: za.zalo.meConnection: keep-aliveContent-Length: 161sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/x-www-form-urlencodedAccept: */*Origin: https://chat.zalo.meSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://chat.zalo.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zlang=vn

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:29 GMTContent-Type: application/json;charset=utf-8Content-Length: 76Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Set-Cookie: _zlang=vn;Path=/;Domain=zalo.me;Expires=Fri, 01-Nov-2024 15:50:29 GMT;Max-Age=86400;SecureExpires: Thu, 01 Jan 1970 00:00:00 GMTCache-Control: private, no-store, no-cache, must-revalidatePragma: no-cacheserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:31 GMTContent-Type: application/json;charset=utf-8Content-Length: 76Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Set-Cookie: _zlang=vn;Path=/;Domain=zalo.me;Expires=Fri, 01-Nov-2024 15:50:31 GMT;Max-Age=86400;SecureExpires: Thu, 01 Jan 1970 00:00:00 GMTCache-Control: private, no-store, no-cache, must-revalidatePragma: no-cacheserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:31 GMTContent-Type: text/html;charset=iso-8859-1Content-Length: 253Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Cache-Control: must-revalidate,no-cache,no-storeserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:38 GMTContent-Type: text/html;charset=iso-8859-1Content-Length: 253Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Cache-Control: must-revalidate,no-cache,no-storeserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:38 GMTContent-Type: application/json;charset=utf-8Content-Length: 76Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Set-Cookie: _zlang=vn;Path=/;Domain=zalo.me;Expires=Fri, 01-Nov-2024 15:50:38 GMT;Max-Age=86400;SecureExpires: Thu, 01 Jan 1970 00:00:00 GMTCache-Control: private, no-store, no-cache, must-revalidatePragma: no-cacheserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:40 GMTContent-Type: text/html;charset=iso-8859-1Content-Length: 253Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Cache-Control: must-revalidate,no-cache,no-storeserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:40 GMTContent-Type: application/json;charset=utf-8Content-Length: 76Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Set-Cookie: _zlang=vn;Path=/;Domain=zalo.me;Expires=Fri, 01-Nov-2024 15:50:40 GMT;Max-Age=86400;SecureExpires: Thu, 01 Jan 1970 00:00:00 GMTCache-Control: private, no-store, no-cache, must-revalidatePragma: no-cacheserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:41 GMTContent-Type: text/html;charset=iso-8859-1Content-Length: 253Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Cache-Control: must-revalidate,no-cache,no-storeserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:41 GMTContent-Type: application/json;charset=utf-8Content-Length: 76Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Set-Cookie: _zlang=vn;Path=/;Domain=zalo.me;Expires=Fri, 01-Nov-2024 15:50:41 GMT;Max-Age=86400;SecureExpires: Thu, 01 Jan 1970 00:00:00 GMTCache-Control: private, no-store, no-cache, must-revalidatePragma: no-cacheserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:45 GMTContent-Type: text/html;charset=iso-8859-1Content-Length: 253Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Cache-Control: must-revalidate,no-cache,no-storeserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 31 Oct 2024 15:50:45 GMTContent-Type: application/json;charset=utf-8Content-Length: 76Connection: closeContent-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:Set-Cookie: _zlang=vn;Path=/;Domain=zalo.me;Expires=Fri, 01-Nov-2024 15:50:45 GMT;Max-Age=86400;SecureExpires: Thu, 01 Jan 1970 00:00:00 GMTCache-Control: private, no-store, no-cache, must-revalidatePragma: no-cacheserver: za-ngx-srvX-Forwarded-Proto: httpsFRONT_END_HTTPS: on

Source: chromecache_261.2.dr, chromecache_173.2.dr	String found in binary or memory: http://developer.yahoo.com/yui/license.html
Source: chromecache_213.2.dr, chromecache_233.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_251.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_251.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_251.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_226.2.dr, chromecache_141.2.dr	String found in binary or memory: http://opensource.org/licenses/gpl-3.0
Source: chromecache_226.2.dr, chromecache_141.2.dr	String found in binary or memory: http://pagawa.com
Source: chromecache_226.2.dr, chromecache_141.2.dr	String found in binary or memory: http://pgwjs.com
Source: chromecache_222.2.dr	String found in binary or memory: http://windowsphone.com/s?appid=ca5b631e-1cb9-4e39-b03e-9499443afe73
Source: chromecache_190.2.dr, chromecache_166.2.dr, chromecache_211.2.dr, chromecache_215.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_186.2.dr	String found in binary or memory: http://www.imagemagick.org
Source: chromecache_222.2.dr	String found in binary or memory: http://zaloapp.com/
Source: chromecache_222.2.dr	String found in binary or memory: http://zaloapp.com/qr/jp/gd?jp=
Source: chromecache_175.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_179.2.dr, chromecache_246.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_144.2.dr, chromecache_183.2.dr	String found in binary or memory: https://api.zaloapp.com/api/emoticon/sticker/webpc?eid=20695&size=130
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://business.zalo.me
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://business.zalo.me/pricing
Source: chromecache_154.2.dr	String found in binary or memory: https://business.zbox.vn/nang-cap-business-pro/?utm_source=pc_entry&utm_medium=welcome&gidzl=D4v0ROE
Source: chromecache_205.2.dr, chromecache_175.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_217.2.dr, chromecache_154.2.dr	String found in binary or memory: https://cloud.zbox.vn/?utm_source=pc_entry&utm_medium=left_sidebar
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://cloud.zbox.vn/pc-paywall/?utm_source=pc_entry&utm_medium=leftsidebar
Source: chromecache_251.2.dr	String found in binary or memory: https://daneden.github.io/animate.css/
Source: chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://developers.zalo.me
Source: chromecache_213.2.dr, chromecache_233.2.dr	String found in binary or memory: https://github.com/crypto-browserify/crypto-browserify
Source: chromecache_248.2.dr, chromecache_182.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: chromecache_261.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://help.zalo.me/article/phien-ban-chua-ho-tro-tinh-nang-danh-muc-san-pham
Source: chromecache_169.2.dr	String found in binary or memory: https://help.zalo.me/huong-dan/chuyen-muc/nhan-tin-va-goi/nhan-tin/cloud-cua-toi-tren-zalo-luu-tru-d
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://help.zalo.me/huong-dan/chuyen-muc/zalo-cong-viec/xu-ly-khi-khong-tra-loi-duoc-tin-nhan-zalo-
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://help.zalo.me/huong-dan/zalo-cho-to-chuc-doanh-nghiep-giao-duc/tu-van-khach-hang-hieu-qua-hon
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://help.zalo.me/lien-he
Source: chromecache_219.2.dr	String found in binary or memory: https://id.zalo.me/account
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://id.zalo.me/account/login?continue=
Source: chromecache_147.2.dr, chromecache_209.2.dr	String found in binary or memory: https://jr.stg.
Source: chromecache_261.2.dr, chromecache_173.2.dr	String found in binary or memory: https://kjur.github.io/jsrsasign/license/
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://loginv2.zapps.vn/index.html
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://oa.zalo.me
Source: chromecache_175.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_205.2.dr, chromecache_175.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_203.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_173.2.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_217.2.dr, chromecache_154.2.dr	String found in binary or memory: https://res-zalo.zadn.vn/upload/media/2017/1/9/o_a62421af372795dd-0_1483937772450.jpg
Source: chromecache_217.2.dr, chromecache_154.2.dr	String found in binary or memory: https://res-zalo.zadn.vn/upload/media/2024/8/1/zbiz_welcome_3x__2__1722484572625_662095.png
Source: chromecache_217.2.dr, chromecache_154.2.dr	String found in binary or memory: https://res-zalo.zadn.vn/upload/media/2024/8/1/zbiz_welcome_ENG_3x_1722501235303_449091.png
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/10_school.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/11_school.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/12_school.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/1_family.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/2_family.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/3_family.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/4_work.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/5_work.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/6_work.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/7_friends.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/8_friends.jpg
Source: chromecache_155.2.dr, chromecache_169.2.dr	String found in binary or memory: https://res.zaloapp.com/pc/avt_group/9_friends.jpg
Source: chromecache_205.2.dr, chromecache_175.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_246.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_183.2.dr	String found in binary or memory: https://stc-chat.zdn.vn/images/banner/zalo-thumb-link.png
Source: chromecache_152.2.dr, chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-sp.zadn.vn/session-sdk/session-sdk.min.js
Source: chromecache_219.2.dr	String found in binary or memory: https://stc-zaloid.zdn.vn/zaloid/client/images/favicon.png
Source: chromecache_219.2.dr	String found in binary or memory: https://stc-zaloid.zdn.vn/zaloid/client/images/meta_background.png
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/favicon.ico
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/css/custom.css
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/css/layout.css
Source: chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/images/btn_download.png
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/images/img_pc.png
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/images/logo.svg
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/images/world.png
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/images/zalo_sharelogo.png
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/js/bootstrap.min.js
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/js/conversion.js
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/js/jquery.min.js
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/js/main.js
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/js/pgwbrowser.min.js
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/js/swiper.min.js
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://stc-zaloprofile.zdn.vn/pc/v1/js/tether.min.js
Source: chromecache_219.2.dr	String found in binary or memory: https://stc-zlogin.zdn.vn/js/sentry.min.js
Source: chromecache_219.2.dr	String found in binary or memory: https://stc-zlogin.zdn.vn/main-5.5.7.css
Source: chromecache_219.2.dr	String found in binary or memory: https://stc-zlogin.zdn.vn/main-5.5.7.js
Source: chromecache_203.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_179.2.dr, chromecache_246.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_205.2.dr, chromecache_175.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_251.2.dr	String found in binary or memory: https://www.flag-sprites.com/)
Source: chromecache_219.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_179.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_179.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_179.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_175.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_179.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_219.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=explicit&hl=vi
Source: chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr, chromecache_254.2.dr, chromecache_250.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_219.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=6LcqC0UpAAAAAGWHMScrTGNdbU5jmnu8qPWJRRUM
Source: chromecache_200.2.dr, chromecache_140.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_205.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_175.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_179.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.
Source: chromecache_200.2.dr, chromecache_140.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Source: chromecache_174.2.dr, chromecache_254.2.dr, chromecache_250.2.dr, chromecache_242.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__vi.js
Source: chromecache_205.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_147.2.dr, chromecache_209.2.dr, chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://za.zdn.vn/v3/za.js
Source: chromecache_219.2.dr	String found in binary or memory: https://zalo-captcha.zdn.vn/sdk/zcaptcha-sdk-1.0.1.js
Source: chromecache_152.2.dr	String found in binary or memory: https://zalo-chat-static.zadn.vn/v1/lazy/4.460ebe81b7d583573298.js
Source: chromecache_152.2.dr	String found in binary or memory: https://zalo-chat-static.zadn.vn/v1/lazy/default-embed-render.964d9cd9be2140add15d.js
Source: chromecache_152.2.dr	String found in binary or memory: https://zalo-chat-static.zadn.vn/v1/lazy/vendors-embed-render.17bee88d4759f5ada63e.js
Source: chromecache_152.2.dr	String found in binary or memory: https://zalo-chat-static.zadn.vn/v1/render.9c0875841efb5667ea74.js
Source: chromecache_154.2.dr	String found in binary or memory: https://zalo.me/download/zalo-pc
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://zalo.me/help/?utm_source=linking&utm_medium=nav_home
Source: chromecache_201.2.dr, chromecache_189.2.dr	String found in binary or memory: https://zalo.me/pc
Source: chromecache_195.2.dr, chromecache_229.2.dr	String found in binary or memory: https://zalo.me/policy/thongbaoxulydulieu
Source: chromecache_229.2.dr	String found in binary or memory: https://zalo.vn/dieukhoan

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50096 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50098 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50097 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50166 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@26/196@72/25

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1868 --field-trial-handle=2004,i,1877857276422922661,5910162750148439755,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chat.zalo.me/"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://zaloapp.com/qr/l?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1976,i,8142727034678412112,14103828550631631722,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1868 --field-trial-handle=2004,i,1877857276422922661,5910162750148439755,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1976,i,8142727034678412112,14103828550631631722,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Deobfuscate/Decode Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://fontawesome.io	0%	URL Reputation	safe
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://reactjs.org/link/react-polyfills	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
wpa.chat.zalo.me	49.213.95.137	true	false	unknown
zaloapp.com	49.213.95.220	true	false	unknown
stc-zaloprofile.zdn.vn	49.213.95.44	true	false	unknown
zalo-captcha.zdn.vn	49.213.95.44	true	false	unknown
chat.zalo.me	49.213.95.122	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	74.125.133.156	true	false	unknown
zalo-chat-static.zadn.vn	171.244.25.71	true	false	unknown
stc-sp.zadn.vn	222.255.114.102	true	false	unknown
za.zalo.me	49.213.95.247	true	false	unknown
jr.chat.zalo.me	49.213.95.207	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
za.zdn.vn	49.213.95.44	true	false	unknown
stc-chat.zdn.vn	49.213.95.44	true	false	unknown
analytics.google.com	142.250.184.238	true	false	unknown
stc-zaloid.zdn.vn	49.213.95.43	true	false	unknown
id.zalo.me	49.213.95.230	true	false	unknown
stc-zlogin.zdn.vn	49.213.95.48	true	false	unknown
zalo.me	49.213.95.247	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/recaptcha/enterprise.js?render=6LcqC0UpAAAAAGWHMScrTGNdbU5jmnu8qPWJRRUM	false	unknown
https://zalo-chat-static.zadn.vn/v1/favicon-96x96.v1.png	false	unknown
https://jr.chat.zalo.me/jr/userinfo	false	unknown
http://zaloapp.com/	false	unknown
https://id.zalo.me/account?continue=https%3A%2F%2Fchat.zalo.me%2F	false	unknown
https://zalo-chat-static.zadn.vn/v1/lazy/vendors-embed-web-startup.1b4f48155c308b510e2d.js	false	unknown
https://zalo-chat-static.zadn.vn/v1/fonts/Zalo-Segoe-UI.dc1a7d868a0b3a0e2daa8b36567e9ea9.ttf	false	unknown
https://chat.zalo.me/	false	unknown
https://wpa.chat.zalo.me/api/login/getLoginInfo?zcid=19EC3E28DEB896275962AF9F476E6EED642AEAF3201A021F33CFEF4F2EA4AEDBE3622BEA51B145F206B4A11F96E2BD4459079B3745DB87607B751070B1C4C675DAA1035726B681B1948BDF8FD6FCCCBB568803B55CDDC09F9AF1FFE8327440D2&zcid_ext=d90a6922f92&enc_ver=v2&params=u0O4S2Y8lww1RX366Bq4du8zueos4yu5tEvzWPD0xfG%2F6OA0ZMXT6m%2Famn8388KiJnsHOCQ9HQTWfnVsCekrTvOqieQvgJyDIoim03q2ElmM6p85aQMfjBPfW%2BkIGyDpwBpTNxbfmYXQq%2BuRourruXEYApV1rccobYJnRRbWxyTFHxBpjKZN9qURHQM4IXsD&type=30&client_version=645&signkey=a18d010290869c65f9c552b2787c7e13&nretry=0	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/js/bootstrap.min.js	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/images/btn_download.png	false	unknown
https://stc-sp.zadn.vn/session-sdk/session-sdk.min.js	false	unknown
https://chat.zalo.me/libs/libsignal-protocol.static.js	false	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=vi&v=-ZG7BC9TxCVEbzIO2m429usb	false	unknown
https://zalo-chat-static.zadn.vn/v1/lazy/lang-en.1306566d23ee77941cf4.js	false	unknown
https://zalo-chat-static.zadn.vn/v1/lazy/lang-vi.847c90765c3b5498f707.js	false	unknown
https://zalo-captcha.zdn.vn/sdk/zcaptcha-sdk-1.0.1.js	false	unknown
https://zalo-chat-static.zadn.vn/v1/lazy/vendors-embed-render.17bee88d4759f5ada63e.js	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/js/pgwbrowser.min.js	false	unknown
https://stc-zaloid.zdn.vn/zaloid/client/images/favicon.png	false	unknown
https://zalo.me/pc?source=mainsitetopnav	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/js/tether.min.js	false	unknown
https://stc-zlogin.zdn.vn/fonts/fontawesome-webfont.woff2	false	unknown
https://zalo-chat-static.zadn.vn/v1/lazy/vendors-web-startup.ec7e6ea49b1c2468ba50.js	false	unknown
https://stc-zaloprofile.zdn.vn/favicon.ico	false	unknown
https://zalo.me/	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/fonts/roboto/roboto-bold-webfont.woff	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/fonts/roboto/roboto-medium-webfont.woff	false	unknown
https://zalo-chat-static.zadn.vn/v1/default-embed-web-startup.c74076b5055445f98284.css	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/js/conversion.js	false	unknown
https://stc-zlogin.zdn.vn/images/banner_icon.svg	false	unknown
https://chat.zalo.me/mainless-worker.9c0875841efb5667ea74.js	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/js/jquery.min.js	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/images/logo.svg	false	unknown
https://stc-zlogin.zdn.vn/images/zlogo.png	false	unknown
https://zalo.me/pc	false	unknown
https://chat.zalo.me/manifest.webmanifest	false	unknown
https://chat.zalo.me/favicon-96x96.v1.png	false	unknown
https://zalo-chat-static.zadn.vn/v1/vendors-embed-web-startup.f85daca1da58d70b76b1.css	false	unknown
https://zalo-chat-static.zadn.vn/v1/lazy/web-startup.b612538677d498545a0d.js	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/images/img_btn_top.png	false	unknown
https://id.zalo.me/account/authen/qr/waiting-scan	false	unknown
https://stc-chat.zdn.vn/images/icons/image25_1484838643007.png	false	unknown
https://zaloapp.com/	false	unknown
https://zalo-chat-static.zadn.vn/v1/lazy/4.460ebe81b7d583573298.js	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/images/img_pc.png	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/css/custom.css	false	unknown
https://stc-zaloprofile.zdn.vn/pc/v1/images/ico_check.png	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://pagawa.com	chromecache_226.2.dr, chromecache_141.2.dr	false		unknown
http://fontawesome.io	chromecache_251.2.dr	false	URL Reputation: safe	unknown
https://api.zaloapp.com/api/emoticon/sticker/webpc?eid=20695&size=130	chromecache_144.2.dr, chromecache_183.2.dr	false		unknown
https://zalo.vn/dieukhoan	chromecache_229.2.dr	false		unknown
https://res.zaloapp.com/pc/avt_group/12_school.jpg	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_205.2.dr, chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/enterprise/	chromecache_200.2.dr, chromecache_140.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/gpl-3.0	chromecache_226.2.dr, chromecache_141.2.dr	false		unknown
https://help.zalo.me/article/phien-ban-chua-ho-tro-tinh-nang-danh-muc-san-pham	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://help.zalo.me/huong-dan/zalo-cho-to-chuc-doanh-nghiep-giao-duc/tu-van-khach-hang-hieu-qua-hon	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://support.google.com/recaptcha#6262736	chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	false	URL Reputation: safe	unknown
https://res.zaloapp.com/pc/avt_group/2_family.jpg	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_179.2.dr, chromecache_246.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_175.2.dr	false		unknown
https://stc-zaloprofile.zdn.vn/pc/v1/images/zalo_sharelogo.png	chromecache_195.2.dr, chromecache_229.2.dr	false		unknown
https://zalo.me/help/?utm_source=linking&utm_medium=nav_home	chromecache_195.2.dr, chromecache_229.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_246.2.dr	false	URL Reputation: safe	unknown
https://business.zalo.me	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_203.2.dr	false	URL Reputation: safe	unknown
http://windowsphone.com/s?appid=ca5b631e-1cb9-4e39-b03e-9499443afe73	chromecache_222.2.dr	false		unknown
https://cloud.zbox.vn/?utm_source=pc_entry&utm_medium=left_sidebar	chromecache_217.2.dr, chromecache_154.2.dr	false		unknown
https://res.zaloapp.com/pc/avt_group/4_work.jpg	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.	chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	false		unknown
https://res.zaloapp.com/pc/avt_group/9_friends.jpg	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://zalo.me/download/zalo-pc	chromecache_154.2.dr	false		unknown
https://id.zalo.me/account	chromecache_219.2.dr	false		unknown
https://res-zalo.zadn.vn/upload/media/2024/8/1/zbiz_welcome_3x__2__1722484572625_662095.png	chromecache_217.2.dr, chromecache_154.2.dr	false		unknown
https://res.zaloapp.com/pc/avt_group/8_friends.jpg	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_205.2.dr, chromecache_175.2.dr	false	URL Reputation: safe	unknown
https://res.zaloapp.com/pc/avt_group/7_friends.jpg	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	false	URL Reputation: safe	unknown
https://help.zalo.me/huong-dan/chuyen-muc/zalo-cong-viec/xu-ly-khi-khong-tra-loi-duoc-tin-nhan-zalo-	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_203.2.dr	false		unknown
https://jr.stg.	chromecache_147.2.dr, chromecache_209.2.dr	false		unknown
https://res.zaloapp.com/pc/avt_group/6_work.jpg	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://www.google.%/ads/ga-audiences	chromecache_179.2.dr, chromecache_246.2.dr	false		unknown
https://business.zalo.me/pricing	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://github.com/js-cookie/js-cookie	chromecache_261.2.dr, chromecache_173.2.dr	false		unknown
https://help.zalo.me/lien-he	chromecache_195.2.dr, chromecache_229.2.dr	false		unknown
https://zalo.me/policy/thongbaoxulydulieu	chromecache_195.2.dr, chromecache_229.2.dr	false		unknown
http://www.imagemagick.org	chromecache_186.2.dr	false		unknown
https://loginv2.zapps.vn/index.html	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown
https://stc-chat.zdn.vn/images/banner/zalo-thumb-link.png	chromecache_183.2.dr	false		unknown
https://developers.zalo.me	chromecache_195.2.dr, chromecache_229.2.dr	false		unknown
https://kjur.github.io/jsrsasign/license/	chromecache_261.2.dr, chromecache_173.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_170.2.dr, chromecache_178.2.dr, chromecache_149.2.dr, chromecache_255.2.dr, chromecache_203.2.dr	false	URL Reputation: safe	unknown
https://daneden.github.io/animate.css/	chromecache_251.2.dr	false		unknown
https://reactjs.org/link/react-polyfills	chromecache_173.2.dr	false	URL Reputation: safe	unknown
https://res.zaloapp.com/pc/avt_group/5_work.jpg	chromecache_155.2.dr, chromecache_169.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.133.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
49.213.95.44	stc-zaloprofile.zdn.vn	Viet Nam	38244	VINAGAME-AS-VNVNGCorporationVN	false
49.213.95.43	stc-zaloid.zdn.vn	Viet Nam	38244	VINAGAME-AS-VNVNGCorporationVN	false
49.213.95.48	stc-zlogin.zdn.vn	Viet Nam	38244	VINAGAME-AS-VNVNGCorporationVN	false
222.255.114.102	stc-sp.zadn.vn	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
49.213.95.230	id.zalo.me	Viet Nam	38244	VINAGAME-AS-VNVNGCorporationVN	false
49.213.95.137	wpa.chat.zalo.me	Viet Nam	38244	VINAGAME-AS-VNVNGCorporationVN	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
103.9.196.55	unknown	Viet Nam	45903	CMCTELECOM-AS-VNCMCTelecomInfrastructureCompanyVN	false
171.244.25.71	zalo-chat-static.zadn.vn	Viet Nam	38731	VTDC-AS-VNVietel-CHTCompamyLtdVN	false
49.213.95.122	chat.zalo.me	Viet Nam	38244	VINAGAME-AS-VNVNGCorporationVN	false
49.213.95.187	unknown	Viet Nam	38244	VINAGAME-AS-VNVNGCorporationVN	false
49.213.95.220	zaloapp.com	Viet Nam	38244	VINAGAME-AS-VNVNGCorporationVN	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
49.213.95.247	za.zalo.me	Viet Nam	38244	VINAGAME-AS-VNVNGCorporationVN	false
222.255.114.118	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
49.213.95.207	jr.chat.zalo.me	Viet Nam	38244	VINAGAME-AS-VNVNGCorporationVN	false
142.250.184.238	analytics.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6
192.168.2.13
192.168.2.15
192.168.2.14

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546254
Start date and time:	2024-10-31 16:48:55 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://chat.zalo.me/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@26/196@72/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 142.250.185.110, 108.177.15.84, 34.104.35.123, 4.175.87.197, 192.229.221.95, 52.165.164.15, 93.184.221.240, 13.85.23.206, 88.221.110.91, 2.16.100.168, 142.250.186.163, 142.250.185.78, 142.250.74.206, 172.217.18.99, 142.250.184.234, 142.250.185.74, 142.250.186.170, 142.250.184.202, 142.250.186.106, 216.58.206.42, 142.250.186.74, 142.250.185.170, 216.58.206.74, 142.250.185.234, 142.250.185.202, 142.250.185.106, 142.250.186.138, 172.217.16.202, 172.217.18.10, 142.250.185.138, 142.250.181.227, 40.69.42.241, 142.250.186.136, 142.250.185.99, 142.250.185.200
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://chat.zalo.me/

Source	URL
Screenshot	http://zaloapp.com/qr/l?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 24989
Category:	downloaded
Size (bytes):	8596
Entropy (8bit):	7.974480981068265
Encrypted:	false
SSDEEP:	192:b1RW53VICeGqLKTw97WzC0Jao5lFy3Skbi6rSDL2lw:BsZ25WTw97WZRlFQbi8gKC
MD5:	90CB71FE2F5A1D886BCD9C588062026D
SHA1:	6DE9A6A803A22C21F2DFD60DE94C8F5C1801022E
SHA-256:	9E169FECDDB1364843AAB0AA05FD851B6E59F81BA1F782309298E0EEAF211DCC
SHA-512:	357A98AFABA24F4DBFC4531AC982EC4481C0796B09CD92A61F719CB8DB042A3952CA91592FC46991EB96ADB6FD02BC8C3CBB7DBACFDE53ACA235706D1F26767B
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/js/tether.min.js
Preview:	...........\.o.F..Wdb. ..j...=)..&.@R...m....4..R.JR.....~..P..t....-`X.\|.y..}....\|Z.E..JG....q\?.t1...<........L.C.....g=....~U.uu.,f.L..k..R..NK.L.....^.z.K4.va.H+ea .T....Uu.b.....q:.....U..S.XGQ.(..^..z.X..,.0x..yQ..I....4K....g....}.....6){:..7...X.4.y..:....H..f7.clj....]\.W... ...]...t.D..8..G.....C.6Yg.......d._e...h.t.....bX..~\.*..E]...=......ez.p.]..u...f.e.`,.E.\.k={[?d.5..f....R".....`..... ."....rH..z..q>\%%V.m1...q~\|<B.\|..vhb.q[......6e\|.G..I=].U...!......7.Zn..:.0\|i....Z.y....T..j.'..V..S...Zxo.&......,.,.\|X....E?.B. .........v{..:K..V...S.IW....c+.".g..Fr0.1...q]..".W...i..OX.C..U.m..t........^.9/.i6..G.yL(m.$........g.v.v.C[o(:...jQ?..Q.^S...GU.....nJ.?.K.......#...z.M3O.d.f..........T.x.M.........V...M.9...{,..p.l..'Y.F.-d`k^.)6..?.........h)...A"..H>-.aE..^l.\|^..;>.....i.".%.P.....o.G..R'.eha0Ko.hR.+.1.9q0:9.c...B.....du..x.m.;.[.Z:...Uc.$....E...H.Z..n...q..9..mZ..i....`..f:..#wl.P..8.=!..e#...Rz..V:.....:.....:2do1.;:1

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1031659
Entropy (8bit):	5.365775380691527
Encrypted:	false
SSDEEP:	24576:RXqTEejjmmpH8ckyevqHPVh0djiIzdogQP8e/53Car:RXqTEejympH8ckyevqHPVh0djiIziFP5
MD5:	A7B192F0BA57033D7F4AEB29617F808F
SHA1:	906AD0D16E9E26941A4F8C60948F5559C93D0AD4
SHA-256:	5990614ECD549B61ECB16325051021BC71997DEC181018705D34ED69EDA709CE
SHA-512:	B8C8DDE876FE5ECA5796C2075DE5290B6A76CA222A0B21771790756DF248F49BA939778DC7DDEA0949A015F5D1ABA661EAEF0ED9189ED870A95249E358FE3C82
Malicious:	false
Reputation:	low
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[21],{"+eUS":function(e,t,s){"use strict";s.d(t,"a",(function(){return u}));var i=s("jDHv"),a=s("+ExH"),n=s("ycTR"),r=s("YEoC"),o=s("kFM4"),d=s("teaq"),l=s("PhBv"),c=s("1UUk"),h=s("Hw41");function u(e){Object(o.a)("RunMode",e),e!==r.f.Unknown&&(i.ModuleContainer.resolve(c.b).install(),e!==r.f.Background&&(setTimeout((()=>{const e=i.ModuleContainer.resolve(l.b);e.install(a.b),e.start()}),1),i.ModuleContainer.resolve(d.b).install(n.a,n.b)),e===r.f.Host&&i.ModuleContainer.resolve(h.a).install())}},"+iAT":function(e,t,s){"use strict";var i=s("VTBJ"),a=s("YEoC"),n=s("xI/L"),r=s("C9Dv"),o=s("teaq");const d={PartitionKey:new o.d({tableName:"partition_key",name:"PartitionKey",fields:{database:{name:"database",type:a.h.string},table:{name:"table",type:a.h.string},key:{name:"key",type:a.h.string},value:{name:"value",type:a.h.string}},indices:{primary:{name:"primary",fields:[{type:"raw",field:"databas

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1617), with no line terminators
Category:	downloaded
Size (bytes):	1617
Entropy (8bit):	5.760632410203461
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXAAbWk+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtfO1/6QsQ:iEceKo7LmvtUjPKtX7ZO1/2LrwUnG
MD5:	FA1576201E0AFE008F7A999EA7B2BC06
SHA1:	0CDD38F6714C413469D2BC8FCEF5D3F004F1CFB5
SHA-256:	FE4543F57464DBD80FA982BBF129B06CD2C3D2D7C905E620F8898BD06F18A7E3
SHA-512:	EBFFF4B883D92E6A16E1FBCF9FB6E22B6177C1BB1D3F8A2CE06F7BB99BE5C9FAEABB53F70889D9E551FA4C1BD37432269F8B03746E24DBB54C0BF107E82E4A3C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise.js?render=6LcqC0UpAAAAAGWHMScrTGNdbU5jmnu8qPWJRRUM
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LcqC0UpAAAAAGWHMScrTGNdbU5jmnu8qPWJRRUM');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkU

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6079)
Category:	dropped
Size (bytes):	6280
Entropy (8bit):	5.345106958689805
Encrypted:	false
SSDEEP:	96:Vn6bGAjJmHayJ/XQQ5jggJq2+Lx2rj/2A3PBhp2h2rfdG2A3JyorMebVJaJxFCze:VnUJyOx2n/2yBr2h2LdG2G9MgVID04
MD5:	96E91E0E4FD17452A08138041C9E2B81
SHA1:	6D9DC5DA141090D8DE57CDAB14CF6A4681CC0995
SHA-256:	0F24251AF5D668803F7D13D991AD32993A85E951CE7C2A73482D2B6A3770C18D
SHA-512:	A5E7490AE740F88AEB1DBDF76D9C828E92B306544297048ED486200754D2DB14DB2AB57376305E6E9AD8BEC10786BCB11B0FD4576F1E65EFB2CD719E77C5A425
Malicious:	false
Reputation:	low
Preview:	/*. PgwBrowser - Version 1.2. . Copyright 2014, Jonathan M. Piat. * http://pgwjs.com - http://pagawa.com. * . * Released under the GNU GPLv3 license - http://opensource.org/licenses/gpl-3.0. /.(function(a){a.pgwBrowser=function(){var c={};c.userAgent=navigator.userAgent;c.browser={};c.viewport={};c.os={};resizeEvent=null;var b=[{name:"Chromium",group:"Chrome",identifier:"Chromium/([0-9.])"},{name:"Chrome Mobile",group:"Chrome",identifier:"Chrome/([0-9.]) Mobile",versionIdentifier:"Chrome/([0-9.])"},{name:"Chrome",group:"Chrome",identifier:"Chrome/([0-9.])"},{name:"Chrome for iOS",group:"Chrome",identifier:"CriOS/([0-9.])"},{name:"Android Browser",group:"Chrome",identifier:"CrMo/([0-9.])"},{name:"Firefox",group:"Firefox",identifier:"Firefox/([0-9.])"},{name:"Opera Mini",group:"Opera",identifier:"Opera Mini/([0-9.])"},{name:"Opera",group:"Opera",identifier:"Opera ([0-9.])"},{name:"Opera",group:"Opera",identifier:"Opera/([0-9.])",versionIdentifier:"Version/([0-9.])"},{na

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	dropped
Size (bytes):	320266
Entropy (8bit):	5.354264491279162
Encrypted:	false
SSDEEP:	3072:oSjAmHxkNhedCTcNWQ+fc9uIpg2cOeZgZ6xVcxuMRxYufVvs+ENFvrN7V4SUMfbe:/NwU9+LOMiuM8uFs+ENJ3hml0q
MD5:	EA2AC045F1984B38840F684C4EA0D03E
SHA1:	DF163B3792C15A973B441F2A090367B6C521EBFD
SHA-256:	EA22114CBBD1AADCACDB8F4327A347206CE2F40DB22FCE95F9D5837AE7221CE7
SHA-512:	F5729274827F0CCA8FCD4A0E01539BC5FF3E0B460A1D4CE9C84483920CD1FCA965D521A9434C8CFD351EB450F8FB39F38F304CD96B5DC16E3419D8A1EEBF19CB
Malicious:	false
Reputation:	low
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[10],{"4UO8":function(_){_.exports=JSON.parse('{"CHAT_BOX_LIST_LOAD_ERROR":"Error occurred while loading messages.","CHAT_BOX_LIST_LOAD_MORE_1":"Loading the messages. Please wait a moment.","CHAT_BOX_LIST_LOAD_MORE_2":"Loading the messages. Please wait a moment.","CHAT_BOX_LIST_LOAD_POLLING":"Updating conversation","DB_EXPORT_ERROR":"Error when exporting database","DB_IMPORT_ERROR":"Error when importing database","ECARD_CHEVRON_LEFT_TITLE":"Previous","ECARD_CHEVRON_RIGHT_TITLE":"Next","EMO_01_GRIN":"Grin","EMO_02_JOY":"Joy","EMO_03_KISSING_HEART":"Kissing Heart","EMO_04_HEART":"Heart","EMO_05_LIKE_STRONG":"Like, strong","EMO_06_CAT_FACE":"Cat Face","EMO_07_BLUSH":"Blush","EMO_08_IN_LOVE":"In love","EMO_09_SLIGHT":"Slight","EMO_10_GRIMACE":"Grimace","EMO_11_LAUGH":"Laugh","EMO_12_CHUCKLE":"Chuckle","EMO_13_KISS":"Kiss","EMO_14_SMUG":"Smug","EMO_15_CRY":"Cry","EMO_16_SMILE":"Smile","EMO_17_PL

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 96209
Category:	downloaded
Size (bytes):	39098
Entropy (8bit):	7.994298891725384
Encrypted:	true
SSDEEP:	768:TQvdYA10CltfWJxr+VzuMRjVIihmLTEKGZ8SRjGtAhMjQsbkEUv9GCj:MvdYA1XmyhEEK7S3hMjQsbkDVG0
MD5:	A94E5858D6B6BDE850091DE52235A601
SHA1:	BABDE9C46378C1A7AA6C29CEFB49A86E39D5FBDA
SHA-256:	14A4A7532860DCD8853DD29CDBF5A1DB563800C31B0462897F001E13E18D3235
SHA-512:	50FA34963727D481505BB40F9E32637428010780A8345824A942058381D34D95E02E9BCC3B44B3538DADD8D8DB41559E47EB2F79FBB74D25D3D0F818BB18B8E2
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/js/jquery.min.js
Preview:	............r.W....<..R...H.....u)...Te.H...I2m0..$$...Y.=..D...+...%w..].....-"o.......>[V.MYW."k.7.....i...........rV....`.x.U......boZ../...7...?....n..v.............{?.yY......XlM...w...W....p^4.y.E/.....-.iqVV.......?..\d.4.p....n.N.[.....ys.U....#.a/....j...+....yg.}0:.~.W...5...4...Qo2.O..'...V.jy.... ox..>...l..Vq...z.E...:\|....<.........Y.n....f.t2..^V........h.@.....V............_.5..C;+gM1.7Y.$........?..3..>......\|.......fZ3..99\|wQ.X....^m.#,c......Qq......+&...b.r.....jut.B.%i...\|{.v.5.p...n^.M...o.._........bo^\.o...~..._>.+.i..'S.7{.m...b..3^..F.9-..im.{u5/&..E3i..Iu^.Z{.72...~.in}...,..tlGp....M!......z.....@v.......:yL~[..-m..UR.-2.>,..t.Lv{...f...m..}p...5....b.l.(.......'.H.f...r...P......{.\|i..l{.Mf.py0bg.f.Y..5.V...V.o.zW.....d.(...._.....=5,..nn..4r?......7.{...AD..3.`c....... f...../....V......kj..^..x...0.....6.2c..}.79=-...6.#}u6..lO.....-.E.f..9..j..:.Uq.8............\|../....M.y...'..D7....V..l^.].W

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65500), with no line terminators
Category:	downloaded
Size (bytes):	12505790
Entropy (8bit):	5.715091165897454
Encrypted:	false
SSDEEP:	98304:sagOslTzThaYO6tdA/QIY+qxCcw6ZBwAHG7ZllX05KMZiisPrsQY68SirYGcR2Y:CEcwUi73lwZi5YTHQ
MD5:	CF84006D00E8617EB8A0673F316E7597
SHA1:	033B91BFCC4815FF7A5EA70883FD0DF483E7490E
SHA-256:	8F9AF21E91F43D019713ADA7259D72BA69CC4B631AB5A17B1A8A3E634583DB79
SHA-512:	82E6AA9553E92C71FFEC116A82DF1C14205864F4AC5FF90D5E085B03E9DCFCDD9E3EDDD8289AC68043C2F2C163C1FCA4447FCAABF17E68FA91394CA483BB85B4
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/lazy/default-embed-web-startup.2effbe41f8c7dec32403.js
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[1],{"+2cI":function(e,t,a){"use strict";a.d(t,"a",(function(){return p}));var s=a("Mgpg"),n=a("Yi2m");class i{constructor(e){this.config=e,this.submitted=!1,this.name="BaseViewerLogService"}submit(){this.submitted\|\|(this.submitted=!1,queueMicrotask((()=>n.default.logActionInfoV2(this.config.Type,this.config.SubType,this.log))))}}class o extends i{constructor(e){super(e),this.name="CaptionInteractionService",this._captionLength=0,this._mouseEnterTime=0,this._totalTime=0,this._mouseEnterTime=e.startTime,this.submitted=!0}updateCaptionLength(e){this.submitted=!1,this._captionLength=e}onMouseEnter(){this._mouseEnterTime=Date.now()}onMouseLeave(){this._totalTime+=Date.now()-this._mouseEnterTime}dispose(){}get log(){return{SubType:this.config.SubType,review_caption_duration:this._totalTime,total_caption_length:this._captionLength}}}class r extends i{constructor(...e){super(...e),this.name="Timeo

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 71896, version 4.393
Category:	downloaded
Size (bytes):	71896
Entropy (8bit):	7.996746194687547
Encrypted:	true
SSDEEP:	1536:tA4xrPyfyECsyz2wCjYfhO/ORzc7erabg5Z06GEQMo:t3jayEC/2/OI/gcq+bg5C6G7
MD5:	E6CF7C6EC7C2D6F670AE9D762604CB0B
SHA1:	97E438CC545714309882FBCEADBF344FCADDCEC5
SHA-256:	7DACF83F51179DE8D7980A513E67AB3A08F2C6272BB5946DF8FD77C0D1763B73
SHA-512:	DD945FACE918EDF20B7283B7416AE7B3735269945E3F3E379E770425024C1DE1FCDC7CFB952381D295D0D1F58C8AB191FD29030F2051D10501557BD7BFBE3658
Malicious:	false
Reputation:	low
URL:	https://stc-zlogin.zdn.vn/fonts/fontawesome-webfont.woff2
Preview:	wOF2..............T....y........................?FFTM.. .`........P..K.6.$........ ..\|..L?webf.[8....m;.t.........c6.....>.S.8.{...]?....?=i..%...P......f85J.0..u....f...eB.\...E.l.....Aw..6...f..F...0l...M.`;i.O.U....k."=........./6../eX.q..vf{].-.o,.5.&.}.L..:...0.{.e..V3~....1Mh.M4:9jG..B......K...Y..2c.=..@..V+..=.g.;..%.q,..sYF.oj..D..t....wZ1t.S\...L.....k(...1CK.z.Z!.iM....zH.....D[gcN........E.~.j.VD..[../..TD..........<@.j.cl...}.s.g4...F.f.F..;...H...E...P.#I..1{..X....]..ps.........^(.S........N...1S.....$@..T.\..k"G". V.Z..gf?.{..D..8f............9....g.i.\..... .".u^.+....%...u.S...!.J.Y5.{k..j..J.....i....!..t."...v...C..0...p..as..g.3.....~3/.3.<s.....K...u..t.n.......tS.\|..].~..I* ...I......7y..EL@.B.%....TTT.zu\.....eb.bM..-f.?.... .Os$/.Y....u..7..F.Q5.F..........%.......b`...o....o....c...t..@7..{HK...P..9..(.[..&&..{...W.0e.....8.v.h.a..-..%./..wgg.\|.\E.x.^;H...D..(.J&......D.mo}..0.i...g#.i{....4.3f.;.m.......v{GbP...T.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators, with escape sequences
Category:	dropped
Size (bytes):	158460
Entropy (8bit):	5.361898118979751
Encrypted:	false
SSDEEP:	1536:85i/Cy2lHRP0b+suwsOnlvbHHmgIV/Z7EQ4Ta/6API95f5a1k:Mi450b+suwHnFnmLV/Z7Eck5f5x
MD5:	1F69620121C2930B16513C4B1CECF8C5
SHA1:	07928FB13505A3BB410655ACEC9E4C6A8F5DC5FC
SHA-256:	C389E7699227EB54624492D24BF8A7904B39B9420CF8EBFEA00401BB03D51CD3
SHA-512:	9794B3B557188B0B2EA7752A8D6F451617A09B985FA5645BFA792D6ACA3568FF26A3AE4DA62197EEF4063C4E471ACB79C0BFF1DAB36922BBD5054AEF737C97C0
Malicious:	false
Reputation:	low
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[20],{"/GqU":function(e,t,n){var r=n("RK3t"),i=n("HYAF");e.exports=function(e){return r(i(e))}},"0BK2":function(e,t){e.exports={}},"0Dky":function(e,t){e.exports=function(e){try{return!!e()}catch(t){return!0}}},"0GbY":function(e,t,n){var r=n("Qo9l"),i=n("2oRo"),o=function(e){return"function"==typeof e?e:void 0};e.exports=function(e,t){return arguments.length<2?o(r[e])\|\|o(i[e]):r[e]&&r[e][t]\|\|i[e]&&i[e][t]}},"0eef":function(e,t,n){"use strict";var r={}.propertyIsEnumerable,i=Object.getOwnPropertyDescriptor,o=i&&!r.call({1:2},1);t.f=o?function(e){var t=i(this,e);return!!t&&t.enumerable}:r},"1vzR":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var r=n("F1Ur"),i=n("uS0h"),o=n("rCOr");function s(e,t,n,i){return new r.Token(r.Type.map,i,n)}function a(e,t){i.encodeUintValue(e,r.Type.map.majorEncoded,t.value)}a.compareTokens=i.encodeUint.compareTokens,a.encodedSize=fu

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20260), with no line terminators
Category:	dropped
Size (bytes):	20309
Entropy (8bit):	5.5681787722589275
Encrypted:	false
SSDEEP:	384:eGamrofOSuRBIpWfPitEwNyepjcN4IHuCGuYbHns3j:naqSuRBIpcPI1ce+uCGzHns3j
MD5:	619AA8BE1F421AF034AA253D1FB919AC
SHA1:	BFA14AEA28F45C3E8510BE6C12D75959513E21A0
SHA-256:	1615E89F00FAB6B204F5DA74F58D6E64F932D01734D4AE9EDCD4F7A2D9CE5EDB
SHA-512:	4FA0F64A9BDCC2A7EF1782D041D4398A2B8E73E3A8A8BC78F81B054B77D57FC5DFD4B281E1F7E13CCFD5B88C5B121A86FFDCC4EA275BC210503E0E83B41162C5
Malicious:	false
Reputation:	low
Preview:	(function(_0x5946fe,_0xdedb66){var _0x17a4d5=_0x44ab,_0x4bcad3=_0x5946fe();while(!![]){try{var _0x41c6ea=-parseInt(_0x17a4d5(0x19d))/0x1(-parseInt(_0x17a4d5(0x1e4))/0x2)+parseInt(_0x17a4d5(0x1a1))/0x3+parseInt(_0x17a4d5(0x170))/0x4+-parseInt(_0x17a4d5(0x1ea))/0x5+-parseInt(_0x17a4d5(0x167))/0x6(-parseInt(_0x17a4d5(0x18e))/0x7)+-parseInt(_0x17a4d5(0x19a))/0x8+parseInt(_0x17a4d5(0x1a0))/0x9*(-parseInt(_0x17a4d5(0x189))/0xa);if(_0x41c6ea===_0xdedb66)break;else _0x4bcad3['push'](_0x4bcad3['shift']());}catch(_0x14b394){_0x4bcad3['push'](_0x4bcad3['shift']());}}}(_0x27ce,0xeb388));var ZaloLoginWidget=(function(){var _0x78b53e=_0x44ab,_0xaad793,_0x5183a0=(_0xaad793=function _0x3bbfaf(){var _0x533b94=_0x44ab,_0x420631=document[_0x533b94(0x1d4)](_0x533b94(0x18b));for(i=0x0;i<_0x420631[_0x533b94(0x1ed)];i++){var _0x2e6a12=_0x420631[i];if(_0x2e6a12[_0x533b94(0x192)]&&(_0x2e6a12[_0x533b94(0x192)]['indexOf'](_0x533b94(0x182))>=0x0\|\|_0x2e6a12['src'][_0x533b94(0x184)](_0x533b94(0x1af))>=0x0))return

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	155
Entropy (8bit):	4.689978990636976
Encrypted:	false
SSDEEP:	3:TMQCGGt5afTE6HvK7EjAX+XANJTt+dLxu+YEOhAumjHmIJyHORSRsIrANNLQGz:AnGUsJPKA84ANJTiLQEO+jHmX+STUNp
MD5:	C1A86675FC2EEFC2FE247F11E170E910
SHA1:	33ED659C6660804F875216C8CC7AD32A06158212
SHA-256:	061A4B5FE16852D2825D1F1C7B2FD3C0624EF78DB851476798F3592AAD565402
SHA-512:	8A56669CB0A6F70BBF2C28077BA4042186829A092CD74DED9038BB9ADDDFE51BCB3B49825F2E98049A2661FDA7644A24F753B9FD7DBE7D5C0CC79AFD111302C6
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/js/conversion.js
Preview:	function adtima_conversion(e,t,n){var r="//log.adtimaserver.vn/rest/conversion/conversion?orderId="+n+"&conversionType="+e+"&value="+t;(new Image()).src=r}

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (701)
Category:	downloaded
Size (bytes):	562124
Entropy (8bit):	5.716947704581203
Encrypted:	false
SSDEEP:	12288:6H9/NuWDZ0RNuXaKEEtGuU8BSyXHU9Tx44lY48ULxClk5lS6IcfEFJ+Y0WO:Iba7mo3TlxhfEFDO
MD5:	9639541C1F2502C70271D16F3FD63465
SHA1:	7B6947E122F068529A2790B9E22B6143CB7B7B9E
SHA-256:	2EE2AD8ED051F55FBA84E0A3AB94A37AEC30C7D58E5EA8FF476C6D3D97705CA3
SHA-512:	35A54CA9EF2AF14C8FE5670CEE6B20E286E633A76C58FE8A90336FF7FD04C3DD6EEB2812A0145492B4A2A83CCC6586279041D2CF56EC21F162F554F670ADD0AC
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__vi.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 46401
Category:	dropped
Size (bytes):	15648
Entropy (8bit):	7.9850788125959395
Encrypted:	false
SSDEEP:	384:bqdtHfO+4ez7i8Cdd+zrAYWsNQnfCQ8To:wJfOPW9nXWA2fP8E
MD5:	3026C4807DA56160F31BA19EABF46BCB
SHA1:	DA19C774A5298D0F23FA3CB0CE42C53232DB2DD7
SHA-256:	B37256E7FEC15E0F4CF02F4978FBA4E355C691721984A1F2D0693CDE1FDD90B4
SHA-512:	FF20A593370E22018F16C07277676D1398ED7C8AA044C02C42D3B9574E9F020BF2A8591E8FB9938A689365D4C8A721312DAB0F133FF9555B50536B327A49BDE3
Malicious:	false
Reputation:	low
Preview:	...........}{[.H....S..<.^...u.Q...LvH....0.F.2(1.G.!.......l.....L...kuUuuuU......_...y..f..$...X...q..''............^...~.......q...g..4...'..j..E<....$.I.6...e.7..z........a.<J.[y\N.A....8..KE.....$H.Q......z6.B1..G.Q3.e...y./.pe....E..y....;.u..._..W...us..Cn..a....l...]..."..Q.....Yk..r...7I.....`zq..VW.]f.e..g...........h...l0..../+.....lHwK...3MJg...a..k.OWK=Cq._..W...F.xu..o.l!..4T...qT..t2...:........z.dTz...e.1F.......qk..MF.F.6..f...7.lc.....Y.4I....VK.WJS.:0..<7....JxC}..5...S.J.<@./...i..D.R.p.geF$.>....T..P..-.1..........Q..?............ez..s..s.@.nvZ..w...g...c..A..O...4.... +....FI?n>..Q...:..]T..s.."n...t-(....y...,-J ../..4.Jw.<....2..o..e.z.6..8..\..)....W.p&.M......<.P..q..q..o.A...!......ma.7....?<..{..dR.....,Q.t..z..+a....=Kd..G/_...}._.G .#.im....9..5u$.\(...q.9n^.L...(.8\|.&<..._..w..<...Q@4.2JF.<v3......,...p.....Z\|...fi.n...=x>%..M...U.A.~q>.o.O..$.7u...l .b......d~....y.K.I../~..4.g..6S......Qv.~.'e..

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmapNBtVjZn2BIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1630)
Category:	downloaded
Size (bytes):	3899
Entropy (8bit):	5.660159215471356
Encrypted:	false
SSDEEP:	96:zI3xra1vdaaiLmApS1iqaebVTXZxFXjJ+Dw7ky:Ixra1vyg1pxFTTP
MD5:	1E7300F2CEBC15CC2C5FF86820EEAD36
SHA1:	29F7A31A558E9ACB413EA058F10D6C474D0E190D
SHA-256:	A7526BBD735857169F3540C3F73C12DB882BD24A68DAFB1BBB964E06C70F0D3E
SHA-512:	1C5D43D4F9A8C76CF0D3A454506997C9DC058A680BB0C62152D4D93D857FBB81AF08F7861B5021E5FA3B058C73591AFE0A9CB3F1B1DF0A022C7142FA0E47CA67
Malicious:	false
Reputation:	low
URL:	https://chat.zalo.me/
Preview:	<!doctype html><html lang="en"><head><meta name="google" content="notranslate"/><meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=0"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta charset="utf-8"/><meta property="og:image" content="https://stc-chat.zdn.vn/images/banner/zalo-thumb-link.png"/><meta name="description" content="..ng nh.p Zalo Web .. chat ngay tr.n m.y t.nh. Zalo Web g.i h.nh, video c.c nhanh l.n ..n 1GB, ph.n lo.i kh.ch h.ng, qu.n l. nh.m ti.n l.i."/><meta name="keywords" content="..ng nh.p Zalo, Dang nhap zalo, ..ng nh.p zalo web, Zalo ..ng nh.p, zalo dang nhap, zalo web, chat zalo"/><title>Zalo - ..ng nh.p Zalo</title><link id="favico" rel="icon" type="image/png" href="/favicon-96x96.v1.png"/><link rel="apple-touch-icon" sizes="57x57" href="/apple-icon-57x57.png"/><link rel="apple-touch-icon" sizes="60x60" href="/apple-icon-60x60.png"/><link rel="apple-touch-icon" sizes="72x72" hr

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 29307
Category:	dropped
Size (bytes):	11116
Entropy (8bit):	7.982213520209358
Encrypted:	false
SSDEEP:	192:CYYvSnYA7ib46VZMvm8rdCghv1NYnnPCCNfeeTBHlPifM9Q4M+V/3EGFje4:CYYqV7iE67MvLCUonn6yee2ft4M8/3/H
MD5:	69302BFEE8A87AAA5D962AE575DB885E
SHA1:	BA55A509ACB784DFBD9581DB9AE61B049D5CBD23
SHA-256:	DE3669CFA2FCDE5A714A625C26CF75A73F1B24BB0CBFBD4C4EE279AF0121FB2A
SHA-512:	1C4D59BAA7DCA6B3F2521FAC9846A955F8C34C094389AEAD775CFC66608B9F38FAAA4B8C702302AE00B61EEB12EECA6DE1DF6D29DC82E1D5F8F4AD8E8BF0B7BF
Malicious:	false
Reputation:	low
Preview:	...........}.Z.H....G...!@b#..i..v:p..l.aX!...Y.H2.m..sn.\......-..L......TU..~........fn....W.....OS....q.fE.j....Y.......vz....f.FQ.Z-.....@\|......"..,...K.HN=...z...U~...6.][-.v..+fY..W.3...F...}u...3.Fvq.]9......GR.....q..u.z../.b.P....g..-.'.~.~.S^[.G.o.37.B...C_-....../.g..\|.....<..).'>l..e.M.zx...l.,0_f.c.%...T'}.4.I.VK\|zEz^dQ2....7..u..x.z.O.=...{..f....kv.r.c...8.n.h.l..S..}..A.>.....j..W..\|..4........Y.;4....X.....`.....q.y.]o.....%..3J3.cS#J...I..PD.66.q..Zx7Q2..rS.Qh..&...R/.v..-g%.../z575"....U..[..R.ut$r....,-R...m..<$.-.1.o.9...i.......}..@X.8.t...Su..4t.?.......3Ep...D...M._.9.Z.w...f.. .>.Z.~L..Q.E....2...A1WK............w.....3/.S^w.E.$!.l2.......u..X\|.DbA+.b......{K6.&...t..[.q..QZ.......Y.....e..@0..i[.(o$i...F$......5.......k*._...u..".b....{.X=........n...u......\|...$p.+p.....E.flLXq...i...`..".$..q#\|l.5A...C.....q...]..c...8vY\..[wf.,g..P/.<%...!..f.q...t......}..8..m..]<I..?....?<>......>.......O.N

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	825741
Entropy (8bit):	5.81933299045619
Encrypted:	false
SSDEEP:	12288:UXwZ3/4QRO2ir2zorZQ6MjsyuRenLMbhUsaURbLNRej:zl4QRO2ioorZQ6LyuReLMbKUR/Gj
MD5:	31B3CD5553686E0CCC586CB791AD18E3
SHA1:	4956DE2B0C55A66760815E703C7E97879B9F167F
SHA-256:	5E4744634652744BDD4FFC2D6A34182E3CEA7E4EC079EC912D041EB2BE8D3E46
SHA-512:	AAE24A4F461349A9B22667D5CB2BA7D31B10D18BCC82EFEE3A851F2EF854B9F0491828F5949863B1780DFE8217A49BDCAA157B63A0364E0C344B71C45D68FF5C
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/lazy/default-embed-render.964d9cd9be2140add15d.js
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[0],{"+7Kn":function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"d",(function(){return i})),n.d(t,"b",(function(){return o})),n.d(t,"g",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"f",(function(){return c})),n.d(t,"c",(function(){return u}));var r=n("N0Be");class a extends Error{constructor(e){super(`[MigrateActionManager] An action handler has already registered for ${e} action type!`),this.name=r.a}}class i extends Error{constructor(e){super(`[MigrateActionManager] No action handler found for ${e} action type!`),this.name=r.d}}class o extends Error{constructor(){super("[SecureKeysToMigrate] Invalid initialized data for SecureKeysToMigrate"),this.name=r.b}}class s extends Error{constructor(){super("[SecureKeysToMigrate] SecureKeysToMigrate hasn't been initialized yet!"),this.name=r.g}}class l extends Error{constructor(){super("[SecureKeysToMigrate] Inva

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	37087
Entropy (8bit):	5.355696427946384
Encrypted:	false
SSDEEP:	768:ZnNX0C+FJAxTMG8BCIDJAfs0N4bsHkoaLeBpo+vhdGn1ueqLLuf:BNktXWTMzoaJV0N4bsHkoaLeUehdG1g0
MD5:	CBD60995C0967EEF79E6C5D76C434C68
SHA1:	CA0BB0141DDF0782AE9B10F09C1CEF8897A7FC73
SHA-256:	E6EDEA43D9D5432A13DA6217D786489E5650EF0FCFD7F2735B29938ED73EEAF2
SHA-512:	BA1D9879749CAFA5B78A7B0A1A83DD7E7DF224F6C628D8AE0A4B4F1E2719F227AD6893A74675CE6A02ADC9ECC7B273514B4D4769969AF549EA35B5621F219454
Malicious:	false
Reputation:	low
URL:	https://wpa.chat.zalo.me/api/login/getServerInfo?imei=ee44923a-15e4-45a5-a33f-405cab4e5851-22210ca73bf1af2ec2eace74a96ee356&type=30&client_version=645&computer_name=Web&signkey=7500a0b60093164461658cde9d2b7447
Preview:	{"error_code":0,"error_message":"Successful.","data":{"server_time":1730389815,"setttings":{"authen":{"passw_rules":[{"regex":"^((?=.[0-9])(?=.[a-zA-Z]).{6,32})$","msg":"M.t kh.u ph.i c. .t nh.t 6 k. t., nhi.u nh.t 32 k. t. v. bao g.m c. ch. l.n s."},{"regex":"^\\S+.*?","msg":"M.t kh.u kh.ng th. b.t ..u b.ng kho.ng tr.ng"}],"encryption":{"enable":1},"login_scr":{"flag_login_gr_has_uid":0,"flag_login_gr_non_uid":1,"enable_badge_login_pw":0,"enable_entry_login_pw":1}},"features":{"sticker_post_typing":{"is_enable":true,"delay_to_close":2000,"mouse_enter_delay_to_close":7000,"mouse_leave_delay_to_close":1000,"is_enable_hold_match_kw":true,"debounce":0},"event":{"link_event":"","icon_event":{"selected":"","normal":""},"tip_icon_event":{"VI":"","EN":""}},"lan_friends":{"throttle_get_same_mac":3600000,"throttle_get_used_lan":43200000,"throttle_get_api":20000,"interval_submit_data":0,"interval_submit_data_v2":43200000},"retry_config":{"settin

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3913
Entropy (8bit):	5.031392615429378
Encrypted:	false
SSDEEP:	48:/SaxHlaEaDHlaEauX3a2HTDdndJdgysAxfDne0aw243MrsfOIIkFVh+1MU:hxFa7FaGX3a2VndJdHZk/U4UFc
MD5:	B3E402E25FCAF6D658F3C54A3BCC0B59
SHA1:	490E789F906BA6C5847A10AB4073D43CED6F449B
SHA-256:	AEC30E8AE56BDB570E6227E19AD189DB7466F5A3810E92A32176865DC6F37FD6
SHA-512:	CD9335EE780E9B3A9718E9698A2F7611E913379C06AE309033D6ACC67CCB9BC80657561FD1F9BA025EB3C7DCBBB154BACEB4AB75CC001DB23290C2E9FFDB5394
Malicious:	false
Reputation:	low
URL:	https://stc-zlogin.zdn.vn/images/banner_icon.svg
Preview:	<svg width="77" height="68" viewBox="0 0 77 68" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_763_16477)">.<path d="M67.5 14H9.5V52H67.5V14Z" fill="#ADD1FF"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M10.5 15H66.5V50.9H10.5V15ZM7.5 50.9V15C7.5 13.3 8.8 12 10.5 12H66.5C68.2 12 69.5 13.3 69.5 15V50.9H76.5V52C76.5 54.2 74.7 56 72.5 56H4.5C2.3 56 0.5 54.2 0.5 52V50.9H7.5Z" fill="#54656F"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M10.5 15H66.5V50.9H10.5V15ZM7.5 50.9V15C7.5 13.3 8.8 12 10.5 12H66.5C68.2 12 69.5 13.3 69.5 15V50.9H76.5V52C76.5 54.2 74.7 56 72.5 56H4.5C2.3 56 0.5 54.2 0.5 52V50.9H7.5Z" fill="black" fill-opacity="0.6"/>.<g clip-path="url(#clip1_763_16477)">.<rect x="21.5" y="31" width="34" height="34" rx="6.93204" fill="#007BFF" fill-opacity="0.3"/>.<mask id="mask0_763_16477" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="21" y="31" width="35" height="34">.<rect x="21.5" y="31" width="34" height="34" fill="white"/>.</mask>.<

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 179364
Category:	dropped
Size (bytes):	62073
Entropy (8bit):	7.996213365624898
Encrypted:	true
SSDEEP:	1536:DnfssQyLXF1DS4MDqb/SVjZvpsZGDpg+/hfMTS5NwChNON1cz56:Dfss/L11DS4lb/qVvp4GDpg+pfMYxicY
MD5:	A839EA0E54A4FDDF43E3FFF6FFE4C1F3
SHA1:	9381C888E001B85B2BB1C032F7F26ADC4CFA1633
SHA-256:	2E693CCE4403F86DB334D715623697CBB8D0881309BC1C6CFC8D33CCEEF2ABDA
SHA-512:	142BE2D3D2F789CE5F2A42FF9421456E439AA0E3B907C90779C465CB59E038D3784A9DF58C3C055EABE8A707916F45F31EE77640ED95947DA4C0B8B7E25E39D5
Malicious:	false
Reputation:	low
Preview:	...........{w....U...H.e..@..@A4I......Fg...4.&."..n..(x...'N..y;.;..q...V...O.V>..'.o.]U].hR..s}..9#.P].]...v.:>..[......k;...]g....O..E........o.m....\|..%.....N.....Wc?:.....ox0..;w..n..Ok..$.A.V...[/........v..V.......$.+.n...(N....u).{.tbw.k..c.z:]Q.\|....j......~..s.,o.6F]....n...]=......6"J....Sn... .w.h..............A.g~...)...j..$....p.W..hx...H..4.......z.-.....qv..d.;.{Se...OT1]m.).M..b.(.;)V.......;.^!.._..F..F.........U....jp...R..N...5....n.z.:..7...[..L...<..a....Fq...............A..h.8..>..j5._1-ih.Hcsa....U.....S..`0.+u.........hI.(...q.F..../yq.j..]@xKm... M.I..w.0...^ZOR/.z.w^?l...m.s..+.t[.k..so..K'.-5.7..5x...f....v._k$..W..z.6.....v.v...V....`.).L..Bk...B8..VP..M..."..:...>u..X4B..2.a.9...0I+^..>..W.4j$..t.7.....Ug...z....b.....U.n bj..,.ai.. ...Qy..W.....q...?..'W.......J<.].]....T.s...... L.....s..T.P./.j...mO.......d....P:..wH.(...`..S.FO.`..E}....._..?.<8..~..D.r....y.>.....O+..9..~#..7.........

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 46653
Category:	downloaded
Size (bytes):	14816
Entropy (8bit):	7.987359914300124
Encrypted:	false
SSDEEP:	192:uI80w0LJpf556v0WlZpq25BIcdtiq3R5sFlOdoOfcbfH19Dz7RpVPzjANA6waeSP:WN0LbxgJEkfrbOlOY993HVPgOtiP1VGI
MD5:	A762FCAE63D6AE8BEA624699121F4DFB
SHA1:	0A9404FAE0625E6F4A93A4277C2F1C8342C2BFC1
SHA-256:	D29793EA4CD2A20C7B1B37CB0964D85251A9F9E0E7BDAA312366F0B7EFEEAEBC
SHA-512:	67A7DE89DC27D0110033025BAE0DD0B8F112FA07FAC0E111D01805BF507E3B7E6FC2B7C9DB9D5590EACCA530222A4DDC7FFC06C11DEC96C142A2D893D500BC69
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/js/bootstrap.min.js
Preview:	...........}{w.....)@....GT.M6.a...c.......rq `(L.b.` Y!........Ey.s.$."fz.Q]].~..j....(.u../[.~...{..r6N.....r..x.>+.Y.tR.v..b.i.......\|.....5.eAwG.rV..A?y9...^..._.N_.....I.(W..M..x..\|.-...YL.U....Sz{7/.....l....xp~5..^.S~.iSO7."......2+nZ...M...-g..ck.}l.V.b.i;.<_......j..ek..m....~....l..Z.b2.L1.w.M.. .u.....7...E...}..ZY.Lo.._.F.J..y^v.v............g..._....e.O..=.#....do.{....{z.M.w_..q.g...............V9./.g...B1.....Ze.L...&.S.3..n.U..d..r..[..z. .-.....p`...,.U......slf.`....b'..o....M...mp..Y..<=,{.=oen.Mm.=[l....7.....3.......@.5vT.!.....)..V.j.[6`.Z.e...H.u..t.*.../x..d.....d.er...#....8.M..\|...l5~7.z;/........4...o....C7A...c...m......^..F<...p.....vJ...cOq..n3....Z<.. 2...Nc.....E.!...p.....b.-].....4...2..i:]..-.v..kz..Im....A....4J .......s.&E..Y?. ..Z....:K...}9;X...a.q....y.7.......4C.........q...yjH.w.D7Z.!0..\~.N..O.$.><(...d.....ge'D.E7.0x.FI....&+.hl.uDg..{H...d..>%\|...v\Nf...w.y;......\.v_tA...........#...)

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators, with escape sequences
Category:	downloaded
Size (bytes):	158460
Entropy (8bit):	5.361898118979751
Encrypted:	false
SSDEEP:	1536:85i/Cy2lHRP0b+suwsOnlvbHHmgIV/Z7EQ4Ta/6API95f5a1k:Mi450b+suwHnFnmLV/Z7Eck5f5x
MD5:	1F69620121C2930B16513C4B1CECF8C5
SHA1:	07928FB13505A3BB410655ACEC9E4C6A8F5DC5FC
SHA-256:	C389E7699227EB54624492D24BF8A7904B39B9420CF8EBFEA00401BB03D51CD3
SHA-512:	9794B3B557188B0B2EA7752A8D6F451617A09B985FA5645BFA792D6ACA3568FF26A3AE4DA62197EEF4063C4E471ACB79C0BFF1DAB36922BBD5054AEF737C97C0
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/lazy/vendors-web-startup.ec7e6ea49b1c2468ba50.js
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[20],{"/GqU":function(e,t,n){var r=n("RK3t"),i=n("HYAF");e.exports=function(e){return r(i(e))}},"0BK2":function(e,t){e.exports={}},"0Dky":function(e,t){e.exports=function(e){try{return!!e()}catch(t){return!0}}},"0GbY":function(e,t,n){var r=n("Qo9l"),i=n("2oRo"),o=function(e){return"function"==typeof e?e:void 0};e.exports=function(e,t){return arguments.length<2?o(r[e])\|\|o(i[e]):r[e]&&r[e][t]\|\|i[e]&&i[e][t]}},"0eef":function(e,t,n){"use strict";var r={}.propertyIsEnumerable,i=Object.getOwnPropertyDescriptor,o=i&&!r.call({1:2},1);t.f=o?function(e){var t=i(this,e);return!!t&&t.enumerable}:r},"1vzR":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var r=n("F1Ur"),i=n("uS0h"),o=n("rCOr");function s(e,t,n,i){return new r.Token(r.Type.map,i,n)}function a(e,t){i.encodeUintValue(e,r.Type.map.majorEncoded,t.value)}a.compareTokens=i.encodeUint.compareTokens,a.encodedSize=fu

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18308)
Category:	downloaded
Size (bytes):	18928
Entropy (8bit):	5.641565573664448
Encrypted:	false
SSDEEP:	384:qohDrghXUPMCvumkDNYuZtlI5SJr9eY/l4naes/bAgdZ2A6Hr0g:jfyUwmydVr9e5aegd2A6HH
MD5:	14829D397567F087775A174778343B90
SHA1:	DDB522B447CA0DE357BBABC7A32A906CA619C032
SHA-256:	6F9D05882DC626A84E3E41728F81D871A8C935B5735C9EA7570D177CC90767E9
SHA-512:	9B8BA9463A744CFF9C644E19B07D3D883D9CEB95A232D9E63EC51308A0388324D0C9E34D5538C2773195E5E70158E166DAF7B83ABCDE23D47D0686397886C5B9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/b50FiC3GJqhOPkFyj4HYcajJNbVzXJ6nVw0XfMkHZ-k.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var F=function(E){return E},p=this\|\|self,t=function(E,T){if(!(E=(T=null,p).trustedTypes,E)\|\|!E.createPolicy)return T;try{T=E.createPolicy("bg",{createHTML:F,createScript:F,createScriptURL:F})}catch(y){p.console&&p.console.error(y.message)}return T};(0,eval)(function(E,T){return(T=t())&&E.eval(T.createScript("1"))===1?function(y){return T.createScript(y)}:function(y){return""+y}}(p)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var G=function(E,T,F,t,d,p,J,Q){if(((((d=(J=(p=(Q=(E\|\|T.C++,T.i>0&&T.S&&T.hP)&&T.l<=1&&!T.V&&!T.J&&(!E\|\|T.Pu-F>1)&&document.hidden==0,T).C==4)\|\|Q?T.R():T.I,J-T.I),T).s+=d>>14>0,T.h)&&(T.h^=(T.s+1>>2)*(d<<2)),T).H=T.s+1>>2!=0\|\|T.H,p)\|\|Q)T.C=0,T.I=J;if(!Q)return false;if((T.i>T.g&&(T.g=T.i),J-T.B)<T.i-(t?255:E?5:2))return false;return c(T,360,(t=(T.Pu=F,S(T,E?157:360)),T.P)),T.W

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21769
Entropy (8bit):	7.9781588640804255
Encrypted:	false
SSDEEP:	384:1xmT206KK5oHdDmPQV8itJ9KOkl/UOOvZkdcHStEh3yKqEQzbI8VWS5IY8r:TG9dEitJcxUbrHSShCKBQzQSLk
MD5:	A558F2333229B9A2A8F6D0CF72A45FF0
SHA1:	2B0EB15F16C1A3343743966310FF7766289B0DA9
SHA-256:	407603ACC33F3F22C5EC5DA2380BCBB61E6ECD41A350297CBA5896D2C452C01A
SHA-512:	0FFB09759AB0DEEF54108559C2E41AF3823814FC3A3A35DF18FE8F952AE93BAF6C12CEAC46F45555CCC38F9ABAA9037F23C677B60F100646457AD3F0801CB152
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......pHYs.................tEXtSoftware.Adobe ImageReadyq.e<..T.IDATx......y&..S...7mh.$.. LXm...q....oI...8.L..3....<...Y,'..........x.ml..f_...............Ug..,U.....H....owuw............t$..NA:..$..H...t..IG:R..#.)@... .HG..t.#.H:..$..HG..t.#.H:..$..H...t..IG:R..#.)@... .HG..t.#.H:... .HG..t.#.H:..$..H...t..IG:R..#.)@... .HG:R..#.)@... .HG..t.#.H:..$..H...t..IG:R..#.)@..t..IG:R..#.)@... .H.k=2...T...Z\|..c...}x..>.o....U.@......{....B.^Aq38.......':.x...g.X4(6...m....}<._..oO.rz..H.k..&...:....g.._.re.K.........K/...6u.`...#/...!..lf...+P$0...0B.u.....A.....D.b\|...-.......o.A......a...%..xi...I..G..\...N.....$......vV^.\|..@.}.oi2.......u.D.@x...0[.....!.df.....s.i6o........W]..........Y\|.h.....t.r...w.... f..9.MbxE..o..L..H..;.4.).....I..l..6{i0.(..{.%..]....]&%.jd..Q...[_6.l...#(.v.PI?......ze... 6.&~.../#c.#W..!.....#F..y`c/.xh..(w .o>M.AL.~....[@......Q..A..I.(.......Y...`[P.l.&....j......@.l.......i..w.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	846
Entropy (8bit):	4.394543063807678
Encrypted:	false
SSDEEP:	12:27Dm1F0dD6NifDsdKNifDSNifDIu3uNifDF16NifDuNDNiixmA:27Dqe6ILs8ILSILD3uILP6ILuDIY1
MD5:	B6C30940FD88C938005FA6F06E03903F
SHA1:	C1943E772FE56709015A2BE40AED9DE89EFC08D7
SHA-256:	238A138D6A84AB8A7E6818ECCE31540C6AA9514D4C616D0452B4E996449A7D8A
SHA-512:	DD63EFB9628DF1BA7B4326517BB22096981BF570C642AEBE47662520EAF902454BF95D1D9723805B11C5D61D1D04704E28673CABF4961391707D7939C6558C94
Malicious:	false
Reputation:	low
URL:	https://chat.zalo.me/manifest.webmanifest
Preview:	{. "name": "Zalo",. "short_name": "Zalo",. "background_color": "#EAEDF0",. "display": "standalone",. "start_url": "/?utm_source=pwa_install",. "icons": [. {. "src": "/favicon-32x32.png",. "sizes": "32x32",. "type": "image/png". },. {. "src": "/favicon-96x96.v1.png",. "sizes": "96x96",. "type": "image/png". },. {. "src": "/favicon-128x128.png",. "sizes": "128x128",. "type": "image/png". },. {. "src": "/favicon-144x144.png",. "sizes": "144x144",. "type": "image/png". },. {. "src": "/favicon-256x256.png",. "sizes": "256x256",. "type": "image/png". },. {. "src": "/favicon-512x512.png",. "sizes": "512x512",. "type": "image/png". }],. "theme_color": "#EAEDF0".}

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65420), with no line terminators
Category:	dropped
Size (bytes):	504269
Entropy (8bit):	5.6841802123576795
Encrypted:	false
SSDEEP:	6144:CTNyfczFbADVpFKB13YMbeBHqdSnRnJm93nTYFcv43Cs+uR:C8aFY9o3cHsa
MD5:	FD30750BB977630D210D49564A8BDFFD
SHA1:	546D748F686322ABBA482FEE3CE763821FAB6939
SHA-256:	2D4474E2EDF6114E1A04C4434A8B3F0D2AE4EAD95172224B1E6D0BFD9A08ED7E
SHA-512:	C3BB9F7CEE26C5EB539E6EE2B267F31E77B8398A6033088EE335E7CE8856651655361DEB81F8832DD6FF52F24B55F50D840D5C0A61C0BD0869F04641674BA463
Malicious:	false
Reputation:	low
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[2],{"+6XX":function(e,t,n){var r=n("y1pI");e.exports=function(e){return r(this.__data__,e)>-1}},"+wdc":function(e,t,n){"use strict";var r,i,o,a,u;if("undefined"==typeof window\|\|"function"!=typeof MessageChannel){var s=null,l=null,c=function(){if(null!==s)try{var e=t.unstable_now();s(!0,e),s=null}catch(n){throw setTimeout(c,0),n}},d=Date.now();t.unstable_now=function(){return Date.now()-d},r=function(e){null!==s?setTimeout(r,0,e):(s=e,setTimeout(c,0))},i=function(e,t){l=setTimeout(e,t)},o=function(){clearTimeout(l)},a=function(){return!1},u=t.unstable_forceFrameRate=function(){}}else{var f=window.performance,h=window.Date,p=window.setTimeout,y=window.clearTimeout;if("undefined"!=typeof console){window.cancelAnimationFrame;window.requestAnimationFrame}if("object"==typeof f&&"function"==typeof f.now)t.unstable_now=function(){return f.now()};else{var m=h.now();t.unstable_now=function(){return

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	80319
Entropy (8bit):	5.192969923980718
Encrypted:	false
SSDEEP:	768:zyDMIeClJ/movp0+K1PUtNdG7XVFaOa2HCayLGupjUXtvPIVfC2Biq2vEQoykY1O:Og5+NYXzczV6lxvLko0CqZiQ
MD5:	1C4C79D2C67D7817C2CA9162B49CA429
SHA1:	B6EF115AAC26E916B62788B99EAA056C72D780AE
SHA-256:	5C867122E02CBE45DBEF97D9C94732F8A8D6FCB79B69DC167CB8CCAAF62AA68D
SHA-512:	96F28A0777A5B571CA05281F228EB737656FB6156D10E4281FEA358908B8F082B9B51776F60F872E2A545E5736FCE36E590AC9A19E6CD4FD716D1841521DC120
Malicious:	false
Reputation:	low
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[4],{"+bgm":function(t,e,n){"use strict";var r;n.d(e,"a",(function(){return r})),function(t){t.Ok="ok",t.Exited="exited",t.Crashed="crashed",t.Abnormal="abnormal"}(r\|\|(r={}))},"/STj":function(t,e,n){"use strict";function r(t){switch(Object.prototype.toString.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return v(t,Error)}}function i(t){return"[object ErrorEvent]"===Object.prototype.toString.call(t)}function o(t){return"[object DOMError]"===Object.prototype.toString.call(t)}function a(t){return"[object DOMException]"===Object.prototype.toString.call(t)}function s(t){return"[object String]"===Object.prototype.toString.call(t)}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return"[object Object]"===Object.prototype.toString.call(t)}function p(t){return"undefined"!=typeof Event&&v(t,Event)}function f(t)

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 22062
Category:	dropped
Size (bytes):	8564
Entropy (8bit):	7.977079436055888
Encrypted:	false
SSDEEP:	192:Vd483ufKEOaxeoJQZyS2szcYK85zH7AjzYu7EMN:V6IufKEHEkQZyhYKC7YzNN
MD5:	DC05BC5EB8C82D324B302253A6D19E9B
SHA1:	D19B82D9FCF13BA57BB90DDFB3B43A1468FB29B6
SHA-256:	10C61A5ADDDF1B296B299BA6BBB408CF9CF4B247C9BAC6B8B43DCF7AAF15A22A
SHA-512:	0014C90A6CF2BC1737F1F2D5954CBEB1512F4CF6885A0C18B1C9B27C630D54228B835693F81DE62AEE136A44CF0A3958B25EC27060E41FEBB702E9AAAEE971F8
Malicious:	false
Reputation:	low
Preview:	...........\ks.H......M.JA.`;N....87O...N2....4..$Fj.`..s."..;.....U3.P..>}....n....Z.,I.8...n.Y}.....,......o...q. ..J..+.M.8...a..4....Z..-..v..&Q.cP....}.u...\|~t...q.".&..7.V.>..a..r....I..tG....>L:.;....V....2...x..v....W.}0.=..O.x.ub.a.Q.4..n#.h..(.EK.........f...!...1...;..F].....p?N.~.j.7....C..N.{...f=..>.6.,....Y...5.....Vm.N...........S.......}..o[.{I..^..Q:..T.X....kU...yQ\|g;.Wj.1.I..... .M.......q.V...r{..]#.....:v"..,...1.{%...........K.....r..`.k{.......{a...t.....U.~.u.Ar...$..N.rB..&....<j.Z...g3.I..$Q...T...b.7...T....;...y....#o..A..Xe.!eA..,...l1.l.x.d.G..\|nY.........\|.jGXZ..Rz........!.D..m.(q.....>`.......=.....[..Oa.Y.p.....2.7..yv@G>.SO@].T.lo...=u.......NqPSv.~p.!q.-..q...x.".:;..$:.".....u.d..S....).j.. 5..N.a.\|...g.Gv...........61....0b..k..o.&6.q...>..>.....b.[.".5qA.o.z...>..a'....KaT...:....o... ...c........ _......!M.}.z4...8o...0.0H...f..w...'e.m .pD.Y..m].V.2.....j>u.....O......y...gW[...[

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2612
Entropy (8bit):	4.640499180893672
Encrypted:	false
SSDEEP:	48:ctGU0h/czxMJcBtAsKUNll8UQM6gdrnOBXoWbgkhIxFiZhu1u+JiR:u0h/czP3iPHgmhB
MD5:	4BE5AFD86947EABEE5899A05D7516A72
SHA1:	BC564E5FEA5B7B0E4B36DE102975A19C01AA8163
SHA-256:	7F562CBA54A7148615068FA057DE932BB937340B3653079007F667001F0F499B
SHA-512:	7D06F0926BAEB6FA9A79081AD67CAEA72AAEB4B3293C8537D9A3736C13C848C0FFD17C6678526DB701931830F41819429397E024FF43720C0BFD3867E8A4BF65
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="104px" height="39px" viewBox="0 0 104 39" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 49.2 (51160) - http://www.bohemiancoding.com/sketch -->. <title>Log in</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Login-screen" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Log-in" transform="translate(-158.000000, -44.000000)" fill="#0068FF">. <path d="M160.800392,51.9047451 L160.800392,45.902 L188.813333,45.902 L188.813333,46.7561176 C188.813333,48.349451 188.600588,49.6498431 187.565882,51.1757255 L187.441176,51.3180784 C187.214902,51.5751373 186.68451,52.1767059 186.432549,52.5037647 L168.428824,75.1155294 L188.813333,75.1155294 L188.813333,78.3165098 C188.813333,79.6427843 187.738039,80.7178824 186.411765,80.7178824 L160,80.7178824 L160,79.2082745 C160,77.3596471 160.459216,76.5347451 161.0396

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4834
Entropy (8bit):	7.949662922226651
Encrypted:	false
SSDEEP:	96:05ppA4u3SVOuK781RdUIyZMLMyxw/1p3aOYSjxETOvseSQNkCi:SpOH7MRyp0w/2O/tETuNkCi
MD5:	CDF210850774AE3AEBCFEB2DEB9E82AF
SHA1:	929AA6E3491D8268E296D3FC84DE99749DBEADF7
SHA-256:	F1D8885B81A1DC1CE2121998B9D631296BE8827D4DE641886FCD888E0743A12B
SHA-512:	A9DD5F3CFA4CBCCF6E72E8DA0E4EAD71C0371F6F2A924177CCD9A4E65A218D28DA209762701A9AB5C09FA95E01BE446533A813DE5AAFF6A2D0FBA7F3216A0E84
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H.......F....sRGB.........IDATx..].......]9B.."h4...IL..."...y....P.E.]V..$..h.....K....'h..O.<..`@...Tb.PdA..e^..f...3.z..{g...w...W.....zU.....r2........!...5u..Lw.Ak......./(.DA..3..XR.........-.bIQ...h....[.....%.>...#o..K...@.P...z..XR....._A....^..A..(.o.....=K.x....%E.xK.=(H..x..bI@.(t.y.....$.".v(.BV....]...i...J.P..P.....[..H..J.4..:...r..&......L..b..z..GTu..E..H ._.j..m. x.)..<.;~............O.a\|..GoQO...N..(.O.8C,.....X(..e..FQ5oV....j.6Ro..CL...>...!Y......J..jN..p.R.2.!..i'.....q8...%..8..7.Wd..~.c1x)u.Q..8..80JA..0GQ.^../Y.d.H..T....h.........a.Qr3K..2......F...o.7.z......w.Sf..$.. 2..Fc .1.. ..<e.U.xE.dJ4./...E./.x)...x7..!..%....\|mjy.kY..'.}`8..<^..e..gz.J0.......I..mu.j.i$._.g...\e......C?;f.]S(..t.u.[.v.DS.)...i....6.x..V...:.P.I.3"/.@9V...CY`.0t..$.R=}.6.Q...z..D..%....mP..h..@.C.b...x..s._..GA.......5..n.......X..............:....TZM.B......E.4.my.\._.PJ.gC_....2}..r...X..P.y..U).&\|>...E38.`..L..

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.94313471080652
Encrypted:	false
SSDEEP:	6:YAiaif7H66nTzL3SdmTJa2HQvVfGuKrXJrO/60zH4dY:YJaCaATXSdOatvVqXJrO/6vY
MD5:	9E01FF370971B063477FD1C66B1B430F
SHA1:	719BF6830ACC73ECC883BE3DD05455648D9C93ED
SHA-256:	5B456CF89227A5BFB179E147AF6C46C368CF301E60002E6AAA750B4CFFEA79A8
SHA-512:	C01FE9111716003514DD339787C9D0E5992FD8E66BBF08D1BE38427EE32D75B2D19145BA003F0DF8FC0603DDCD038E315D456F480B155718FEDC7B1FAD6DA886
Malicious:	false
Reputation:	low
Preview:	{"error_code":0,"error_message":"Successful.","data":"fGLEqYASHAfbS11XozTjRjqRn8jn5xzQCLbMPGjStNFjGizfWNJuJjvFPsSWNLt/uWXIlC1B4QoU2nJYQ8mnlWcGQq8RIVPbv2VzKOdbxEExfzZk4K+bSgxuXsgOD47a7pabZ9hP/UGJjitmEAmVJ3pbrJA064e+ZLetNYSnDgBY0PGg7lukVTnlbyi125aIkR8WwquJDF+XbSYPf9Z2rCJQQL0FLuK72xOsuXORJdc="}

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	37087
Entropy (8bit):	5.35385396245147
Encrypted:	false
SSDEEP:	768:Z5NX0C+FJAxTMG8BCIDJAfs0N4bsHkoaLeBpo+vhdGn1uWqjRGuf:PNktXWTMzoaJV0N4bsHkoaLeUehdG18f
MD5:	3D026EA5F45A8E9D1525D36F9B01CD5F
SHA1:	83A086C170E2BD320055698845E1027BE3C89A0E
SHA-256:	274A6124C82581053DB5C9C8FCC8795739174989397B8711D4D05AD1922960F1
SHA-512:	27DAFFDA71156D985E8F9BD55EE2915E3DF9C51CACEB9CC7D9D9384A53C21E925D61D5B4E1134DAA83E004E78F52D2AF1C7818E5B14D541FE3EBA3131F814EE3
Malicious:	false
Reputation:	low
Preview:	{"error_code":0,"error_message":"Successful.","data":{"server_time":1730389817,"setttings":{"authen":{"passw_rules":[{"regex":"^((?=.[0-9])(?=.[a-zA-Z]).{6,32})$","msg":"M.t kh.u ph.i c. .t nh.t 6 k. t., nhi.u nh.t 32 k. t. v. bao g.m c. ch. l.n s."},{"regex":"^\\S+.*?","msg":"M.t kh.u kh.ng th. b.t ..u b.ng kho.ng tr.ng"}],"encryption":{"enable":1},"login_scr":{"flag_login_gr_has_uid":0,"flag_login_gr_non_uid":1,"enable_badge_login_pw":0,"enable_entry_login_pw":1}},"features":{"sticker_post_typing":{"is_enable":true,"delay_to_close":2000,"mouse_enter_delay_to_close":7000,"mouse_leave_delay_to_close":1000,"is_enable_hold_match_kw":true,"debounce":0},"event":{"link_event":"","icon_event":{"selected":"","normal":""},"tip_icon_event":{"VI":"","EN":""}},"lan_friends":{"throttle_get_same_mac":3600000,"throttle_get_used_lan":43200000,"throttle_get_api":20000,"interval_submit_data":0,"interval_submit_data_v2":43200000},"retry_config":{"settin

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (701)
Category:	downloaded
Size (bytes):	562124
Entropy (8bit):	5.716947704581203
Encrypted:	false
SSDEEP:	12288:6H9/NuWDZ0RNuXaKEEtGuU8BSyXHU9Tx44lY48ULxClk5lS6IcfEFJ+Y0WO:Iba7mo3TlxhfEFDO
MD5:	9639541C1F2502C70271D16F3FD63465
SHA1:	7B6947E122F068529A2790B9E22B6143CB7B7B9E
SHA-256:	2EE2AD8ED051F55FBA84E0A3AB94A37AEC30C7D58E5EA8FF476C6D3D97705CA3
SHA-512:	35A54CA9EF2AF14C8FE5670CEE6B20E286E633A76C58FE8A90336FF7FD04C3DD6EEB2812A0145492B4A2A83CCC6586279041D2CF56EC21F162F554F670ADD0AC
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__vi.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 629683
Category:	downloaded
Size (bytes):	234133
Entropy (8bit):	7.996067568942261
Encrypted:	true
SSDEEP:	6144:o+L8Tu9N4ED0Spms7Z51Iv0RGfbMJ/1ySbyuY8X:oGX42tZN5yc4jMJ/sSyu5
MD5:	3D5C2BE836AEE8346A8FA8479E94F16B
SHA1:	1F45B3F4CFDF1D03B2EE491CAC4BBDFEAA31B74E
SHA-256:	F4DDC940B69AC675AE773156CBD747D2AB11DEA88F8C6923E2F568ED717B9124
SHA-512:	7D9C0E4F9FE315481F6E807FB804DB694E35347E35BCB0B24A531720192124EEAF2F27A60D8F92EB9A7FAC44A06390290077B10944D471F46C48E73DB43EA1E7
Malicious:	false
Reputation:	low
URL:	https://chat.zalo.me/libs/libsignal-protocol.static.js
Preview:	............wSW...U..>.)..m..;..J..t'.....P....p..hY......y.Z..N.>..q...G....Zs...\|.\kogp1{>}q:.>.\|2Y..f:........bz......./;GG....<i...g..t..iWG.......\|6....x...l9]..&o...?.8....g.?....t..a......>...d2..w......l......C....?O.....s.9\|1_.....o[....7._;.....2.a1.3],..2f...Hy..gm.\|...?..o.=\|....O..}\|.....O...:=Y.&.wo......k...........>.S>..8.....hr....o..............\|....v..Z...?g......d8\|..9...t.\.p'_'.....ms......b....t9.N.....F.G..5..b.$...0.....C.~..v8xq>............;o.\|.,XL..o,2^..N'}..l.x}\|v.o.\.X..7.w.......o..o....l........\|~...1m:q..Og.......x..3....'..t4.=..!FK...,v...K<.r8.zO.........Fo.f.....OvG.yg.K...}y6.......gC.D{..H./^..s6..\..j.......9).rq.z.9...3.zsv\|2.~...\|.r<.l0:h.l..\..6..2..t..:6X...t.<.$x.......1.?....U..L.5U.[..V.@YL?9.x.jy....Yl0.n"...d8.W...............h.\|....5}...g...(_......\...".0..._.......h.zp.q..~.....1b0.S...h.......[......VPq.....+...?].x1]...g._.~D.;........ ..KRW..?..Uf...C...w9./._...P.....5....Veguw...

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5867
Entropy (8bit):	7.947823103024594
Encrypted:	false
SSDEEP:	96:G85qqqruuThO3+To/IbvGmmc7qqGMyHzRqTK4NjHOV+b3GER60uvsJpz/Mjsqq+:G8qqqjhOuc/aGmmcOqrmz14F5d6fEJuv
MD5:	1EFED8A8AD8D61D085528D05057E275F
SHA1:	C36C3B0D020BB5519E881F00E779F01346816AD2
SHA-256:	A22A42976905B60840DD2D565C742E4266D9CC86FA20EA3CF38FF7C077C9DEBC
SHA-512:	BE37C125696B8F7E412F40A196EEB6875AFBDB0A775AFB7C2D518F6C7DDC100D203228BE7159535D5066BA0B9F11CC0204FF2AE8B3B104074D4872533FC612E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............F.....sRGB.........IDATx..]......{zVf...M...M.!..bT.....c..JD...<..1....3.$............2(.,.....,..L/9g...^.nUu.r..UW.........)....D@" ...H.$.....D@" ...H.$.....D@" ...H.$.....D@" ...X.....L.vW .5..p9......W s.H.s8.....J:~9.....K..+......9.Ey.w.f.....?......./.....w...w....'<..]..L...H..7.>...y..}OmB.8..o..T.3.........~..U..d.O...z..)p$M......i...^..V.k....\|s.L.MNN^OvJ.qf.k..4..+...u-e#j....oL"GQ]Y.Fk..j.....SSSS.....hz .e.Huy.2..+S.....A.+.Ki......})).Ij..3me/..Tu.?u!5Y....\`.C@.T=...X.Pm..j...6.....H.CO\..R....Uz..".z.$..p....7.D_WTT\H~l.,. ....!)}%......?.....t..."Q....jjj...Idu..L:.....).1......._./.........D&*..zi..@..;.....yRiX...%yl".:........i..:..@.~.;g..f..q/....d].dH.......Eeee..]....@..z.....b$....{.3.C.5..u.{deeM.p,Q_.!.M;.Ii~.h.... +./..,.iiiw....m6..o...pwz....j1.&1~M3`R...;77./....7......+e.Q.~7.H.u).A.f./.o....TSf.@N......(......&#U!@]...j...<c....W.I..mC)..b...t....._STTD.H.b....`4Q!.H.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56261), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	585915
Entropy (8bit):	5.433600491965067
Encrypted:	false
SSDEEP:	6144:czbIFUKlM56tqu6n2EFtqQ9SQh86U8ZNz2+TQcG67c:czBK3K1QQ9S0pZh6
MD5:	D5A5BF6ADB03D66B4056A1BB7A97278D
SHA1:	1C20287D3F97563C7D97B8E749365C1F3D550C3A
SHA-256:	DC52BFBCAEE1C7D8F7D604F994D857FDBEF692DA78448FCF89A1AED6E0CBB0B1
SHA-512:	3403F70C161DBF7388A5BFD2A7701BDC1EF088CF7C2135B008886B357730A4F15E6688EA487A2A0C5F68F7A9C4311CAC9E95FE20D089E7A1B9FB4AC3BC080D65
Malicious:	false
Reputation:	low
URL:	https://stc-zlogin.zdn.vn/main-5.5.7.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="./",n(n.s=655)}([function(e,t,n){"use strict";e.exports=n(647)},function(e,t,n){"use strict";var r=n(

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	5.004082299330079
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWpm:PLKdXNQKzLQum
MD5:	39522BE8FCBDBC715C2398E95E8E393A
SHA1:	D5D14FAACD03919B3D979DC9FE9B0E0841918D2A
SHA-256:	273C4D7E26BBD551C69B037B39837B8A3AD29F6DC69CC688DC6C0BEE96B95CFF
SHA-512:	4DB6808625FE79B5584CC92F5C5797D91CEEF707704AECB8B8EB7916E323C02123CFAC83F6E23E0CC9C25C371B3CC1DE32A05B41D10A3D2ACBD94C63B2B3101E
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__vi.js');

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	dropped
Size (bytes):	296678
Entropy (8bit):	5.592242002238273
Encrypted:	false
SSDEEP:	6144:vpmGbgBuWoBkx63x0C8Gp/n2Utu9BW24n1x:RvcuWoBVAEv
MD5:	41F9992A6BBAF507649AC0CBE34B1B9C
SHA1:	4F57F1CD1C920FFC5AC24A7D9EE15095894A8E8B
SHA-256:	5411A988CFC4CD92C261AFCA78C8568A5EE865C12480F15A30A45511EA4DFEA4
SHA-512:	5EBC07275D5D7ACD5FD05E619277150479C16B8324F29DC583AB2683E69A694D7B26969565E31AB566D0C45D95960BD75FAC57DC1ED0B9E995BD70D7CD777347
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":10,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":10,"vtp_includeConditions":["list","zalo\\.me"],"tag_id":12},{"function":"__ogt_session_timeout","priority":10,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR"

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 63, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	884
Entropy (8bit):	7.66493578303347
Encrypted:	false
SSDEEP:	24:mchh3l53p+T7OC7OCTlfOXZHn01PduqiURsN51OUN:h3fp+TPP5OpraRKow
MD5:	393EB9833C8142E877948834858AB94B
SHA1:	72EB88B364E962999B50C426093EE5D21CCE0BE2
SHA-256:	B352AA160C2ED24F570289D6080C7B079CEE3A69A287A3F174A57A667B0B8012
SHA-512:	23F9D11B74B247F05CA626CE6E0AB74AEDABBDF95C013A1BEB630E110354DD0764A7269E4257850CAC8FAEFBF061F6ABE9C35145D0E1C4A46A1764935E5347E7
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/images/btn_download.png
Preview:	.PNG........IHDR...<...?......h......sRGB.........IDATh..=h.A..o/.?. .c.`...J... b.+.R..DP..H.)Laa.E,.L#..B,...P...Ql. .!...$b"..{.......}.{7....;...7.vo.\J%C.T.. ....F../3.[.L. `.._.M.....]..M...Z...w.2E.V.m.O.ARK.Lu[I.-ib.y;.....T.E&....H8.:...$.......+%v.VZhki\..-.RbWa.....U...+%v.VZhki\..-.RbWa.....U...+%v.VZhki\..-.R.p+;..X.S.........&.wC5.+5...('^.<&..@`....Gzy3..cl..&......^....78.4\|.a..?..p.^.C.....U...p\|..,'..z...B?y.......V.@.......B.r..v..x...l..........z-.3\.". ...,...E....7.H.WJ.@...{....yV`..t....m./..F..`....Z...D....\|r@.N. ......,......._]y.1..A..\.......K#/'y...~J]..t/.'..........ZN...c.P[&.$).w,C._.+:F...C...tH.Y.m.[.....{.....".M].l...?+@.'GK...S..g./..._.OV'#...?........../!l7>.".{bu.,3.p.<.O..=J.u..(.BO...e~.6..\|>!...gT.l.".JL.)...VU.../{W...-..G2.....y.....Y.E.Y.]...C.Ie/(..M.T....}..A....l..}.._...../U...m.......IEND.B`.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 78269
Category:	dropped
Size (bytes):	23466
Entropy (8bit):	7.990014098934538
Encrypted:	true
SSDEEP:	384:lHSaW3qwFF/Okaxlb+kXAdwimKYA5jpN2rXFuEnKbtp862w5cqvH9:lHCFFSX+GA6itBjpN8XhnIvIQ
MD5:	993B3034EFEB5D2CF067AC6FF048466E
SHA1:	CE260D897C6EDAD0D584BDCD3DF70BA94150D18E
SHA-256:	23120D851AE6C25CA8A813278D1E338E156DBE37F1C461CE6463274E44AEB683
SHA-512:	6C53E7634548FD781B5E67E88B2D22E28F3E5847EEDD18B713A813F98281AB19AB07EE7268998B387FF8EC0918E545F051EDEC66B4CF4C1E041E90D4D0E52B78
Malicious:	false
Reputation:	low
Preview:	...........ms.G...}~..s....H...P C/.X...cj..r..M.I..Ds...d........H...qb<".^.....2....>......2+7..}=......7..YV...$.g.u...oT.....b.qZ...UQ......].e..N..<+.:.m.e...:/........r..}uu5.g..,+.....m[.Yq......G;..J6.:Og.E^n.'......,g...F..5......\|.-..\p$.^..9?..9.b..]vR.....'...m....r1.h.....6...uo.od.lp..N.#...........(..^..Y.>..(K..}WJ.e.Ev.QK.$..77.r..n.Iy{.f..MgI>..MlT..t...G..(.x....Q....y..m~.....lRe...!:.]...j.v...'....K........E..}..3...~.X<1m....`\|2.o.....y.._/^.U}p2..a+..c....-.;.QWl}.h..o..`..gImff...Q..gY=..O..J......q..g...t........l8[.,...A.(Y..X7oQJ......I.0....mon..I.y....".m......6..g....my.s.t..H+......i..\.Yq5z..SR..+?d.&..Sv.>...Ii......6.U..dT,~..... ....]...@......<*...{......q...4_d3..t...<......<..^.U........A..:+..u..rP.6.$a.0t..jt....e@V....,,_..o?.J0..$.Ei......O.@777....'.....>.. .9...../.N................a..P....).......................i].M.EV..sVL..@..s....g....N.E..6 .......d3....^.WY..\.?.....#Vp..

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	dropped
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12130
Entropy (8bit):	7.968335452423114
Encrypted:	false
SSDEEP:	192:6S6gjTqjCaoLK+MLvZWjCrnsP8kdZMfhjCxUyKu/35Io5rTpTWjKoiIQG4RiwlR7:1TTwv+GsOn6LdZMZCx+u/JI8r1TWjK1b
MD5:	565C6075EA8894BD3134481CAE734C5C
SHA1:	545BB49069F47B89CEA7BAE6F1E4D230876D54CB
SHA-256:	D93510B0AD3775E4CDAB7E56AE2BEEB44C043C6DDC355BE7E767643575C461D8
SHA-512:	A09655B11E6FD2ACF518C715CB62687788A795FE699EBEE090336DFA0074FB84CF77D22A0F96AC48E5198C534F52C7B452325D8460ACDFA028B387F18A32EFCE
Malicious:	false
Reputation:	low
URL:	https://stc-chat.zdn.vn/images/icons/effect_icon_heart_1484223878985.png
Preview:	.PNG........IHDR..............X......pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx......q.#.....3 x_..C.%..-.W..#Q.%......{p.....<.....;.....g...%Y..>vmI...%^.P<.......;s3....."3#..{z..\|.itWUwg.'#..YUL..u.[...]P....n5 u.[.H..V.R....n5 u.[.H..V.R....nu...[.h......?!...^....o..w...!..x...f...Y6[....8&lT.+....T...:.T.....]...l...C.}v.6..8......<.6.K.<.#..k.....Og........I.....T.S.......>R..9.X.c.\.......g....~..e.. ..dP.g.c...^...".c....F.V..f......l...c.bA.....H..\|<...G..g..l...q"...%...eh......"3....&pH@~.._.........A..a.j..d....Xt.I3+...i.A9#.a...".E..DA...ls.W>D.o....o6.....K.H.U.@.\|W$.%<;.D>g.nw....1...S. ..01) ...h.h.......=.M.....{..v.....]9>r2+1.=.z....@...7..L....B0.....6.o.v.C.38)...S...N:..A.....i..c{W..N".K..f.........(r..d^#8..<.0~H.....Z.+.....`..\|?{/.....=....7...........%...8,.;@.A.S..c;.0.....v2.e..Bz...>$...c t.W..=.h.F..<..f..[.ln...\6@+#.F......&......`}......l.C...M.,...%$(2x.L....c../.y...;...IkLm...+[...

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 46653
Category:	dropped
Size (bytes):	14816
Entropy (8bit):	7.987359914300124
Encrypted:	false
SSDEEP:	192:uI80w0LJpf556v0WlZpq25BIcdtiq3R5sFlOdoOfcbfH19Dz7RpVPzjANA6waeSP:WN0LbxgJEkfrbOlOY993HVPgOtiP1VGI
MD5:	A762FCAE63D6AE8BEA624699121F4DFB
SHA1:	0A9404FAE0625E6F4A93A4277C2F1C8342C2BFC1
SHA-256:	D29793EA4CD2A20C7B1B37CB0964D85251A9F9E0E7BDAA312366F0B7EFEEAEBC
SHA-512:	67A7DE89DC27D0110033025BAE0DD0B8F112FA07FAC0E111D01805BF507E3B7E6FC2B7C9DB9D5590EACCA530222A4DDC7FFC06C11DEC96C142A2D893D500BC69
Malicious:	false
Reputation:	low
Preview:	...........}{w.....)@....GT.M6.a...c.......rq `(L.b.` Y!........Ey.s.$."fz.Q]].~..j....(.u../[.~...{..r6N.....r..x.>+.Y.tR.v..b.i.......\|.....5.eAwG.rV..A?y9...^..._.N_.....I.(W..M..x..\|.-...YL.U....Sz{7/.....l....xp~5..^.S~.iSO7."......2+nZ...M...-g..ck.}l.V.b.i;.<_......j..ek..m....~....l..Z.b2.L1.w.M.. .u.....7...E...}..ZY.Lo.._.F.J..y^v.v............g..._....e.O..=.#....do.{....{z.M.w_..q.g...............V9./.g...B1.....Ze.L...&.S.3..n.U..d..r..[..z. .-.....p`...,.U......slf.`....b'..o....M...mp..Y..<=,{.=oen.Mm.=[l....7.....3.......@.5vT.!.....)..V.j.[6`.Z.e...H.u..t.*.../x..d.....d.er...#....8.M..\|...l5~7.z;/........4...o....C7A...c...m......^..F<...p.....vJ...cOq..n3....Z<.. 2...Nc.....E.!...p.....b.-].....4...2..i:]..-.v..kz..Im....A....4J .......s.&E..Y?. ..Z....:K...}9;X...a.q....y.7.......4C.........q...yjH.w.D7Z.!0..\~.N..O.$.><(...d.....ge'D.E7.0x.FI....&+.hl.uDg..{H...d..>%\|...v\Nf...w.y;......\.v_tA...........#...)

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	dropped
Size (bytes):	77508
Entropy (8bit):	5.204229612798213
Encrypted:	false
SSDEEP:	1536:ED3GboyWr6NbuuSCUyK0bH/kUG3ofH9PmGFKy/:k3ioyWr6fb/Y3ofH9PJ3/
MD5:	F4D1CB023EC7EC98F88AFE7DB58AF7A7
SHA1:	2A287B6295A820C75E567BB69626967B6B5C7657
SHA-256:	DA866875EB7FC0AF81140AF334CD1586E1D12047D87603C68DA7EDA39937CBC5
SHA-512:	85B3F18D86D2928EF6DCB8ECF94C1D13970E77B0FF2A709D28D8B19C2679994DD1815E1CE3CEF11711FD1493D86720F85D9DBAF3D6FFC5D0D125ED73B0E4D6D4
Malicious:	false
Reputation:	low
Preview:	/! @sentry/browser 7.102.1 (26ec3bd) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return l(t,Error)}}function r(t,e){return n.call(t)===`[object ${e}]`}function i(t){return r(t,"ErrorEvent")}function o(t){return r(t,"DOMError")}function s(t){return r(t,"String")}function c(t){return"object"==typeof t&&null!==t&&"__sentry_template_string__"in t&&"__sentry_template_values__"in t}function u(t){return null===t\|\|c(t)\|\|"object"!=typeof t&&"function"!=typeof t}function a(t){return r(t,"Object")}function f(t){return"undefined"!=typeof Event&&l(t,Event)}function h(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function l(t,n){try{return t instanceof n}catch(t){return!1}}function d(t){return!("object"!=typeof t\|\|null===t\|\|!t.__isVue&&!t.t)}function p(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65500), with no line terminators
Category:	dropped
Size (bytes):	12505790
Entropy (8bit):	5.715091165897454
Encrypted:	false
SSDEEP:	98304:sagOslTzThaYO6tdA/QIY+qxCcw6ZBwAHG7ZllX05KMZiisPrsQY68SirYGcR2Y:CEcwUi73lwZi5YTHQ
MD5:	CF84006D00E8617EB8A0673F316E7597
SHA1:	033B91BFCC4815FF7A5EA70883FD0DF483E7490E
SHA-256:	8F9AF21E91F43D019713ADA7259D72BA69CC4B631AB5A17B1A8A3E634583DB79
SHA-512:	82E6AA9553E92C71FFEC116A82DF1C14205864F4AC5FF90D5E085B03E9DCFCDD9E3EDDD8289AC68043C2F2C163C1FCA4447FCAABF17E68FA91394CA483BB85B4
Malicious:	false
Reputation:	low
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[1],{"+2cI":function(e,t,a){"use strict";a.d(t,"a",(function(){return p}));var s=a("Mgpg"),n=a("Yi2m");class i{constructor(e){this.config=e,this.submitted=!1,this.name="BaseViewerLogService"}submit(){this.submitted\|\|(this.submitted=!1,queueMicrotask((()=>n.default.logActionInfoV2(this.config.Type,this.config.SubType,this.log))))}}class o extends i{constructor(e){super(e),this.name="CaptionInteractionService",this._captionLength=0,this._mouseEnterTime=0,this._totalTime=0,this._mouseEnterTime=e.startTime,this.submitted=!0}updateCaptionLength(e){this.submitted=!1,this._captionLength=e}onMouseEnter(){this._mouseEnterTime=Date.now()}onMouseLeave(){this._totalTime+=Date.now()-this._mouseEnterTime}dispose(){}get log(){return{SubType:this.config.SubType,review_caption_duration:this._totalTime,total_caption_length:this._captionLength}}}class r extends i{constructor(...e){super(...e),this.name="Timeo

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5464)
Category:	downloaded
Size (bytes):	5553
Entropy (8bit):	5.110538746664931
Encrypted:	false
SSDEEP:	96:dEM/Cm4ezRjFgEg8nWFjA350Vml0B2BGVn4slTbdXCmOz8wnSxwv:GM/CfYRjFgiWpA35XuB2BGV4slv9CvA8
MD5:	2C21CEA26E6DF845BDE99C34587C1FC0
SHA1:	F15CDE7EE8A756EA9B9C9836630E78D64C3DA0BF
SHA-256:	E297F612FB9A0952B3443698D81550AA20C6CD2848A3F0C36C2D50146245B3E5
SHA-512:	6DE5BD6CDD961121F7F9FDEFED6A0644206467D3D593784396BC43516EEF306F5E8BA18DC2361BEFAE094501C63A0DF89CD679425315E457DEE0807AF97368C0
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/default-embed-web-startup.c74076b5055445f98284.css
Preview:	.rdt{position:relative}.rdtOpen .rdtPicker{display:block}.rdtStatic .rdtPicker{box-shadow:none;position:relative;right:0}.rdtStatic{position:absolute;box-shadow:0 0 5px 0 rgba(0,0,0,.2);border-radius:6px;background:#fff;top:226px;left:95px}.rdtStatic .submitBtn{border-top:1px solid #e5e5e9;font-weight:500;padding:7px 8px;text-align:center;color:#00a1f2;cursor:pointer;border-bottom-left-radius:6px;border-bottom-right-radius:6px}.rdtStatic .submitBtn:hover{background:#00a1f2;color:#fff}.rdtStatic:before{position:absolute;content:"";padding:6px;background-color:#fff;transform:rotate(45deg);top:-8px;left:45%;border-top:1px solid #d8d8da;border-left:1px solid #d8d8da;display:inline-block}.rdtPicker .rdtTimeToggle{text-align:center}.rdtPicker .rdtTimeToggle:hover{color:#fff}.rdtPicker table{width:100%;margin:0}.rdtPicker td,.rdtPicker th{text-align:center;height:34px;font-size:14px}.rdtPicker td{cursor:pointer}.rdtPicker .rdtTimeToggle:hover,.rdtPicker td.rdtDay:hover,.rdtPicker td.rdtHour:h

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 46401
Category:	downloaded
Size (bytes):	15648
Entropy (8bit):	7.9850788125959395
Encrypted:	false
SSDEEP:	384:bqdtHfO+4ez7i8Cdd+zrAYWsNQnfCQ8To:wJfOPW9nXWA2fP8E
MD5:	3026C4807DA56160F31BA19EABF46BCB
SHA1:	DA19C774A5298D0F23FA3CB0CE42C53232DB2DD7
SHA-256:	B37256E7FEC15E0F4CF02F4978FBA4E355C691721984A1F2D0693CDE1FDD90B4
SHA-512:	FF20A593370E22018F16C07277676D1398ED7C8AA044C02C42D3B9574E9F020BF2A8591E8FB9938A689365D4C8A721312DAB0F133FF9555B50536B327A49BDE3
Malicious:	false
Reputation:	low
URL:	https://chat.zalo.me/opfs-worker.9c0875841efb5667ea74.js
Preview:	...........}{[.H....S..<.^...u.Q...LvH....0.F.2(1.G.!.......l.....L...kuUuuuU......_...y..f..$...X...q..''............^...~.......q...g..4...'..j..E<....$.I.6...e.7..z........a.<J.[y\N.A....8..KE.....$H.Q......z6.B1..G.Q3.e...y./.pe....E..y....;.u..._..W...us..Cn..a....l...]..."..Q.....Yk..r...7I.....`zq..VW.]f.e..g...........h...l0..../+.....lHwK...3MJg...a..k.OWK=Cq._..W...F.xu..o.l!..4T...qT..t2...:........z.dTz...e.1F.......qk..MF.F.6..f...7.lc.....Y.4I....VK.WJS.:0..<7....JxC}..5...S.J.<@./...i..D.R.p.geF$.>....T..P..-.1..........Q..?............ez..s..s.@.nvZ..w...g...c..A..O...4.... +....FI?n>..Q...:..]T..s.."n...t-(....y...,-J ../..4.Jw.<....2..o..e.z.6..8..\..)....W.p&.M......<.P..q..q..o.A...!......ma.7....?<..{..dR.....,Q.t..z..+a....=Kd..G/_...}._.G .#.im....9..5u$.\(...q.9n^.L...(.8\|.&<..._..w..<...Q@4.2JF.<v3......,...p.....Z\|...fi.n...=x>%..M...U.A.~q>.o.O..$.7u...l .b......d~....y.K.I../~..4.g..6S......Qv.~.'e..

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6231
Entropy (8bit):	7.917512639800623
Encrypted:	false
SSDEEP:	192:z92io+mioZhUza1lL02I1IGLfBiSUg17YepdV7+lw:YH/ZhPPY2qTdUg1scMlw
MD5:	01A93196B1E1FE60BC087A32B3B2D470
SHA1:	A6A6B5D40E8E9E434DA5EFED7F4D5B7054F327A2
SHA-256:	15556D64388319A42FFA8A357CBDF41AEBADF73B704A550DF9E8F3526CDAA095
SHA-512:	BEBAF0A74368BCD3B76B83EE5D5AA27BC6AD0284E524C403CE25FF81B0736AD1EEBCCD6F559666DCEAACE1AEC814B2FCBBC80BD0F008AE25D1E34315E3D855CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>....IDATx..y..U...V.[z.Nw..od#........ ..e@? ......(..(.~PQq.A...A.T$.....5!@.....v:......q..K._...,.....~..u...{.{..0BD..P.T.C....`....J.B.....`...f....T.i...}..`K...l.....$.R.5.w8.-.......q.....H..(..9,.{.-..2....j.u...;.Z`gP.2..knCt........~(F.......3K......o`.....;....)X.IN.....r.I.......B..MD&...F....g.Mbd&B..isf0....U].>....l....................q........i.."......{...=.s....P..i............q...d.E...<...L............0kH...W.9w<.=....=..p/f6..1.J...(>.!<.0.(.u.,.g.#........./.........C.B\|."..LP...I\|.$.Za.ij.!..G.........P...(J....(E`......]..9.T8..!..(.O".QG...C.B\|n.n.D..Dp.t&....."....\|..3!;......n.D. ..$/.D..:>x..\|....2...k.. `.....B ...+$s........Q.Q....KV&t.9bB..i...$.Z .N"5s......'..c..].....A..0......\}2...o...\.D....3.z..F..8..5A..&5eX^....\|....1.=.n..-...k.h...1.+N......._...B{...E1.yL....CH..C.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6231
Entropy (8bit):	7.917512639800623
Encrypted:	false
SSDEEP:	192:z92io+mioZhUza1lL02I1IGLfBiSUg17YepdV7+lw:YH/ZhPPY2qTdUg1scMlw
MD5:	01A93196B1E1FE60BC087A32B3B2D470
SHA1:	A6A6B5D40E8E9E434DA5EFED7F4D5B7054F327A2
SHA-256:	15556D64388319A42FFA8A357CBDF41AEBADF73B704A550DF9E8F3526CDAA095
SHA-512:	BEBAF0A74368BCD3B76B83EE5D5AA27BC6AD0284E524C403CE25FF81B0736AD1EEBCCD6F559666DCEAACE1AEC814B2FCBBC80BD0F008AE25D1E34315E3D855CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>....IDATx..y..U...V.[z.Nw..od#........ ..e@? ......(..(.~PQq.A...A.T$.....5!@.....v:......q..K._...,.....~..u...{.{..0BD..P.T.C....`....J.B.....`...f....T.i...}..`K...l.....$.R.5.w8.-.......q.....H..(..9,.{.-..2....j.u...;.Z`gP.2..knCt........~(F.......3K......o`.....;....)X.IN.....r.I.......B..MD&...F....g.Mbd&B..isf0....U].>....l....................q........i.."......{...=.s....P..i............q...d.E...<...L............0kH...W.9w<.=....=..p/f6..1.J...(>.!<.0.(.u.,.g.#........./.........C.B\|."..LP...I\|.$.Za.ij.!..G.........P...(J....(E`......]..9.T8..!..(.O".QG...C.B\|n.n.D..Dp.t&....."....\|..3!;......n.D. ..$/.D..:>x..\|....2...k.. `.....B ...+$s........Q.Q....KV&t.9bB..i...$.Z .N"5s......'..c..].....A..0......\}2...o...\.D....3.z..F..8..5A..&5eX^....\|....1.=.n..-...k.h...1.+N......._...B{...E1.yL....CH..C.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65420), with no line terminators
Category:	downloaded
Size (bytes):	504269
Entropy (8bit):	5.6841802123576795
Encrypted:	false
SSDEEP:	6144:CTNyfczFbADVpFKB13YMbeBHqdSnRnJm93nTYFcv43Cs+uR:C8aFY9o3cHsa
MD5:	FD30750BB977630D210D49564A8BDFFD
SHA1:	546D748F686322ABBA482FEE3CE763821FAB6939
SHA-256:	2D4474E2EDF6114E1A04C4434A8B3F0D2AE4EAD95172224B1E6D0BFD9A08ED7E
SHA-512:	C3BB9F7CEE26C5EB539E6EE2B267F31E77B8398A6033088EE335E7CE8856651655361DEB81F8832DD6FF52F24B55F50D840D5C0A61C0BD0869F04641674BA463
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/lazy/vendors-embed-render.17bee88d4759f5ada63e.js
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[2],{"+6XX":function(e,t,n){var r=n("y1pI");e.exports=function(e){return r(this.__data__,e)>-1}},"+wdc":function(e,t,n){"use strict";var r,i,o,a,u;if("undefined"==typeof window\|\|"function"!=typeof MessageChannel){var s=null,l=null,c=function(){if(null!==s)try{var e=t.unstable_now();s(!0,e),s=null}catch(n){throw setTimeout(c,0),n}},d=Date.now();t.unstable_now=function(){return Date.now()-d},r=function(e){null!==s?setTimeout(r,0,e):(s=e,setTimeout(c,0))},i=function(e,t){l=setTimeout(e,t)},o=function(){clearTimeout(l)},a=function(){return!1},u=t.unstable_forceFrameRate=function(){}}else{var f=window.performance,h=window.Date,p=window.setTimeout,y=window.clearTimeout;if("undefined"!=typeof console){window.cancelAnimationFrame;window.requestAnimationFrame}if("object"==typeof f&&"function"==typeof f.now)t.unstable_now=function(){return f.now()};else{var m=h.now();t.unstable_now=function(){return

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55812), with no line terminators
Category:	downloaded
Size (bytes):	378810
Entropy (8bit):	5.715692422732925
Encrypted:	false
SSDEEP:	6144:unmOpL4P+6pVS2rkI7DX1kejp7MzXVp8oNUxAcaKDKNH7yVPx0XU:u3dt6pA2r37DXH7Mz0cUWcaKWNH7yV5L
MD5:	8B4D4A7AA800C08CF75C5CDD92CEFCFA
SHA1:	103AD28C4FACC2A664DA6F2986ECC4DDB963E526
SHA-256:	33A7561F96C8488E6C85E35A0C51B7AE40970DCC341FE6733E3F6B02C1C166CE
SHA-512:	DA9BD76406BE1EEDE679C628D17F92D95DA488FDE462327ED711F7F65D12CB9A62B189F64DB68740058708B6FCBFF96875F4E41C74AFC30012F5348CB7073139
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/lazy/lang-vi.847c90765c3b5498f707.js
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[11],{"8dme":function(_){_.exports=JSON.parse('{"CHAT_BOX_LIST_LOAD_ERROR":".. c. l.i x.y ra khi t.i tin nh.n.","CHAT_BOX_LIST_LOAD_MORE_1":".ang t.i tin nh.n. Vui l.ng ..i trong gi.y l.t.","CHAT_BOX_LIST_LOAD_MORE_2":".ang t.i tin nh.n. Vui l.ng ..i trong gi.y l.t.","CHAT_BOX_LIST_LOAD_POLLING":".ang c.p nh.t h.i tho.i","DB_EXPORT_ERROR":"L.i x.y ra trong qu. tr.nh xu.t d. li.u","DB_IMPORT_ERROR":"L.i x.y ra trong qu. tr.nh nh.p d. li.u","ECARD_CHEVRON_LEFT_TITLE":"Sticker tr..c","ECARD_CHEVRON_RIGHT_TITLE":"Sticker sau","EMO_01_GRIN":"C..i toe to.t","EMO_02_JOY":"C..i ra n..c m.t","EMO_03_KISSING_HEART":"H.n gi.","EMO_04_HEART":"Tr.i tim","EMO_05_LIKE_STRONG":"Th.ch, m.nh","EMO_06_CAT_FACE":"M.t m.o","EMO_07_BLUSH":".. m.t","EMO_08_IN_LOVE":"Y.u th.ch","EMO_09_SLIGHT":"Kh.ng c. g.","EMO_10_

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2649
Entropy (8bit):	4.580028300717239
Encrypted:	false
SSDEEP:	48:cb3K4l9l9PQtZLqFsNZINyVNDfF7iA/aFsS5+2PRBC7VkK0UczhdRWNQ0G:wK4vl9PSfFmEyso+qhBlzhvWWd
MD5:	83D403849863DCEBE9B0FD26A0DF6EFB
SHA1:	0181B8F116E2B17A48F95AF49771886F956F08B1
SHA-256:	1F58B046ABE12BF2DBE3BF0B4D247EDF41041BCF3EE2FCC03786AD4CBE78B2BE
SHA-512:	7B92DCFDFF5EDE0D2552ED2D1E8B769A127248CBCFD18C0AD5C4C5587658BD30596550EBE75CF5F386498CA68D72966D84D2E2E78B5DE108E155E7CC6B6F9D3A
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/images/logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="25px" height="9px" viewBox="0 0 25 9" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 49.2 (51160) - http://www.bohemiancoding.com/sketch -->. <title>Combined Shape</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M12.6808693,2.52045104 L12.6808693,2.06398482 L14.048117,2.06398482 L14.048117,8.48239004 L13.2659151,8.48239004 C12.9439124,8.48239004 12.6825323,8.22236344 12.6808772,7.90080374 C12.6806605,7.90096172 12.6804438,7.90111968 12.6802271,7.90127761 C12.129539,8.30399226 11.448805,8.54305395 10.7134839,8.54305395 C8.87197018,8.54305395 7.37885092,7.05092395 7.37885092,5.21063028 C7.37885092,3.37033661 8.87197018,1.87820661 10.7134839,1.87820661 C11.448805,1.87820661 12.129539,2.1172683 12.6802271,2.51998295 C12.6804412,2.52013896 12.6806552,2

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	4059
Entropy (8bit):	7.78551369467172
Encrypted:	false
SSDEEP:	96:D2TTbCg5qTPL3O94o49uY3T+6PVJJ7W/A86jHnsQ7xE:COBTL04oxY/9Z1RxE
MD5:	52160FAD6ED091EB45C5E95BD7B53127
SHA1:	8BFD7F0C7E15C0A14C9B28B0E56698C180D1882A
SHA-256:	5F34A5D62FB97D72F3AF73541B5D61AB5C274E235B82D3E47F10C26554D40557
SHA-512:	BACA6E39A5D887C47247D4B943518DB4703ADC3446BCD6672D88C818B2A2180877A2E4BB8498363EE42A127808C0DE2BC62D7D0CC13E609741E22D4E5559867C
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/images/img_btn_top.png
Preview:	.PNG........IHDR...d...d............tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)" xmpMM:InstanceID="xmp.iid:39F144187C0E11E79E7C9112413265AF" xmpMM:DocumentID="xmp.did:39F144197C0E11E79E7C9112413265AF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7A37847F7C0C11E79E7C9112413265AF" stRef:documentID="xmp.did:7A3784807C0C11E79E7C9112413265AF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...^...IIDATx.b...... ....x....K2.i...0..LDj@.g"R..F&...u&..1....pi.`...' ...g..._.~..]..A.&`............x...`d

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 39, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1050
Entropy (8bit):	7.758830592619288
Encrypted:	false
SSDEEP:	24:jcHEF0/xn5P2FPQNOe5pennq68iLbU8/hnA6TmxnURON:T0/x5P2FPQNOcenn2Ku6b4N
MD5:	61AB32280F5038259EC9C380C8C2D646
SHA1:	283178D26DDAB711D0DC7577A875CC42C2EE811D
SHA-256:	DD59AA3A642C6D0E3E970EC62C4CA24C987C93049C7A9B2FA3EBDA822FD17565
SHA-512:	86E67E2003FB17FD767CF5ADC51C41854E1855A8E1820637A1F0D857751C02C326856EE0896DCA816BE4A42C73919072CBFE4C8D3F31496D8E97722CE41E9483
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/images/ico_check.png
Preview:	.PNG........IHDR......'.....y].....sRGB.........IDATX..m..Q...g.JX..[RlY....@.O>`..."$vf.+!y..M..zY......%"j..$...RBH.K.....;..sgv.3.e..}.{.y.=.9.<..g..^.:.>.....i.\|.z.}D....$h@g......d.1......~mc]...._.%...Q......V7hnL}@.....9....!.p?7u..!.1......[.....z..;.-.[}.P.#`U\|qZz.4.....b..&c8..L.....A.}._....T."...1N..D...i.....u ..0...A.{.".....:8.........P..t.6I.Fh~.>........z.Nd...g7.I...@....t.!.S..G...r.=62..N.".].b..I..=73.j.h.H......G9V.o..s33..p...,.A...KBH?._+.....8.h{..k....K#...r..^:.}.k...B...x[..K...q..#..g<..g]..c.MZ.1."..X.Z.a..C.AD...D...t.f.j^0.........#8...:.[.$.{g.k...;..w.^........j)...I..C0.{..O..5..........^B....0.e.O.g.[.t...z....7b..^r.+.._7::w..3..y....],.......G.S......A.C.....0..,]..XP3h..D.....]...N.y.c^6.fJ......}....u...u\c..Ul.Y...c=..S./Q....y&.%1....Sx.v........h...Mb.ti/.O}....>TR.......y#S..gbP.D.<..4..a..as\{....5N.s].....4....M.@..+a....f4w..M...+..^..x..E....Y..4$..ju.._\7wG.2"z.5..q..\....].}r.].UM.i.[e]..^

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 179364
Category:	downloaded
Size (bytes):	62073
Entropy (8bit):	7.996213365624898
Encrypted:	true
SSDEEP:	1536:DnfssQyLXF1DS4MDqb/SVjZvpsZGDpg+/hfMTS5NwChNON1cz56:Dfss/L11DS4lb/qVvp4GDpg+pfMYxicY
MD5:	A839EA0E54A4FDDF43E3FFF6FFE4C1F3
SHA1:	9381C888E001B85B2BB1C032F7F26ADC4CFA1633
SHA-256:	2E693CCE4403F86DB334D715623697CBB8D0881309BC1C6CFC8D33CCEEF2ABDA
SHA-512:	142BE2D3D2F789CE5F2A42FF9421456E439AA0E3B907C90779C465CB59E038D3784A9DF58C3C055EABE8A707916F45F31EE77640ED95947DA4C0B8B7E25E39D5
Malicious:	false
Reputation:	low
URL:	https://chat.zalo.me/mainless-worker.9c0875841efb5667ea74.js
Preview:	...........{w....U...H.e..@..@A4I......Fg...4.&."..n..(x...'N..y;.;..q...V...O.V>..'.o.]U].hR..s}..9#.P].]...v.:>..[......k;...]g....O..E........o.m....\|..%.....N.....Wc?:.....ox0..;w..n..Ok..$.A.V...[/........v..V.......$.+.n...(N....u).{.tbw.k..c.z:]Q.\|....j......~..s.,o.6F]....n...]=......6"J....Sn... .w.h..............A.g~...)...j..$....p.W..hx...H..4.......z.-.....qv..d.;.{Se...OT1]m.).M..b.(.;)V.......;.^!.._..F..F.........U....jp...R..N...5....n.z.:..7...[..L...<..a....Fq...............A..h.8..>..j5._1-ih.Hcsa....U.....S..`0.+u.........hI.(...q.F..../yq.j..]@xKm... M.I..w.0...^ZOR/.z.w^?l...m.s..+.t[.k..so..K'.-5.7..5x...f....v._k$..W..z.6.....v.v...V....`.).L..Bk...B8..VP..M..."..:...>u..X4B..2.a.9...0I+^..>..W.4j$..t.7.....Ug...z....b.....U.n bj..,.ai.. ...Qy..W.....q...?..'W.......J<.].]....T.s...... L.....s..T.P./.j...mO.......d....P:..wH.(...`..S.FO.`..E}....._..?.<8..~..D.r....y.>.....O+..9..~#..7.........

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1650 x 930, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	799253
Entropy (8bit):	7.991220676092619
Encrypted:	true
SSDEEP:	24576:mObyAzEQ3zHqNSAvdbYl0qblWM/lN5dLjT:mIyAYqNAvdbYlJtN5dnT
MD5:	B4B8280D3F11B1D5ED15D390FD6324E7
SHA1:	377A3F6E547C0C6FF0A3B252D0ACFA66321004C7
SHA-256:	23A416ECB4B1CE5BA6A91A246B87E6EFE528FCBB30FE8512FB122B4890028E3B
SHA-512:	5D45C786067781F86F294D1CC9876DB892B0EF0BF78C92813E7DFE134C134B00FAD28919731A5D35C4451827F3DEA49FB82CEFCF7334E88F29D8F531538E44FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...r.........D.I.....sRGB.......@.IDATx..i.d.r........./...y3\|..H-..lA....,.2e.l....0@..(C.a....0l.....a....@.q.MRo..M..z.}_...^...U..Vu....{..%2......e.....!..!P.V......\./.+~.(s....b.8S(.....b..Y..\.H.R..K..c..0...C..0...C..0...C..0...D$".h...$..I$..T..J$Wb...H$2.Ju......x<.7>>.CZ9L...C..C ..u.zl........8C......._;>>.+.t..Q:=.{.....y.n...T+"..w...%...X...0...C..0...C..0...C.. ......XT`..x,.Q<w.:...W......=..=...........&''....v.DC..x3.0C.9..kC..x....&...uemm./e...-.>........}....EA...b...$........7U..^...+..!`.....!`.....!`.....!.....4...wn.,.J..d2)===..? ..}....?.....s..\|d...;.6.-..0.^C......u..0.^.. ..VWW...............rpx(.bI]...II.....r.=...d.Y.x%).3...V...y...o\....!`.....!`.....!`....D.V........GNgW....IGGJ......bQ......@...................a.A.....C.uG..9...[...C.D`ss.+K+........;...+.....w..S(.dgwG...%.I.........T.u.M....4K.K9..!`.....!`.....!`.....!.B..{.a6.gM...@.+.gf...W.NM.&.dxh.g.1'./hh..n5..-.M...B..s\|~."o...!.."

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (347)
Category:	downloaded
Size (bytes):	13551
Entropy (8bit):	4.687260650519965
Encrypted:	false
SSDEEP:	192:/lrEzkuS8R8JwnRBt+mS7xIpkoExpOojnxvSaJM0ENg+418AhWYthvCB:/lrEzkuS8R8L2ExMo7xvrM0ENMogdg
MD5:	8B30E0D4FE900D0FF6CD9C75A07B3D4D
SHA1:	37F5A61A6874E1436BFB7C25E98856E8ADEDDA49
SHA-256:	EBE0DA926D830B7AB5DEC1360C07AF6AD907D1C13A983AF86F2DB8610D05D369
SHA-512:	C5EB03FC526FED8B70FC44F702053C0DB60C7C8E433A46629474EA084F1C117986CB8DF9F539536C43D6675B24209A9FC968B2FE236E0EA992A1439E97BD3567
Malicious:	false
Reputation:	low
URL:	https://zalo.me/pc
Preview:	.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html lang="en">. <head>. <title>Zalo PC - T.i Zalo PC .. l.m vi.c nh.m hi.u qu. v. g.i file nhanh</title>. <meta charset="utf-8"/>. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>. <meta http-equiv="pragma" content="no-cache" />. <meta http-equiv="cache-control" content="no-cache" />. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0" />. <meta name="format-detection" content="telephone=no" />. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <meta property="og:image" content="https://stc-zaloprofile.zdn.vn/pc/v1/images/zalo_sharelogo.png"/>. <meta name="description" content="T.i Zalo PC cho m.y t.nh .. s.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1790
Entropy (8bit):	4.8477870284101465
Encrypted:	false
SSDEEP:	48:1QxzhGvipvAKaeAI98/Menkw6V6yTFkr5NLawt:1K4iBAk9d0kLUH17t
MD5:	39D93FD8694EC1016D501B38F86A6005
SHA1:	CAC00115D480BDA4DC51DEA2EADB278DAD5401D4
SHA-256:	2745EDA4BA98636A04C55BAC0D1514E804FF9991575EF2FDB2F65B537C764A58
SHA-512:	DFE65B31434E84E895BD6F8E0853AB6A92A6A913AF9453ECCCBD42328193705432D7785C59179852CFDDA1F444C5208BFC4C57900F5BB889001104FD36457FA7
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/css/custom.css
Preview:	.cont0left {. width: 560px;. padding-right: 40px;. float: left;.}..h2.custom {. color: #444;. font-weight: normal;. font-size: 34px !important;. margin: 0 0 0 0 !important;. font-family: 'Segoe UI',"Open Sans Light",X-LocaleSpecific-Light,"Open Sans",X-LocaleSpecific,sans-serif;.}..p.beta {. font-size:16px; . color:#05a3e5; . margin:8px 0 0 0; . font-family:Arial, sans-serif;.}..introtxt2 {. font-size:22px; . color:#808080; . font-style:italic; . margin-top:20px;.}...lst03 {. list-style: none;. margin: 20px 0 0 5px;. padding: 0;.}...lst03 li {. background: url(../images/ic_chk.gif) no-repeat 0 3px;. padding: 0 0 15px 25px;. font-size: 15px;.}...btn01b {. font-size: 22px;. text-align: center;. line-height: 26px;. width: 170px;. height: 50px;. padding-top: 10px;. margin: 25px 30px 30px 0;.}...btn01b span {. font-size: 14px;. color: #9fe6ff;.}...cont05 {. width: 220px;. float: left;. text

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2825
Entropy (8bit):	7.918233592175787
Encrypted:	false
SSDEEP:	48:hUTo9KazTxGX5j66MgJYsFhteSPKZWhHyEeu5DYFIPn+Z0TtqeFDr7zLyR2qSt:39Kan6WgJtfg7cyEh4Zq5FnfeR4t
MD5:	3FC97B4B240CDB9336E785AE3D02EFDA
SHA1:	A8A1C84A7767B46A7F42F3A0E31CFDCABBDBD573
SHA-256:	D26C1785B866A18666ADB61E39511C9A2BF3D08A8125489115E3E03BFBDC5A6C
SHA-512:	2663C17C4773962A16014359D86F520ED66AC6A88980DED3302A6A048D9AD1138252B8171F3CDF09FC994FB513E29A5C86600C97F9593BA75BFE70959FC6016B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...B......T......sRGB.........IDATx..\k.]U.^.N..2....RK1.Q.?....T...(`...5s.A...1...B...3./.+&..4.N..VM\|Tc.....AI.........}.=.....L58]....k......3N..4.G..'.Q......?..B.......... ~. ._..^............C.Af.......>."0...-..1..\|.iy...._.V..(lT+p.x3.1?.3)S.o../.X. ..\|..e<....U..z.......<5@v`...h.3QB..\|.......'...B=...Z.....`........... [e..d.z..b..6.. l..@.YNp#C..,.......D..J...4...P#'...5..p..........FU.H.qz5....+..j.._".3...M.L.....b/.0.........\|.?...=0b.^g./.8.Sr.....!.Z.R^.. .)<.z.......N...f@L......}Y...a..1...d.{..m.....)..)Y......Z....Bo.r?..j.~..G....0...`......).YbO.......:.......?M^.;..%~..A%.J>....m.....CD.Y9M..o..%=m..`..M%~9B0.......pN.....Q.w% P.Q....@`;.........T.\....O.Y.......,.@[j...\.../.wMM...;.f5}...xFH[8...q8....F.t>q...W`..W.....7 .......g\.......\".@pr..........4....B..`8.....0?.&.8l...5a.7.u .f..'x.....N.5q.b....h........4.....X'....>.M...n..Q....WQ.I=..=$.....2\V....T...D...uc.-.m.hP.H.@{B..6

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18308)
Category:	dropped
Size (bytes):	18928
Entropy (8bit):	5.641565573664448
Encrypted:	false
SSDEEP:	384:qohDrghXUPMCvumkDNYuZtlI5SJr9eY/l4naes/bAgdZ2A6Hr0g:jfyUwmydVr9e5aegd2A6HH
MD5:	14829D397567F087775A174778343B90
SHA1:	DDB522B447CA0DE357BBABC7A32A906CA619C032
SHA-256:	6F9D05882DC626A84E3E41728F81D871A8C935B5735C9EA7570D177CC90767E9
SHA-512:	9B8BA9463A744CFF9C644E19B07D3D883D9CEB95A232D9E63EC51308A0388324D0C9E34D5538C2773195E5E70158E166DAF7B83ABCDE23D47D0686397886C5B9
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var F=function(E){return E},p=this\|\|self,t=function(E,T){if(!(E=(T=null,p).trustedTypes,E)\|\|!E.createPolicy)return T;try{T=E.createPolicy("bg",{createHTML:F,createScript:F,createScriptURL:F})}catch(y){p.console&&p.console.error(y.message)}return T};(0,eval)(function(E,T){return(T=t())&&E.eval(T.createScript("1"))===1?function(y){return T.createScript(y)}:function(y){return""+y}}(p)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var G=function(E,T,F,t,d,p,J,Q){if(((((d=(J=(p=(Q=(E\|\|T.C++,T.i>0&&T.S&&T.hP)&&T.l<=1&&!T.V&&!T.J&&(!E\|\|T.Pu-F>1)&&document.hidden==0,T).C==4)\|\|Q?T.R():T.I,J-T.I),T).s+=d>>14>0,T.h)&&(T.h^=(T.s+1>>2)*(d<<2)),T).H=T.s+1>>2!=0\|\|T.H,p)\|\|Q)T.C=0,T.I=J;if(!Q)return false;if((T.i>T.g&&(T.g=T.i),J-T.B)<T.i-(t?255:E?5:2))return false;return c(T,360,(t=(T.Pu=F,S(T,E?157:360)),T.P)),T.W

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 96209
Category:	dropped
Size (bytes):	39098
Entropy (8bit):	7.994298891725384
Encrypted:	true
SSDEEP:	768:TQvdYA10CltfWJxr+VzuMRjVIihmLTEKGZ8SRjGtAhMjQsbkEUv9GCj:MvdYA1XmyhEEK7S3hMjQsbkDVG0
MD5:	A94E5858D6B6BDE850091DE52235A601
SHA1:	BABDE9C46378C1A7AA6C29CEFB49A86E39D5FBDA
SHA-256:	14A4A7532860DCD8853DD29CDBF5A1DB563800C31B0462897F001E13E18D3235
SHA-512:	50FA34963727D481505BB40F9E32637428010780A8345824A942058381D34D95E02E9BCC3B44B3538DADD8D8DB41559E47EB2F79FBB74D25D3D0F818BB18B8E2
Malicious:	false
Reputation:	low
Preview:	............r.W....<..R...H.....u)...Te.H...I2m0..$$...Y.=..D...+...%w..].....-"o.......>[V.MYW."k.7.....i...........rV....`.x.U......boZ../...7...?....n..v.............{?.yY......XlM...w...W....p^4.y.E/.....-.iqVV.......?..\d.4.p....n.N.[.....ys.U....#.a/....j...+....yg.}0:.~.W...5...4...Qo2.O..'...V.jy.... ox..>...l..Vq...z.E...:\|....<.........Y.n....f.t2..^V........h.@.....V............_.5..C;+gM1.7Y.$........?..3..>......\|.......fZ3..99\|wQ.X....^m.#,c......Qq......+&...b.r.....jut.B.%i...\|{.v.5.p...n^.M...o.._........bo^\.o...~..._>.+.i..'S.7{.m...b..3^..F.9-..im.{u5/&..E3i..Iu^.Z{.72...~.in}...,..tlGp....M!......z.....@v.......:yL~[..-m..UR.-2.>,..t.Lv{...f...m..}p...5....b.l.(.......'.H.f...r...P......{.\|i..l{.Mf.py0bg.f.Y..5.V...V.o.zW.....d.(...._.....=5,..nn..4r?......7.{...AD..3.`c....... f...../....V......kj..^..x...0.....6.2c..}.79=-...6.#}u6..lO.....-.E.f..9..j..:.Uq.8............\|../....M.y...'..D7....V..l^.].W

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1617), with no line terminators
Category:	dropped
Size (bytes):	1617
Entropy (8bit):	5.760632410203461
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXAAbWk+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtfO1/6QsQ:iEceKo7LmvtUjPKtX7ZO1/2LrwUnG
MD5:	FA1576201E0AFE008F7A999EA7B2BC06
SHA1:	0CDD38F6714C413469D2BC8FCEF5D3F004F1CFB5
SHA-256:	FE4543F57464DBD80FA982BBF129B06CD2C3D2D7C905E620F8898BD06F18A7E3
SHA-512:	EBFFF4B883D92E6A16E1FBCF9FB6E22B6177C1BB1D3F8A2CE06F7BB99BE5C9FAEABB53F70889D9E551FA4C1BD37432269F8B03746E24DBB54C0BF107E82E4A3C
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LcqC0UpAAAAAGWHMScrTGNdbU5jmnu8qPWJRRUM');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkU

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55812), with no line terminators
Category:	dropped
Size (bytes):	378810
Entropy (8bit):	5.715692422732925
Encrypted:	false
SSDEEP:	6144:unmOpL4P+6pVS2rkI7DX1kejp7MzXVp8oNUxAcaKDKNH7yVPx0XU:u3dt6pA2r37DXH7Mz0cUWcaKWNH7yV5L
MD5:	8B4D4A7AA800C08CF75C5CDD92CEFCFA
SHA1:	103AD28C4FACC2A664DA6F2986ECC4DDB963E526
SHA-256:	33A7561F96C8488E6C85E35A0C51B7AE40970DCC341FE6733E3F6B02C1C166CE
SHA-512:	DA9BD76406BE1EEDE679C628D17F92D95DA488FDE462327ED711F7F65D12CB9A62B189F64DB68740058708B6FCBFF96875F4E41C74AFC30012F5348CB7073139
Malicious:	false
Reputation:	low
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[11],{"8dme":function(_){_.exports=JSON.parse('{"CHAT_BOX_LIST_LOAD_ERROR":".. c. l.i x.y ra khi t.i tin nh.n.","CHAT_BOX_LIST_LOAD_MORE_1":".ang t.i tin nh.n. Vui l.ng ..i trong gi.y l.t.","CHAT_BOX_LIST_LOAD_MORE_2":".ang t.i tin nh.n. Vui l.ng ..i trong gi.y l.t.","CHAT_BOX_LIST_LOAD_POLLING":".ang c.p nh.t h.i tho.i","DB_EXPORT_ERROR":"L.i x.y ra trong qu. tr.nh xu.t d. li.u","DB_IMPORT_ERROR":"L.i x.y ra trong qu. tr.nh nh.p d. li.u","ECARD_CHEVRON_LEFT_TITLE":"Sticker tr..c","ECARD_CHEVRON_RIGHT_TITLE":"Sticker sau","EMO_01_GRIN":"C..i toe to.t","EMO_02_JOY":"C..i ra n..c m.t","EMO_03_KISSING_HEART":"H.n gi.","EMO_04_HEART":"Tr.i tim","EMO_05_LIKE_STRONG":"Th.ch, m.nh","EMO_06_CAT_FACE":"M.t m.o","EMO_07_BLUSH":".. m.t","EMO_08_IN_LOVE":"Y.u th.ch","EMO_09_SLIGHT":"Kh.ng c. g.","EMO_10_

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5931)
Category:	downloaded
Size (bytes):	6020
Entropy (8bit):	4.903538366634001
Encrypted:	false
SSDEEP:	96:+TDVwQVhz1Gxx0/ttcNh/IhjamY77ZtwPqWTYJ+RFDyAmjczaujzCuU+g2Ufxkpt:+TDVyggYgJIFDyAmjcnjrU+g2Ufxkn
MD5:	444577AE1E15DCC3822284560083065E
SHA1:	9738C22205CE4805E78F8E04EA1D0434D3B36F96
SHA-256:	575F7BAC9E53F80BF8CF0DDF698F4B147FD76B0201D2D4FE24A6D3C4673B7E72
SHA-512:	8A17AC8EB2262417C3579A66BD1480322EDB289FE5F102D17ECEE3B836F8AD410810774189A5886CA30206D3D36237DD7F711E1DD9BB1835D900D523D842495E
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/vendors-embed-web-startup.f85daca1da58d70b76b1.css
Preview:	.CodeMirror{font-family:monospace;height:300px;color:#000;direction:ltr}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-gutter-filler,.CodeMirror-scrollbar-filler{background-color:#fff}.CodeMirror-gutters{border-right:1px solid #ddd;background-color:#f7f7f7;white-space:nowrap}.CodeMirror-linenumber{padding:0 3px 0 5px;min-width:20px;text-align:right;color:#999;white-space:nowrap}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{border-left:1px solid #000;border-right:none;width:0}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;border:0!important;background:#7e7}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor-mark{background-color:rgba(20,255,20,.5)}.cm-animate-fat-cursor,.cm-fat-cursor-mark{-webkit-animation:blink 1.06s steps(1) infinite;-moz-animation:blink 1.06s steps(1) infin

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (701)
Category:	dropped
Size (bytes):	562124
Entropy (8bit):	5.716947704581203
Encrypted:	false
SSDEEP:	12288:6H9/NuWDZ0RNuXaKEEtGuU8BSyXHU9Tx44lY48ULxClk5lS6IcfEFJ+Y0WO:Iba7mo3TlxhfEFDO
MD5:	9639541C1F2502C70271D16F3FD63465
SHA1:	7B6947E122F068529A2790B9E22B6143CB7B7B9E
SHA-256:	2EE2AD8ED051F55FBA84E0A3AB94A37AEC30C7D58E5EA8FF476C6D3D97705CA3
SHA-512:	35A54CA9EF2AF14C8FE5670CEE6B20E286E633A76C58FE8A90336FF7FD04C3DD6EEB2812A0145492B4A2A83CCC6586279041D2CF56EC21F162F554F670ADD0AC
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 24989
Category:	dropped
Size (bytes):	8596
Entropy (8bit):	7.974480981068265
Encrypted:	false
SSDEEP:	192:b1RW53VICeGqLKTw97WzC0Jao5lFy3Skbi6rSDL2lw:BsZ25WTw97WZRlFQbi8gKC
MD5:	90CB71FE2F5A1D886BCD9C588062026D
SHA1:	6DE9A6A803A22C21F2DFD60DE94C8F5C1801022E
SHA-256:	9E169FECDDB1364843AAB0AA05FD851B6E59F81BA1F782309298E0EEAF211DCC
SHA-512:	357A98AFABA24F4DBFC4531AC982EC4481C0796B09CD92A61F719CB8DB042A3952CA91592FC46991EB96ADB6FD02BC8C3CBB7DBACFDE53ACA235706D1F26767B
Malicious:	false
Reputation:	low
Preview:	...........\.o.F..Wdb. ..j...=)..&.@R...m....4..R.JR.....~..P..t....-`X.\|.y..}....\|Z.E..JG....q\?.t1...<........L.C.....g=....~U.uu.,f.L..k..R..NK.L.....^.z.K4.va.H+ea .T....Uu.b.....q:.....U..S.XGQ.(..^..z.X..,.0x..yQ..I....4K....g....}.....6){:..7...X.4.y..:....H..f7.clj....]\.W... ...]...t.D..8..G.....C.6Yg.......d._e...h.t.....bX..~\.*..E]...=......ez.p.]..u...f.e.`,.E.\.k={[?d.5..f....R".....`..... ."....rH..z..q>\%%V.m1...q~\|<B.\|..vhb.q[......6e\|.G..I=].U...!......7.Zn..:.0\|i....Z.y....T..j.'..V..S...Zxo.&......,.,.\|X....E?.B. .........v{..:K..V...S.IW....c+.".g..Fr0.1...q]..".W...i..OX.C..U.m..t........^.9/.i6..G.yL(m.$........g.v.v.C[o(:...jQ?..Q.^S...GU.....nJ.?.K.......#...z.M3O.d.f..........T.x.M.........V...M.9...{,..p.l..'Y.F.-d`k^.)6..?.........h)...A"..H>-.aE..^l.\|^..;>.....i.".%.P.....o.G..R'.eha0Ko.hR.+.1.9q0:9.c...B.....du..x.m.;.[.Z:...Uc.$....E...H.Z..n...q..9..mZ..i....`..f:..#wl.P..8.=!..e#...Rz..V:.....:.....:2do1.;:1

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	downloaded
Size (bytes):	296662
Entropy (8bit):	5.592117572292151
Encrypted:	false
SSDEEP:	6144:vpmGbgBuzoBkx63x0C8Gp/n2Utu9BW24n1T:RvcuzoBVAEh
MD5:	C055F6B45C6429EEFEA60929089D4A94
SHA1:	2370D07293754B447B321CD8EE63D480A1F9D43E
SHA-256:	6E577CB710D003606DC4A4879A112C48A02CD8486D8E60871C118A836B197D0B
SHA-512:	C96477A302DEF38BAFB5F3C7207FEF99BEC55C1545AA43C69EE7E4668B21ADAA856D261316F86D78071E53F33861CAB9B2B5D9F876AD04D52E6D8B0E8DA125E3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-RYD7END4JE&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":10,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":10,"vtp_includeConditions":["list","zalo\\.me"],"tag_id":12},{"function":"__ogt_session_timeout","priority":10,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR"

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 360 x 360, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4846
Entropy (8bit):	7.930626799912024
Encrypted:	false
SSDEEP:	96:XJ9wtuwl4y10mOVB3eKREAZtmmeyv+gGfdOZ2m2hF/SRpG4d9BVbYW:Z9J76OVBuKRE0tmmxvMfd22m27qRpG4j
MD5:	6045E01135B5413B2704D45439DF4BDC
SHA1:	0689F891121EBD01F79EEC3D6B58105F8A49C1BE
SHA-256:	9AD9D7AB4C97ACD482F13129B535F2232A6E78A63C12F57D2C2591CAD35F4F7B
SHA-512:	C9C3ABC075F1FCAAF71C6AF7B98D01D92D2BD1426D7AE351A4267E605DB25E41132FB0DC02014E0699310E0BE2F678062A7680026D1BDD24C166E35888839859
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/favicon.ico
Preview:	.PNG........IHDR...h...h.....M;......pHYs..........{Rk...<PLTEGpL...q..#o......H{.............h.....[..^.......}..K...L.o(.....tRNS....o..5N.}o.\...AIDATx..v.*.E;.e[..H...m.l...U..UL.5k.....S..D......c.{.j^.!.Ak..k..J...?...........B....-.4......ihO...[.y.........B^.~bS}.... 4....I...3....C.!n.R.]F..f....AnT. ~&_-...[.\.2nU.\qu......}..-..k....w....Q.F..a....NQ....lF..._a.N....7(.Y..].z,..S....d}.0...:.;..8w...yI..Q6.z.j.v'f].F}.b.n..5.2.E=.\|)w.].Uu/..4n.......n-..../.B=..~....._5...Y.y.5R..8_...Q.<.....2.V..8w.....Y......z........y....UI............r~\...Q..I...)....y...&.5HO..X.z;.~s.....9.....1.....!~$......z.`.&..6..<....T9.]........OL@.`.0.}$.......m.:A......5{>z.^A..y0..1.....nV.#.n9?.z.....nQG"...L.c..b.n}#....g..%{..y..<..REL.7Nj..........#p........".3.:.....8..'4.=.lz.....WBm.AEz.s...K.,...t..l......-"...q.h7"M.......s............-...}.1t4.^.TX..1$M/.G....0.......f.,hC...b...<z....#..<.{.....^N....K!.y...8..^..a@/..7+..1

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6231
Entropy (8bit):	7.917512639800623
Encrypted:	false
SSDEEP:	192:z92io+mioZhUza1lL02I1IGLfBiSUg17YepdV7+lw:YH/ZhPPY2qTdUg1scMlw
MD5:	01A93196B1E1FE60BC087A32B3B2D470
SHA1:	A6A6B5D40E8E9E434DA5EFED7F4D5B7054F327A2
SHA-256:	15556D64388319A42FFA8A357CBDF41AEBADF73B704A550DF9E8F3526CDAA095
SHA-512:	BEBAF0A74368BCD3B76B83EE5D5AA27BC6AD0284E524C403CE25FF81B0736AD1EEBCCD6F559666DCEAACE1AEC814B2FCBBC80BD0F008AE25D1E34315E3D855CD
Malicious:	false
Reputation:	low
URL:	https://stc-zaloid.zdn.vn/zaloid/client/images/favicon.png
Preview:	.PNG........IHDR...`...`......w8....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>....IDATx..y..U...V.[z.Nw..od#........ ..e@? ......(..(.~PQq.A...A.T$.....5!@.....v:......q..K._...,.....~..u...{.{..0BD..P.T.C....`....J.B.....`...f....T.i...}..`K...l.....$.R.5.w8.-.......q.....H..(..9,.{.-..2....j.u...;.Z`gP.2..knCt........~(F.......3K......o`.....;....)X.IN.....r.I.......B..MD&...F....g.Mbd&B..isf0....U].>....l....................q........i.."......{...=.s....P..i............q...d.E...<...L............0kH...W.9w<.=....=..p/f6..1.J...(>.!<.0.(.u.,.g.#........./.........C.B\|."..LP...I\|.$.Za.ij.!..G.........P...(J....(E`......]..9.T8..!..(.O".QG...C.B\|n.n.D..Dp.t&....."....\|..3!;......n.D. ..$/.D..:>x..\|....2...k.. `.....B ...+$s........Q.Q....KV&t.9bB..i...$.Z .N"5s......'..c..].....A..0......\}2...o...\.D....3.z..F..8..5A..&5eX^....\|....1.=.n..-...k.h...1.+N......._...B{...E1.yL....CH..C.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3663), with CRLF line terminators
Category:	downloaded
Size (bytes):	7502
Entropy (8bit):	4.924196370313068
Encrypted:	false
SSDEEP:	96:RFmFmvXHAbrle64RxOP5imb8vzPEmKwUti31fVBj65aRl4XWr0c9zske0TxKH:vQmXHlojb2X4tyhOXWr0Hke0C
MD5:	5F2E48B79E6F65CADD6A37CB36D00427
SHA1:	9CF5A8819FD6CDCC14A4BB4010740FFAFC16BB21
SHA-256:	BCFED2DB618B2D8E0080DEF65F9AE2653141A8C7727032453AB6C72291000302
SHA-512:	F9A0AD0FDB800BA51654F1237A2806FAF00DAC3357A3DBD903BBF230D144767CB467B52EE26C4D16E1B1A28F1D6D5351E6F0100BA71F16BE3AA86E07AC691C63
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/js/main.js
Preview:	// Slidebars..var slidebars = function () {.. var t = $("[canvas]"), e = {}, i = !1, n = !1, s = ["top", "right", "bottom", "left"], r = ["reveal", "push", "overlay", "shift"], o = function (i) { var n = $(), s = "0px, 0px", r = 1e3 * parseFloat(e[i].element.css("transitionDuration"), 10); return ("reveal" === e[i].style \|\| "push" === e[i].style \|\| "shift" === e[i].style) && (n = n.add(t)), ("push" === e[i].style \|\| "overlay" === e[i].style \|\| "shift" === e[i].style) && (n = n.add(e[i].element)), e[i].active && ("top" === e[i].side ? s = "0px, " + e[i].element.css("height") : "right" === e[i].side ? s = "-" + e[i].element.css("width") + ", 0px" : "bottom" === e[i].side ? s = "0px, -" + e[i].element.css("height") : "left" === e[i].side && (s = e[i].element.css("width") + ", 0px")), { elements: n, amount: s, duration: r } }, c = function (t, i, n, s) { return a(t) ? !1 : void (e[t] = { id: t, side: i, style: n, element: s, active: !1 }) }, a = function (t) { return e.hasOwnProperty(t)

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20260), with no line terminators
Category:	downloaded
Size (bytes):	20309
Entropy (8bit):	5.5681787722589275
Encrypted:	false
SSDEEP:	384:eGamrofOSuRBIpWfPitEwNyepjcN4IHuCGuYbHns3j:naqSuRBIpcPI1ce+uCGzHns3j
MD5:	619AA8BE1F421AF034AA253D1FB919AC
SHA1:	BFA14AEA28F45C3E8510BE6C12D75959513E21A0
SHA-256:	1615E89F00FAB6B204F5DA74F58D6E64F932D01734D4AE9EDCD4F7A2D9CE5EDB
SHA-512:	4FA0F64A9BDCC2A7EF1782D041D4398A2B8E73E3A8A8BC78F81B054B77D57FC5DFD4B281E1F7E13CCFD5B88C5B121A86FFDCC4EA275BC210503E0E83B41162C5
Malicious:	false
Reputation:	low
URL:	https://stc-sp.zadn.vn/session-sdk/session-sdk.min.js
Preview:	(function(_0x5946fe,_0xdedb66){var _0x17a4d5=_0x44ab,_0x4bcad3=_0x5946fe();while(!![]){try{var _0x41c6ea=-parseInt(_0x17a4d5(0x19d))/0x1(-parseInt(_0x17a4d5(0x1e4))/0x2)+parseInt(_0x17a4d5(0x1a1))/0x3+parseInt(_0x17a4d5(0x170))/0x4+-parseInt(_0x17a4d5(0x1ea))/0x5+-parseInt(_0x17a4d5(0x167))/0x6(-parseInt(_0x17a4d5(0x18e))/0x7)+-parseInt(_0x17a4d5(0x19a))/0x8+parseInt(_0x17a4d5(0x1a0))/0x9*(-parseInt(_0x17a4d5(0x189))/0xa);if(_0x41c6ea===_0xdedb66)break;else _0x4bcad3['push'](_0x4bcad3['shift']());}catch(_0x14b394){_0x4bcad3['push'](_0x4bcad3['shift']());}}}(_0x27ce,0xeb388));var ZaloLoginWidget=(function(){var _0x78b53e=_0x44ab,_0xaad793,_0x5183a0=(_0xaad793=function _0x3bbfaf(){var _0x533b94=_0x44ab,_0x420631=document[_0x533b94(0x1d4)](_0x533b94(0x18b));for(i=0x0;i<_0x420631[_0x533b94(0x1ed)];i++){var _0x2e6a12=_0x420631[i];if(_0x2e6a12[_0x533b94(0x192)]&&(_0x2e6a12[_0x533b94(0x192)]['indexOf'](_0x533b94(0x182))>=0x0\|\|_0x2e6a12['src'][_0x533b94(0x184)](_0x533b94(0x1af))>=0x0))return

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 360 x 360, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4846
Entropy (8bit):	7.930626799912024
Encrypted:	false
SSDEEP:	96:XJ9wtuwl4y10mOVB3eKREAZtmmeyv+gGfdOZ2m2hF/SRpG4d9BVbYW:Z9J76OVBuKRE0tmmxvMfd22m27qRpG4j
MD5:	6045E01135B5413B2704D45439DF4BDC
SHA1:	0689F891121EBD01F79EEC3D6B58105F8A49C1BE
SHA-256:	9AD9D7AB4C97ACD482F13129B535F2232A6E78A63C12F57D2C2591CAD35F4F7B
SHA-512:	C9C3ABC075F1FCAAF71C6AF7B98D01D92D2BD1426D7AE351A4267E605DB25E41132FB0DC02014E0699310E0BE2F678062A7680026D1BDD24C166E35888839859
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...h...h.....M;......pHYs..........{Rk...<PLTEGpL...q..#o......H{.............h.....[..^.......}..K...L.o(.....tRNS....o..5N.}o.\...AIDATx..v.*.E;.e[..H...m.l...U..UL.5k.....S..D......c.{.j^.!.Ak..k..J...?...........B....-.4......ihO...[.y.........B^.~bS}.... 4....I...3....C.!n.R.]F..f....AnT. ~&_-...[.\.2nU.\qu......}..-..k....w....Q.F..a....NQ....lF..._a.N....7(.Y..].z,..S....d}.0...:.;..8w...yI..Q6.z.j.v'f].F}.b.n..5.2.E=.\|)w.].Uu/..4n.......n-..../.B=..~....._5...Y.y.5R..8_...Q.<.....2.V..8w.....Y......z........y....UI............r~\...Q..I...)....y...&.5HO..X.z;.~s.....9.....1.....!~$......z.`.&..6..<....T9.]........OL@.`.0.}$.......m.:A......5{>z.^A..y0..1.....nV.#.n9?.z.....nQG"...L.c..b.n}#....g..%{..y..<..REL.7Nj..........#p........".3.:.....8..'4.=.lz.....WBm.AEz.s...K.,...t..l......-"...q.h7"M.......s............-...}.1t4.^.TX..1$M/.G....0.......f.,hC...b...<z....#..<.{.....^N....K!.y...8..^..a@/..7+..1

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2612
Entropy (8bit):	4.640499180893672
Encrypted:	false
SSDEEP:	48:ctGU0h/czxMJcBtAsKUNll8UQM6gdrnOBXoWbgkhIxFiZhu1u+JiR:u0h/czP3iPHgmhB
MD5:	4BE5AFD86947EABEE5899A05D7516A72
SHA1:	BC564E5FEA5B7B0E4B36DE102975A19C01AA8163
SHA-256:	7F562CBA54A7148615068FA057DE932BB937340B3653079007F667001F0F499B
SHA-512:	7D06F0926BAEB6FA9A79081AD67CAEA72AAEB4B3293C8537D9A3736C13C848C0FFD17C6678526DB701931830F41819429397E024FF43720C0BFD3867E8A4BF65
Malicious:	false
Reputation:	low
URL:	https://chat.zalo.me/assets/logo-new.146dfa01c78183631d33b77999a18288.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="104px" height="39px" viewBox="0 0 104 39" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 49.2 (51160) - http://www.bohemiancoding.com/sketch -->. <title>Log in</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Login-screen" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Log-in" transform="translate(-158.000000, -44.000000)" fill="#0068FF">. <path d="M160.800392,51.9047451 L160.800392,45.902 L188.813333,45.902 L188.813333,46.7561176 C188.813333,48.349451 188.600588,49.6498431 187.565882,51.1757255 L187.441176,51.3180784 C187.214902,51.5751373 186.68451,52.1767059 186.432549,52.5037647 L168.428824,75.1155294 L188.813333,75.1155294 L188.813333,78.3165098 C188.813333,79.6427843 187.738039,80.7178824 186.411765,80.7178824 L160,80.7178824 L160,79.2082745 C160,77.3596471 160.459216,76.5347451 161.0396

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	155
Entropy (8bit):	4.689978990636976
Encrypted:	false
SSDEEP:	3:TMQCGGt5afTE6HvK7EjAX+XANJTt+dLxu+YEOhAumjHmIJyHORSRsIrANNLQGz:AnGUsJPKA84ANJTiLQEO+jHmX+STUNp
MD5:	C1A86675FC2EEFC2FE247F11E170E910
SHA1:	33ED659C6660804F875216C8CC7AD32A06158212
SHA-256:	061A4B5FE16852D2825D1F1C7B2FD3C0624EF78DB851476798F3592AAD565402
SHA-512:	8A56669CB0A6F70BBF2C28077BA4042186829A092CD74DED9038BB9ADDDFE51BCB3B49825F2E98049A2661FDA7644A24F753B9FD7DBE7D5C0CC79AFD111302C6
Malicious:	false
Reputation:	low
Preview:	function adtima_conversion(e,t,n){var r="//log.adtimaserver.vn/rest/conversion/conversion?orderId="+n+"&conversionType="+e+"&value="+t;(new Image()).src=r}

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Python script, Unicode text, UTF-8 text executable, with very long lines (65400), with no line terminators
Category:	dropped
Size (bytes):	2445004
Entropy (8bit):	5.621866299570082
Encrypted:	false
SSDEEP:	49152:aiz3rVDrGhB8QWX3XgBbAZNhhtKYoHdR9eRCWoJJlyYef/Oa6YqVFxRie:a+bVWhB8QOsN9R9eEkf/Ose
MD5:	C2DD662600A1E12540BE84C2B771989F
SHA1:	681CCE9ED03D31160DDFCEE966078799B765F6ED
SHA-256:	21AF0754B4254E5E5E8F6423E35566D67700B288835C249C06726C035FD3F2C5
SHA-512:	CC18DC2DA71DCBC08684335695ED0F660E1BA5267488092E1FAD75FEE076524C4C1CE34603651E942DA77BD58AF0319F550117C27FAC6073090413AB77E7573A
Malicious:	false
Reputation:	low
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[3],{"+924":function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"b",(function(){return o})),n.d(t,"c",(function(){return i}));var r=n("9AQC");function i(e,t=0){return"string"!=typeof e\|\|0===t\|\|e.length<=t?e:`${e.slice(0,t)}...`}function a(e,t){let n=e;const r=n.length;if(r<=150)return n;t>r&&(t=r);let i=Math.max(t-60,0);i<5&&(i=0);let a=Math.min(i+140,r);return a>r-5&&(a=r),a===r&&(i=Math.max(a-140,0)),n=n.slice(i,a),i>0&&(n=`'{snip} ${n}`),a<r&&(n+=" {snip}"),n}function o(e,t=[],n=!1){return t.some((t=>function(e,t,n=!1){return!!Object(r.i)(e)&&(Object(r.h)(t)?t.test(e):!!Object(r.i)(t)&&(n?e===t:e.includes(t)))}(e,t,n)))}},"+A1k":function(e,t,n){"use strict";(function(e,r){n.d(t,"a",(function(){return o})),n.d(t,"b",(function(){return a}));var i=n("RQwI");function a(){return!Object(i.a)()&&"[object process]"===Object.prototype.toString.call(void 0!==e?e:0)}function o(e,t)

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 42437
Category:	downloaded
Size (bytes):	14455
Entropy (8bit):	7.985895139397022
Encrypted:	false
SSDEEP:	192:CTqCMA2BVolQ0KGRyt5nnv5cHOtCdi4Prdldj6fPD01zJDhgk8SdJrZ93OWth56x:moA2IwGRy7nBtCdis37RWk8SdlX8Z1N
MD5:	E57B0C957E7B0AC015DCEAE11FE1118E
SHA1:	44A7FBF55FFD2ED1265792BB3B3EB4F545004C61
SHA-256:	35C7B907FAC7EF8902869CD6FEBDBC19285AB502958EB3A14E75B47D08F37933
SHA-512:	8A77DE7216F8762ECBAF6F624B6651A4FF65C0D3AC3013B5F1F4A27918B2BF60A165196276213D6376C59549DD08132A6273AF8BDB5532FD6F02CB8CE99ED2BA
Malicious:	false
Reputation:	low
URL:	https://chat.zalo.me/soc-worker.9c0875841efb5667ea74.js
Preview:	...........}{W.H....S..."/...9.h....lH.....2.n..[.H2.....U.S.L.f.=.g'.~w...tr.G...7......;9..2.l^...Q......o.N.~..//.y........j.w6.O...yZ....G\....f.J.,.Z..I..z..^.d..t..~v.D5+2.....4/..KM...4..q......z>.F.5.$.q..a.....xm...$..=.....zVA.....9=.nn.x.....x[.SQTW\.Zd..(........l.....u..2.zh7....4......W.ivv......q.n.m..D......pUc..D...n..%.[9...P:..'Z....>]......>....b....:..mG...,.XMnP...A6..[..6...b.Y.c...........m.P.{h7.j.."`0...Z8. .l...b....y.4.P....VK.WFG.9{..ya.=.....>..^...y..O\|.~(h.....D.Rm...P.}......K......4..jZF...J....<.6...A.S2.......}?,p.e.y........\|;[.....8.V..y.Y.....V.....<.7;..<.<.....k.O...g...........`k...Y.....=:.5.f....T...4..X.....J.....u....@...s@..kL..../.Vw.ge..%.)...h...q~.yY..(6'I.....R.......;...v...L1.../.L\z{E.(.KQ......@.ey...y....z....`,..=.D..s...^.....Nn1.s...f.h.....E.....yU\i..9B..AR......J..#o......`V!W.......(q......c..I....ZgM..m.?...!.g.y .i.&q.8...x.c........0..A{,....6 ...$.....z.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2649
Entropy (8bit):	4.580028300717239
Encrypted:	false
SSDEEP:	48:cb3K4l9l9PQtZLqFsNZINyVNDfF7iA/aFsS5+2PRBC7VkK0UczhdRWNQ0G:wK4vl9PSfFmEyso+qhBlzhvWWd
MD5:	83D403849863DCEBE9B0FD26A0DF6EFB
SHA1:	0181B8F116E2B17A48F95AF49771886F956F08B1
SHA-256:	1F58B046ABE12BF2DBE3BF0B4D247EDF41041BCF3EE2FCC03786AD4CBE78B2BE
SHA-512:	7B92DCFDFF5EDE0D2552ED2D1E8B769A127248CBCFD18C0AD5C4C5587658BD30596550EBE75CF5F386498CA68D72966D84D2E2E78B5DE108E155E7CC6B6F9D3A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="25px" height="9px" viewBox="0 0 25 9" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 49.2 (51160) - http://www.bohemiancoding.com/sketch -->. <title>Combined Shape</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M12.6808693,2.52045104 L12.6808693,2.06398482 L14.048117,2.06398482 L14.048117,8.48239004 L13.2659151,8.48239004 C12.9439124,8.48239004 12.6825323,8.22236344 12.6808772,7.90080374 C12.6806605,7.90096172 12.6804438,7.90111968 12.6802271,7.90127761 C12.129539,8.30399226 11.448805,8.54305395 10.7134839,8.54305395 C8.87197018,8.54305395 7.37885092,7.05092395 7.37885092,5.21063028 C7.37885092,3.37033661 8.87197018,1.87820661 10.7134839,1.87820661 C11.448805,1.87820661 12.129539,2.1172683 12.6802271,2.51998295 C12.6804412,2.52013896 12.6806552,2

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 311639
Category:	downloaded
Size (bytes):	58763
Entropy (8bit):	7.994434786167147
Encrypted:	true
SSDEEP:	1536:4D9qCbjah6MneRWEH3FoFNJ2VXUJYxiN3jmBbs:4D4CSeWO0eUJYE3
MD5:	2234ED186F4B26D75ACD480E3D04F4A1
SHA1:	70114F66999039152E601B9E6F3A3A1043BCDB9C
SHA-256:	EB521EC4CA22C451943AB027B40A7FA74F20F306B84FFCDEE95923F0C71CD161
SHA-512:	7703C3BBE9DF6DD97124919F02D0FEA37FB6535520E2EB6AD0E8353077CA082BCB2E329FF6D652CB15A1B3C38DA351D842B92D62BF2A24E0F6A47A148CAC4AFD
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/css/layout.css
Preview:	.............9. ........T.#RyOe.il..fm.lz.vf....x....3.K2u.:{.}...;..2K.....Q.....px ...........?...n3}.}8..M......tr1..n.{.^.}{..f.4...#.?..?o..w........s9....../O...f.......??.'../.y.......E......H...=.......m...l.....n......?....?..o_........j..n2.nG......h.;..m&............w..........a7.../W..G...v..6.?B.j...:T...xr\|.........oA..t..O[l=:..Z?v.........x1[/>.....v.p=:.#>.nv...{.b.]....0....]7..y.0........B_,...).....@4.s.P...Iw.b%V....^8.,o..G....O..z?]6.3.......=~b..j...f.O......h.J.@.....iRu.!..C..Y.?^.>,...#>...wS-w.~Xo.....(.D.d^....&..t...f..9..Yo.G0l.....EL...{.~............?..[&x=..\|@.]...`..#...\..g.....n....Xo.....n}.....!.......@..@.[..R rJ..f.p.5.Q...p..bG=...f....kt..f....?f..0.........^. ...8......nn.....x.m!......./.a..]\|22s..9.o.....z.D...m..8...............f.mG...b{6..hrr....wk.1h....r......kBN...@B. @........W.~.q...`C...l....M.$..[.z........[.......t.B....i....q......`.y....lJ2.._;t%.:.kDN..dO,..6..DL...i.Q...iFF#v]

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	dropped
Size (bytes):	825741
Entropy (8bit):	5.81933299045619
Encrypted:	false
SSDEEP:	12288:UXwZ3/4QRO2ir2zorZQ6MjsyuRenLMbhUsaURbLNRej:zl4QRO2ioorZQ6LyuReLMbKUR/Gj
MD5:	31B3CD5553686E0CCC586CB791AD18E3
SHA1:	4956DE2B0C55A66760815E703C7E97879B9F167F
SHA-256:	5E4744634652744BDD4FFC2D6A34182E3CEA7E4EC079EC912D041EB2BE8D3E46
SHA-512:	AAE24A4F461349A9B22667D5CB2BA7D31B10D18BCC82EFEE3A851F2EF854B9F0491828F5949863B1780DFE8217A49BDCAA157B63A0364E0C344B71C45D68FF5C
Malicious:	false
Reputation:	low
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[0],{"+7Kn":function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"d",(function(){return i})),n.d(t,"b",(function(){return o})),n.d(t,"g",(function(){return s})),n.d(t,"e",(function(){return l})),n.d(t,"f",(function(){return c})),n.d(t,"c",(function(){return u}));var r=n("N0Be");class a extends Error{constructor(e){super(`[MigrateActionManager] An action handler has already registered for ${e} action type!`),this.name=r.a}}class i extends Error{constructor(e){super(`[MigrateActionManager] No action handler found for ${e} action type!`),this.name=r.d}}class o extends Error{constructor(){super("[SecureKeysToMigrate] Invalid initialized data for SecureKeysToMigrate"),this.name=r.b}}class s extends Error{constructor(){super("[SecureKeysToMigrate] SecureKeysToMigrate hasn't been initialized yet!"),this.name=r.g}}class l extends Error{constructor(){super("[SecureKeysToMigrate] Inva

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 63, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	884
Entropy (8bit):	7.66493578303347
Encrypted:	false
SSDEEP:	24:mchh3l53p+T7OC7OCTlfOXZHn01PduqiURsN51OUN:h3fp+TPP5OpraRKow
MD5:	393EB9833C8142E877948834858AB94B
SHA1:	72EB88B364E962999B50C426093EE5D21CCE0BE2
SHA-256:	B352AA160C2ED24F570289D6080C7B079CEE3A69A287A3F174A57A667B0B8012
SHA-512:	23F9D11B74B247F05CA626CE6E0AB74AEDABBDF95C013A1BEB630E110354DD0764A7269E4257850CAC8FAEFBF061F6ABE9C35145D0E1C4A46A1764935E5347E7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...?......h......sRGB.........IDATh..=h.A..o/.?. .c.`...J... b.+.R..DP..H.)Laa.E,.L#..B,...P...Ql. .!...$b"..{.......}.{7....;...7.vo.\J%C.T.. ....F../3.[.L. `.._.M.....]..M...Z...w.2E.V.m.O.ARK.Lu[I.-ib.y;.....T.E&....H8.:...$.......+%v.VZhki\..-.RbWa.....U...+%v.VZhki\..-.RbWa.....U...+%v.VZhki\..-.R.p+;..X.S.........&.wC5.+5...('^.<&..@`....Gzy3..cl..&......^....78.4\|.a..?..p.^.C.....U...p\|..,'..z...B?y.......V.@.......B.r..v..x...l..........z-.3\.". ...,...E....7.H.WJ.@...{....yV`..t....m./..F..`....Z...D....\|r@.N. ......,......._]y.1..A..\.......K#/'y...~J]..t/.'..........ZN...c.P[&.$).w,C._.+:F...C...tH.Y.m.[.....{.....".M].l...?+@.'GK...S..g./..._.OV'#...?........../!l7>.".{bu.,3.p.<.O..=J.u..(.BO...e~.6..\|>!...gT.l.".JL.)...VU.../{W...-..G2.....y.....Y.E.Y.]...C.Ie/(..M.T....}..A....l..}.._...../U...m.......IEND.B`.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (755)
Category:	downloaded
Size (bytes):	4758
Entropy (8bit):	5.444714903431348
Encrypted:	false
SSDEEP:	96:YGaYfOaYfq7QK7gg72xx0P9kiv3GYxLpQxfhmkE8m7WtVUCjVymhkSAM:XHfOHfqlsgaxx0PVvWYPQxfhRE8OWVUK
MD5:	168654EE707B583CFF811A53CBD6A81B
SHA1:	42063888B077BDB7EFA032845F7AC1CE14A368FF
SHA-256:	E0230949CD0703A617EA705B5001AE98FD922082D9DBFE1C158CA99188967554
SHA-512:	C65BCEF3CB777B35EA217ACEDCCD480216DF02C8FCD54B251205F0203F9A21D6EC398AC0E2A2593CD4D4908F9AD7253AAFC03A5EF134FD3F775FB68C786262EE
Malicious:	false
Reputation:	low
URL:	https://id.zalo.me/account?continue=https%3A%2F%2Fchat.zalo.me%2F
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <meta name="robots" content="noindex">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="keywords" content="dang nhap zalo, zalo web, dang nhap zalo web.">. <meta name="description" content="Trang ..ng nh.p d.nh cho Zalo tr.n Web. Vui l.ng s. d.ng .ng d.ng Zalo tr.n .i.n tho.i v. th.c hi.n qu.t m. QR .. ..ng nh.p.">. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">. <meta charset="utf-8"/>. <meta property="og:title" content="..ng nh.p t.i kho.n Zalo">. <meta property="og:description" content="Trang ..ng nh.p d.nh cho Zalo tr.n Web. Vui l.ng s. d.ng .ng d.ng Zalo tr.n .i.n tho.i v. th.c hi.n qu.t m. QR .. ..ng nh.p."/>. <meta property="og:image" content="https://stc-zaloid.zdn.vn/zaloid/client/images/meta_background.png"/>. <meta property="og:image:url" content="https://stc-zaloid.zdn.v

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 39, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	7.758830592619288
Encrypted:	false
SSDEEP:	24:jcHEF0/xn5P2FPQNOe5pennq68iLbU8/hnA6TmxnURON:T0/x5P2FPQNOcenn2Ku6b4N
MD5:	61AB32280F5038259EC9C380C8C2D646
SHA1:	283178D26DDAB711D0DC7577A875CC42C2EE811D
SHA-256:	DD59AA3A642C6D0E3E970EC62C4CA24C987C93049C7A9B2FA3EBDA822FD17565
SHA-512:	86E67E2003FB17FD767CF5ADC51C41854E1855A8E1820637A1F0D857751C02C326856EE0896DCA816BE4A42C73919072CBFE4C8D3F31496D8E97722CE41E9483
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......'.....y].....sRGB.........IDATX..m..Q...g.JX..[RlY....@.O>`..."$vf.+!y..M..zY......%"j..$...RBH.K.....;..sgv.3.e..}.{.y.=.9.<..g..^.:.>.....i.\|.z.}D....$h@g......d.1......~mc]...._.%...Q......V7hnL}@.....9....!.p?7u..!.1......[.....z..;.-.[}.P.#`U\|qZz.4.....b..&c8..L.....A.}._....T."...1N..D...i.....u ..0...A.{.".....:8.........P..t.6I.Fh~.>........z.Nd...g7.I...@....t.!.S..G...r.=62..N.".].b..I..=73.j.h.H......G9V.o..s33..p...,.A...KBH?._+.....8.h{..k....K#...r..^:.}.k...B...x[..K...q..#..g<..g]..c.MZ.1."..X.Z.a..C.AD...D...t.f.j^0.........#8...:.[.$.{g.k...;..w.^........j)...I..C0.{..O..5..........^B....0.e.O.g.[.t...z....7b..^r.+.._7::w..3..y....],.......G.S......A.C.....0..,]..XP3h..D.....]...N.y.c^6.fJ......}....u...u\c..Ul.Y...c=..S./Q....y&.%1....Sx.v........h...Mb.ti/.O}....>TR.......y#S..gbP.D.<..4..a..as\{....5N.s].....4....M.@..+a....f4w..M...+..^..x..E....Y..4$..ju.._\7wG.2"z.5..q..\....].}r.].UM.i.[e]..^

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	202883
Entropy (8bit):	5.409689689534285
Encrypted:	false
SSDEEP:	3072:OAjJ2V1LIGKiSmEp+dTb/n7fnHdSUlMAeXg6Ror4+p8GXNDXKV+I3KBrW8YPCKVW:OA92V1L/SUlMAeXL8YPCKVW
MD5:	CCB4C95E5997507D2AA858D3013BE790
SHA1:	1AF8C770B0B931DE4937BD1D2F7B5D436ABBD1AE
SHA-256:	39A266A11D1A24A05481B415ED08F6B1678A04A897C855203097CF7499E51298
SHA-512:	4CAB4C55EB5DC45D846157B73DA6F546D8A45273125EBBB6408E895C85FE2974D7BF265D67A8CA94C66A989AA4C15D050AFF75B2C41DCC7A847F90B5C4CA349E
Malicious:	false
Reputation:	low
Preview:	__SCRIPT_TYPE__="renderer","object"!=typeof globalThis&&(globalThis=window),function(t){function e(e){for(var o,i,r=e[0],c=e[1],d=e[2],m=0,u=[];m<r.length;m++)i=r[m],Object.prototype.hasOwnProperty.call(s,i)&&s[i]&&u.push(s[i][0]),s[i]=0;for(o in c)Object.prototype.hasOwnProperty.call(c,o)&&(t[o]=c[o]);for(l&&l(e);u.length;)u.shift()();return a.push.apply(a,d\|\|[]),n()}function n(){for(var t,e=0;e<a.length;e++){for(var n=a[e],o=!0,i=1;i<n.length;i++){var c=n[i];0!==s[c]&&(o=!1)}o&&(a.splice(e--,1),t=r(r.s=n[0]))}return t}var o={},i={16:0},s={16:0},a=[];function r(e){if(o[e])return o[e].exports;var n=o[e]={i:e,l:!1,exports:{}};return t[e].call(n.exports,n,n.exports,r),n.l=!0,n.exports}r.e=function(t){var e=[];i[t]?e.push(i[t]):0!==i[t]&&{1:1,3:1,21:1,26:1,27:1,28:1}[t]&&e.push(i[t]=new Promise((function(e,n){for(var o=({1:"default-embed-web-startup",3:"vendors-embed-web-startup",6:"countries",10:"lang-en",11:"lang-vi",20:"vendors-web-startup",21:"web-startup"}[t]\|\|t)+"."+{1:"c74076b50554

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	10958
Entropy (8bit):	4.1259578495556655
Encrypted:	false
SSDEEP:	192:D1qiPVBEDijtiMynDQivS3hSq9ItXi5iMUiVqze:DEFDi9iv2YiKiVf
MD5:	3851269AD44D2F06210C5E1B093EB6FB
SHA1:	75DD5E8E98936356ED7AA83CA9D397BD4037B2E3
SHA-256:	F129ABB10E328DB5A240B1CA9F82E48AF391B6DB3512AD6CABE46C16654DF58E
SHA-512:	3B8C5B49C6E1374524B6264B782EC5851260D988E9E6EBC765B27BD0DD8DBCB4BFFAADB127E9FE3AE20E6D9728FEDC53F5EA00955447F02E9EF0B465EAA9EACF
Malicious:	false
Reputation:	low
URL:	https://zaloapp.com/qr/l?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn
Preview:	<html>. <head>. <meta name="viewport" content="width=device-width" />. <meta HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE" > . </head>. <body>. <script type="text/javascript">. function browserLanguage() {. var lang;. if (navigator.userAgent && (lang = navigator.userAgent.match(/android.*\W(\w\w)-(\w\w)\W/i))) {. lang = lang[1];. }. if (!lang && navigator) {. if (navigator.language) {. lang = navigator.language;. } else if (navigator.browserLanguage) {. lang = navigator.browserLanguage;. } else if (navigator.systemLanguage) {. lang = navigator.systemLanguage;. } else if (navigator.userLanguage) {. lang = navigator.userLanguage;. }. lang = lang.substr(0, 2);.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 76792, version 0.0
Category:	downloaded
Size (bytes):	76792
Entropy (8bit):	7.991079990296366
Encrypted:	true
SSDEEP:	1536:dMtqXFH9eSaYtUaXrvQ+bAbYaYgCCZ9+KMC1FE:SqXFDaYtB0jZ3DZ81wS
MD5:	6824F89AED1F9CEA50AEAE0F94E590E4
SHA1:	B110BCCA0524F8B001826673291C6201FBEBD161
SHA-256:	7EF974010ABFE71FB92DC3F53E3948E1E544CF6821BF9802EA0BF35FA8FE5AF6
SHA-512:	1A88207489AF7406DEE0B8D456D024A483A63340CB99F0F854984705CB4DFB5CC3FB476724500D75AF9DE8D1AC646481C59E1399A1222A1A06A454451B6E7F11
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/fonts/roboto/roboto-regular-webfont.woff
Preview:	wOFF......+.......7.........................GPOS....../...S.*..GSUB..)....%...Jn.U.LTSH.......\|........OS/2.......X...`...;cmap...D.......TR.7.cvt .......0...0...Tfpgm...\...<..../.N.gasp................glyf.......(...L.^2;head.......5...6...hhea.......!...$...6hmtx...T...r...,z<u3loca............T...maxp....... ... .8..name.......?.....>.hpost...$......#.B..4prep...............Px.c`d``.......6_.$9.@....c.}N.....W9c8.\N.&.(.-..7...x.c`d`.H.{...S...{.&...2`......].............._....................x.c`f..8.....u..1...<.f.............}..B4.......)...9..^e`.Hb.V``......b...J........x.W.pU.....s..P.c..D..T..V..."H...X..H.......F.........Al....R.N.G!T.>@....82..e.:......7..+1.3.\|........._.F..W._..ts..L9.......\LW{.F..W.".l...V$.{.55..z&n3....#....)..b.1.x.xT9.W=....;.....q.7...$.q.......h6......e.!4..h1.x....h.<....%...r....A.v.....^.K~..>.w.V.Q..a...=.....U......T.q...9&....H....W...+~.........VXd...Z...Na0.o4....%L.A,TG0..W.}.'..+6....&Lr....``..l6..\|}.M.D

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	80319
Entropy (8bit):	5.192969923980718
Encrypted:	false
SSDEEP:	768:zyDMIeClJ/movp0+K1PUtNdG7XVFaOa2HCayLGupjUXtvPIVfC2Biq2vEQoykY1O:Og5+NYXzczV6lxvLko0CqZiQ
MD5:	1C4C79D2C67D7817C2CA9162B49CA429
SHA1:	B6EF115AAC26E916B62788B99EAA056C72D780AE
SHA-256:	5C867122E02CBE45DBEF97D9C94732F8A8D6FCB79B69DC167CB8CCAAF62AA68D
SHA-512:	96F28A0777A5B571CA05281F228EB737656FB6156D10E4281FEA358908B8F082B9B51776F60F872E2A545E5736FCE36E590AC9A19E6CD4FD716D1841521DC120
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/lazy/4.460ebe81b7d583573298.js
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[4],{"+bgm":function(t,e,n){"use strict";var r;n.d(e,"a",(function(){return r})),function(t){t.Ok="ok",t.Exited="exited",t.Crashed="crashed",t.Abnormal="abnormal"}(r\|\|(r={}))},"/STj":function(t,e,n){"use strict";function r(t){switch(Object.prototype.toString.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return v(t,Error)}}function i(t){return"[object ErrorEvent]"===Object.prototype.toString.call(t)}function o(t){return"[object DOMError]"===Object.prototype.toString.call(t)}function a(t){return"[object DOMException]"===Object.prototype.toString.call(t)}function s(t){return"[object String]"===Object.prototype.toString.call(t)}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return"[object Object]"===Object.prototype.toString.call(t)}function p(t){return"undefined"!=typeof Event&&v(t,Event)}function f(t)

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2825
Entropy (8bit):	7.918233592175787
Encrypted:	false
SSDEEP:	48:hUTo9KazTxGX5j66MgJYsFhteSPKZWhHyEeu5DYFIPn+Z0TtqeFDr7zLyR2qSt:39Kan6WgJtfg7cyEh4Zq5FnfeR4t
MD5:	3FC97B4B240CDB9336E785AE3D02EFDA
SHA1:	A8A1C84A7767B46A7F42F3A0E31CFDCABBDBD573
SHA-256:	D26C1785B866A18666ADB61E39511C9A2BF3D08A8125489115E3E03BFBDC5A6C
SHA-512:	2663C17C4773962A16014359D86F520ED66AC6A88980DED3302A6A048D9AD1138252B8171F3CDF09FC994FB513E29A5C86600C97F9593BA75BFE70959FC6016B
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/images/world.png
Preview:	.PNG........IHDR...B...B......T......sRGB.........IDATx..\k.]U.^.N..2....RK1.Q.?....T...(`...5s.A...1...B...3./.+&..4.N..VM\|Tc.....AI.........}.=.....L58]....k......3N..4.G..'.Q......?..B.......... ~. ._..^............C.Af.......>."0...-..1..\|.iy...._.V..(lT+p.x3.1?.3)S.o../.X. ..\|..e<....U..z.......<5@v`...h.3QB..\|.......'...B=...Z.....`........... [e..d.z..b..6.. l..@.YNp#C..,.......D..J...4...P#'...5..p..........FU.H.qz5....+..j.._".3...M.L.....b/.0.........\|.?...=0b.^g./.8.Sr.....!.Z.R^.. .)<.z.......N...f@L......}Y...a..1...d.{..m.....)..)Y......Z....Bo.r?..j.~..G....0...`......).YbO.......:.......?M^.;..%~..A%.J>....m.....CD.Y9M..o..%=m..`..M%~9B0.......pN.....Q.w% P.Q....@`;.........T.\....O.Y.......,.@[j...\.../.wMM...;.f5}...xFH[8...q8....F.t>q...W`..W.....7 .......g\.......\".@pr..........4....B..`8.....0?.&.8l...5a.7.u .f..'x.....N.5q.b....h........4.....X'....>.M...n..Q....WQ.I=..=$.....2\V....T...D...uc.-.m.hP.H.@{B..6

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6079)
Category:	downloaded
Size (bytes):	6280
Entropy (8bit):	5.345106958689805
Encrypted:	false
SSDEEP:	96:Vn6bGAjJmHayJ/XQQ5jggJq2+Lx2rj/2A3PBhp2h2rfdG2A3JyorMebVJaJxFCze:VnUJyOx2n/2yBr2h2LdG2G9MgVID04
MD5:	96E91E0E4FD17452A08138041C9E2B81
SHA1:	6D9DC5DA141090D8DE57CDAB14CF6A4681CC0995
SHA-256:	0F24251AF5D668803F7D13D991AD32993A85E951CE7C2A73482D2B6A3770C18D
SHA-512:	A5E7490AE740F88AEB1DBDF76D9C828E92B306544297048ED486200754D2DB14DB2AB57376305E6E9AD8BEC10786BCB11B0FD4576F1E65EFB2CD719E77C5A425
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/js/pgwbrowser.min.js
Preview:	/*. PgwBrowser - Version 1.2. . Copyright 2014, Jonathan M. Piat. * http://pgwjs.com - http://pagawa.com. * . * Released under the GNU GPLv3 license - http://opensource.org/licenses/gpl-3.0. /.(function(a){a.pgwBrowser=function(){var c={};c.userAgent=navigator.userAgent;c.browser={};c.viewport={};c.os={};resizeEvent=null;var b=[{name:"Chromium",group:"Chrome",identifier:"Chromium/([0-9.])"},{name:"Chrome Mobile",group:"Chrome",identifier:"Chrome/([0-9.]) Mobile",versionIdentifier:"Chrome/([0-9.])"},{name:"Chrome",group:"Chrome",identifier:"Chrome/([0-9.])"},{name:"Chrome for iOS",group:"Chrome",identifier:"CriOS/([0-9.])"},{name:"Android Browser",group:"Chrome",identifier:"CrMo/([0-9.])"},{name:"Firefox",group:"Firefox",identifier:"Firefox/([0-9.])"},{name:"Opera Mini",group:"Opera",identifier:"Opera Mini/([0-9.])"},{name:"Opera",group:"Opera",identifier:"Opera ([0-9.])"},{name:"Opera",group:"Opera",identifier:"Opera/([0-9.])",versionIdentifier:"Version/([0-9.])"},{na

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 29307
Category:	downloaded
Size (bytes):	11116
Entropy (8bit):	7.982213520209358
Encrypted:	false
SSDEEP:	192:CYYvSnYA7ib46VZMvm8rdCghv1NYnnPCCNfeeTBHlPifM9Q4M+V/3EGFje4:CYYqV7iE67MvLCUonn6yee2ft4M8/3/H
MD5:	69302BFEE8A87AAA5D962AE575DB885E
SHA1:	BA55A509ACB784DFBD9581DB9AE61B049D5CBD23
SHA-256:	DE3669CFA2FCDE5A714A625C26CF75A73F1B24BB0CBFBD4C4EE279AF0121FB2A
SHA-512:	1C4D59BAA7DCA6B3F2521FAC9846A955F8C34C094389AEAD775CFC66608B9F38FAAA4B8C702302AE00B61EEB12EECA6DE1DF6D29DC82E1D5F8F4AD8E8BF0B7BF
Malicious:	false
Reputation:	low
URL:	https://zalo-captcha.zdn.vn/sdk/zcaptcha-sdk-1.0.1.js
Preview:	...........}.Z.H....G...!@b#..i..v:p..l.aX!...Y.H2.m..sn.\......-..L......TU..~........fn....W.....OS....q.fE.j....Y.......vz....f.FQ.Z-.....@\|......"..,...K.HN=...z...U~...6.][-.v..+fY..W.3...F...}u...3.Fvq.]9......GR.....q..u.z../.b.P....g..-.'.~.~.S^[.G.o.37.B...C_-....../.g..\|.....<..).'>l..e.M.zx...l.,0_f.c.%...T'}.4.I.VK\|zEz^dQ2....7..u..x.z.O.=...{..f....kv.r.c...8.n.h.l..S..}..A.>.....j..W..\|..4........Y.;4....X.....`.....q.y.]o.....%..3J3.cS#J...I..PD.66.q..Zx7Q2..rS.Qh..&...R/.v..-g%.../z575"....U..[..R.ut$r....,-R...m..<$.-.1.o.9...i.......}..@X.8.t...Su..4t.?.......3Ep...D...M._.9.Z.w...f.. .>.Z.~L..Q.E....2...A1WK............w.....3/.S^w.E.$!.l2.......u..X\|.DbA+.b......{K6.&...t..[.q..QZ.......Y.....e..@0..i[.(o$i...F$......5.......k*._...u..".b....{.X=........n...u......\|...$p.+p.....E.flLXq...i...`..".$..q#\|l.5A...C.....q...]..c...8vY\..[wf.,g..P/.<%...!..f.q...t......}..8..m..]<I..?....?<>......>.......O.N

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6231
Entropy (8bit):	7.917512639800623
Encrypted:	false
SSDEEP:	192:z92io+mioZhUza1lL02I1IGLfBiSUg17YepdV7+lw:YH/ZhPPY2qTdUg1scMlw
MD5:	01A93196B1E1FE60BC087A32B3B2D470
SHA1:	A6A6B5D40E8E9E434DA5EFED7F4D5B7054F327A2
SHA-256:	15556D64388319A42FFA8A357CBDF41AEBADF73B704A550DF9E8F3526CDAA095
SHA-512:	BEBAF0A74368BCD3B76B83EE5D5AA27BC6AD0284E524C403CE25FF81B0736AD1EEBCCD6F559666DCEAACE1AEC814B2FCBBC80BD0F008AE25D1E34315E3D855CD
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/favicon-96x96.v1.png
Preview:	.PNG........IHDR...`...`......w8....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>....IDATx..y..U...V.[z.Nw..od#........ ..e@? ......(..(.~PQq.A...A.T$.....5!@.....v:......q..K._...,.....~..u...{.{..0BD..P.T.C....`....J.B.....`...f....T.i...}..`K...l.....$.R.5.w8.-.......q.....H..(..9,.{.-..2....j.u...;.Z`gP.2..knCt........~(F.......3K......o`.....;....)X.IN.....r.I.......B..MD&...F....g.Mbd&B..isf0....U].>....l....................q........i.."......{...=.s....P..i............q...d.E...<...L............0kH...W.9w<.=....=..p/f6..1.J...(>.!<.0.(.u.,.g.#........./.........C.B\|."..LP...I\|.$.Za.ij.!..G.........P...(J....(E`......]..9.T8..!..(.O".QG...C.B\|n.n.D..Dp.t&....."....\|..3!;......n.D. ..$/.D..:>x..\|....2...k.. `.....B ...+$s........Q.Q....KV&t.9bB..i...$.Z .N"5s......'..c..].....A..0......\}2...o...\.D....3.z..F..8..5A..&5eX^....\|....1.=.n..-...k.h...1.+N......._...B{...E1.yL....CH..C.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (347)
Category:	downloaded
Size (bytes):	13551
Entropy (8bit):	4.687260650519965
Encrypted:	false
SSDEEP:	192:/lrEzkuS8R8JwnRBt+mS7xIpkoExpOojnxvSaJM0ENg+418AhWYthvCB:/lrEzkuS8R8L2ExMo7xvrM0ENMogdg
MD5:	8B30E0D4FE900D0FF6CD9C75A07B3D4D
SHA1:	37F5A61A6874E1436BFB7C25E98856E8ADEDDA49
SHA-256:	EBE0DA926D830B7AB5DEC1360C07AF6AD907D1C13A983AF86F2DB8610D05D369
SHA-512:	C5EB03FC526FED8B70FC44F702053C0DB60C7C8E433A46629474EA084F1C117986CB8DF9F539536C43D6675B24209A9FC968B2FE236E0EA992A1439E97BD3567
Malicious:	false
Reputation:	low
URL:	https://zalo.me/pc?source=mainsitetopnav
Preview:	.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html lang="en">. <head>. <title>Zalo PC - T.i Zalo PC .. l.m vi.c nh.m hi.u qu. v. g.i file nhanh</title>. <meta charset="utf-8"/>. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>. <meta http-equiv="pragma" content="no-cache" />. <meta http-equiv="cache-control" content="no-cache" />. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0" />. <meta name="format-detection" content="telephone=no" />. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <meta property="og:image" content="https://stc-zaloprofile.zdn.vn/pc/v1/images/zalo_sharelogo.png"/>. <meta name="description" content="T.i Zalo PC cho m.y t.nh .. s.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 78269
Category:	downloaded
Size (bytes):	23466
Entropy (8bit):	7.990014098934538
Encrypted:	true
SSDEEP:	384:lHSaW3qwFF/Okaxlb+kXAdwimKYA5jpN2rXFuEnKbtp862w5cqvH9:lHCFFSX+GA6itBjpN8XhnIvIQ
MD5:	993B3034EFEB5D2CF067AC6FF048466E
SHA1:	CE260D897C6EDAD0D584BDCD3DF70BA94150D18E
SHA-256:	23120D851AE6C25CA8A813278D1E338E156DBE37F1C461CE6463274E44AEB683
SHA-512:	6C53E7634548FD781B5E67E88B2D22E28F3E5847EEDD18B713A813F98281AB19AB07EE7268998B387FF8EC0918E545F051EDEC66B4CF4C1E041E90D4D0E52B78
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/js/swiper.min.js
Preview:	...........ms.G...}~..s....H...P C/.X...cj..r..M.I..Ds...d........H...qb<".^.....2....>......2+7..}=......7..YV...$.g.u...oT.....b.qZ...UQ......].e..N..<+.:.m.e...:/........r..}uu5.g..,+.....m[.Yq......G;..J6.:Og.E^n.'......,g...F..5......\|.-..\p$.^..9?..9.b..]vR.....'...m....r1.h.....6...uo.od.lp..N.#...........(..^..Y.>..(K..}WJ.e.Ev.QK.$..77.r..n.Iy{.f..MgI>..MlT..t...G..(.x....Q....y..m~.....lRe...!:.]...j.v...'....K........E..}..3...~.X<1m....`\|2.o.....y.._/^.U}p2..a+..c....-.;.QWl}.h..o..`..gImff...Q..gY=..O..J......q..g...t........l8[.,...A.(Y..X7oQJ......I.0....mon..I.y....".m......6..g....my.s.t..H+......i..\.Yq5z..SR..+?d.&..Sv.>...Ii......6.U..dT,~..... ....]...@......<*...{......q...4_d3..t...<......<..^.U........A..:+..u..rP.6.$a.0t..jt....e@V....,,_..o?.J0..$.Ei......O.@777....'.....>.. .9...../.N................a..P....).......................i].M.EV..sVL..@..s....g....N.E..6 .......d3....^.WY..\.?.....#Vp..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 42437
Category:	dropped
Size (bytes):	14455
Entropy (8bit):	7.985895139397022
Encrypted:	false
SSDEEP:	192:CTqCMA2BVolQ0KGRyt5nnv5cHOtCdi4Prdldj6fPD01zJDhgk8SdJrZ93OWth56x:moA2IwGRy7nBtCdis37RWk8SdlX8Z1N
MD5:	E57B0C957E7B0AC015DCEAE11FE1118E
SHA1:	44A7FBF55FFD2ED1265792BB3B3EB4F545004C61
SHA-256:	35C7B907FAC7EF8902869CD6FEBDBC19285AB502958EB3A14E75B47D08F37933
SHA-512:	8A77DE7216F8762ECBAF6F624B6651A4FF65C0D3AC3013B5F1F4A27918B2BF60A165196276213D6376C59549DD08132A6273AF8BDB5532FD6F02CB8CE99ED2BA
Malicious:	false
Reputation:	low
Preview:	...........}{W.H....S..."/...9.h....lH.....2.n..[.H2.....U.S.L.f.=.g'.~w...tr.G...7......;9..2.l^...Q......o.N.~..//.y........j.w6.O...yZ....G\....f.J.,.Z..I..z..^.d..t..~v.D5+2.....4/..KM...4..q......z>.F.5.$.q..a.....xm...$..=.....zVA.....9=.nn.x.....x[.SQTW\.Zd..(........l.....u..2.zh7....4......W.ivv......q.n.m..D......pUc..D...n..%.[9...P:..'Z....>]......>....b....:..mG...,.XMnP...A6..[..6...b.Y.c...........m.P.{h7.j.."`0...Z8. .l...b....y.4.P....VK.WFG.9{..ya.=.....>..^...y..O\|.~(h.....D.Rm...P.}......K......4..jZF...J....<.6...A.S2.......}?,p.e.y........\|;[.....8.V..y.Y.....V.....<.7;..<.<.....k.O...g...........`k...Y.....=:.5.f....T...4..X.....J.....u....@...s@..kL..../.Vw.ge..%.)...h...q~.yY..(6'I.....R.......;...v...L1.../.L\z{E.(.KQ......@.ey...y....z....`,..=.D..s...^.....Nn1.s...f.h.....E.....yU\i..9B..AR......J..#o......`V!W.......(q......c..I....ZgM..m.?...!.g.y .i.&q.8...x.c........0..A{,....6 ...$.....z.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6231
Entropy (8bit):	7.917512639800623
Encrypted:	false
SSDEEP:	192:z92io+mioZhUza1lL02I1IGLfBiSUg17YepdV7+lw:YH/ZhPPY2qTdUg1scMlw
MD5:	01A93196B1E1FE60BC087A32B3B2D470
SHA1:	A6A6B5D40E8E9E434DA5EFED7F4D5B7054F327A2
SHA-256:	15556D64388319A42FFA8A357CBDF41AEBADF73B704A550DF9E8F3526CDAA095
SHA-512:	BEBAF0A74368BCD3B76B83EE5D5AA27BC6AD0284E524C403CE25FF81B0736AD1EEBCCD6F559666DCEAACE1AEC814B2FCBBC80BD0F008AE25D1E34315E3D855CD
Malicious:	false
Reputation:	low
URL:	https://chat.zalo.me/favicon-96x96.v1.png
Preview:	.PNG........IHDR...`...`......w8....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>....IDATx..y..U...V.[z.Nw..od#........ ..e@? ......(..(.~PQq.A...A.T$.....5!@.....v:......q..K._...,.....~..u...{.{..0BD..P.T.C....`....J.B.....`...f....T.i...}..`K...l.....$.R.5.w8.-.......q.....H..(..9,.{.-..2....j.u...;.Z`gP.2..knCt........~(F.......3K......o`.....;....)X.IN.....r.I.......B..MD&...F....g.Mbd&B..isf0....U].>....l....................q........i.."......{...=.s....P..i............q...d.E...<...L............0kH...W.9w<.=....=..p/f6..1.J...(>.!<.0.(.u.,.g.#........./.........C.B\|."..LP...I\|.$.Za.ij.!..G.........P...(J....(E`......]..9.T8..!..(.O".QG...C.B\|n.n.D..Dp.t&....."....\|..3!;......n.D. ..$/.D..:>x..\|....2...k.. `.....B ...+$s........Q.Q....KV&t.9bB..i...$.Z .N"5s......'..c..].....A..0......\}2...o...\.D....3.z..F..8..5A..&5eX^....\|....1.=.n..-...k.h...1.+N......._...B{...E1.yL....CH..C.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Python script, Unicode text, UTF-8 text executable, with very long lines (65400), with no line terminators
Category:	downloaded
Size (bytes):	2445004
Entropy (8bit):	5.621866299570082
Encrypted:	false
SSDEEP:	49152:aiz3rVDrGhB8QWX3XgBbAZNhhtKYoHdR9eRCWoJJlyYef/Oa6YqVFxRie:a+bVWhB8QOsN9R9eEkf/Ose
MD5:	C2DD662600A1E12540BE84C2B771989F
SHA1:	681CCE9ED03D31160DDFCEE966078799B765F6ED
SHA-256:	21AF0754B4254E5E5E8F6423E35566D67700B288835C249C06726C035FD3F2C5
SHA-512:	CC18DC2DA71DCBC08684335695ED0F660E1BA5267488092E1FAD75FEE076524C4C1CE34603651E942DA77BD58AF0319F550117C27FAC6073090413AB77E7573A
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/lazy/vendors-embed-web-startup.1b4f48155c308b510e2d.js
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[3],{"+924":function(e,t,n){"use strict";n.d(t,"a",(function(){return a})),n.d(t,"b",(function(){return o})),n.d(t,"c",(function(){return i}));var r=n("9AQC");function i(e,t=0){return"string"!=typeof e\|\|0===t\|\|e.length<=t?e:`${e.slice(0,t)}...`}function a(e,t){let n=e;const r=n.length;if(r<=150)return n;t>r&&(t=r);let i=Math.max(t-60,0);i<5&&(i=0);let a=Math.min(i+140,r);return a>r-5&&(a=r),a===r&&(i=Math.max(a-140,0)),n=n.slice(i,a),i>0&&(n=`'{snip} ${n}`),a<r&&(n+=" {snip}"),n}function o(e,t=[],n=!1){return t.some((t=>function(e,t,n=!1){return!!Object(r.i)(e)&&(Object(r.h)(t)?t.test(e):!!Object(r.i)(t)&&(n?e===t:e.includes(t)))}(e,t,n)))}},"+A1k":function(e,t,n){"use strict";(function(e,r){n.d(t,"a",(function(){return o})),n.d(t,"b",(function(){return a}));var i=n("RQwI");function a(){return!Object(i.a)()&&"[object process]"===Object.prototype.toString.call(void 0!==e?e:0)}function o(e,t)

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	292
Entropy (8bit):	5.94313471080652
Encrypted:	false
SSDEEP:	6:YAiaif7H66nTzL3SdmTJa2HQvVfGuKrXJrO/60zH4dY:YJaCaATXSdOatvVqXJrO/6vY
MD5:	9E01FF370971B063477FD1C66B1B430F
SHA1:	719BF6830ACC73ECC883BE3DD05455648D9C93ED
SHA-256:	5B456CF89227A5BFB179E147AF6C46C368CF301E60002E6AAA750B4CFFEA79A8
SHA-512:	C01FE9111716003514DD339787C9D0E5992FD8E66BBF08D1BE38427EE32D75B2D19145BA003F0DF8FC0603DDCD038E315D456F480B155718FEDC7B1FAD6DA886
Malicious:	false
Reputation:	low
URL:	https://wpa.chat.zalo.me/api/login/getLoginInfo?zcid=19EC3E28DEB896275962AF9F476E6EED642AEAF3201A021F33CFEF4F2EA4AEDBE3622BEA51B145F206B4A11F96E2BD4459079B3745DB87607B751070B1C4C675DAA1035726B681B1948BDF8FD6FCCCBB568803B55CDDC09F9AF1FFE8327440D2&zcid_ext=d90a6922f92&enc_ver=v2&params=u0O4S2Y8lww1RX366Bq4du8zueos4yu5tEvzWPD0xfG%2F6OA0ZMXT6m%2Famn8388KiJnsHOCQ9HQTWfnVsCekrTvOqieQvgJyDIoim03q2ElmM6p85aQMfjBPfW%2BkIGyDpwBpTNxbfmYXQq%2BuRourruXEYApV1rccobYJnRRbWxyTFHxBpjKZN9qURHQM4IXsD&type=30&client_version=645&signkey=a18d010290869c65f9c552b2787c7e13&nretry=0
Preview:	{"error_code":0,"error_message":"Successful.","data":"fGLEqYASHAfbS11XozTjRjqRn8jn5xzQCLbMPGjStNFjGizfWNJuJjvFPsSWNLt/uWXIlC1B4QoU2nJYQ8mnlWcGQq8RIVPbv2VzKOdbxEExfzZk4K+bSgxuXsgOD47a7pabZ9hP/UGJjitmEAmVJ3pbrJA064e+ZLetNYSnDgBY0PGg7lukVTnlbyi125aIkR8WwquJDF+XbSYPf9Z2rCJQQL0FLuK72xOsuXORJdc="}

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	4059
Entropy (8bit):	7.78551369467172
Encrypted:	false
SSDEEP:	96:D2TTbCg5qTPL3O94o49uY3T+6PVJJ7W/A86jHnsQ7xE:COBTL04oxY/9Z1RxE
MD5:	52160FAD6ED091EB45C5E95BD7B53127
SHA1:	8BFD7F0C7E15C0A14C9B28B0E56698C180D1882A
SHA-256:	5F34A5D62FB97D72F3AF73541B5D61AB5C274E235B82D3E47F10C26554D40557
SHA-512:	BACA6E39A5D887C47247D4B943518DB4703ADC3446BCD6672D88C818B2A2180877A2E4BB8498363EE42A127808C0DE2BC62D7D0CC13E609741E22D4E5559867C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d............tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)" xmpMM:InstanceID="xmp.iid:39F144187C0E11E79E7C9112413265AF" xmpMM:DocumentID="xmp.did:39F144197C0E11E79E7C9112413265AF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7A37847F7C0C11E79E7C9112413265AF" stRef:documentID="xmp.did:7A3784807C0C11E79E7C9112413265AF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...^...IIDATx.b...... ....x....K2.i...0..LDj@.g"R..F&...u&..1....pi.`...' ...g..._.~..]..A.&`............x...`d

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 629683
Category:	dropped
Size (bytes):	234133
Entropy (8bit):	7.996067568942261
Encrypted:	true
SSDEEP:	6144:o+L8Tu9N4ED0Spms7Z51Iv0RGfbMJ/1ySbyuY8X:oGX42tZN5yc4jMJ/sSyu5
MD5:	3D5C2BE836AEE8346A8FA8479E94F16B
SHA1:	1F45B3F4CFDF1D03B2EE491CAC4BBDFEAA31B74E
SHA-256:	F4DDC940B69AC675AE773156CBD747D2AB11DEA88F8C6923E2F568ED717B9124
SHA-512:	7D9C0E4F9FE315481F6E807FB804DB694E35347E35BCB0B24A531720192124EEAF2F27A60D8F92EB9A7FAC44A06390290077B10944D471F46C48E73DB43EA1E7
Malicious:	false
Reputation:	low
Preview:	............wSW...U..>.)..m..;..J..t'.....P....p..hY......y.Z..N.>..q...G....Zs...\|.\kogp1{>}q:.>.\|2Y..f:........bz......./;GG....<i...g..t..iWG.......\|6....x...l9]..&o...?.8....g.?....t..a......>...d2..w......l......C....?O.....s.9\|1_.....o[....7._;.....2.a1.3],..2f...Hy..gm.\|...?..o.=\|....O..}\|.....O...:=Y.&.wo......k...........>.S>..8.....hr....o..............\|....v..Z...?g......d8\|..9...t.\.p'_'.....ms......b....t9.N.....F.G..5..b.$...0.....C.~..v8xq>............;o.\|.,XL..o,2^..N'}..l.x}\|v.o.\.X..7.w.......o..o....l........\|~...1m:q..Og.......x..3....'..t4.=..!FK...,v...K<.r8.zO.........Fo.f.....OvG.yg.K...}y6.......gC.D{..H./^..s6..\..j.......9).rq.z.9...3.zsv\|2.~...\|.r<.l0:h.l..\..6..2..t..:6X...t.<.$x.......1.?....U..L.5U.[..V.@YL?9.x.jy....Yl0.n"...d8.W...............h.\|....5}...g...(_......\...".0..._.......h.zp.q..~.....1b0.S...h.......[......VPq.....+...?].x1]...g._.~D.;........ ..KRW..?..Uf...C...w9./._...P.....5....Veguw...

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3663), with CRLF line terminators
Category:	dropped
Size (bytes):	7502
Entropy (8bit):	4.924196370313068
Encrypted:	false
SSDEEP:	96:RFmFmvXHAbrle64RxOP5imb8vzPEmKwUti31fVBj65aRl4XWr0c9zske0TxKH:vQmXHlojb2X4tyhOXWr0Hke0C
MD5:	5F2E48B79E6F65CADD6A37CB36D00427
SHA1:	9CF5A8819FD6CDCC14A4BB4010740FFAFC16BB21
SHA-256:	BCFED2DB618B2D8E0080DEF65F9AE2653141A8C7727032453AB6C72291000302
SHA-512:	F9A0AD0FDB800BA51654F1237A2806FAF00DAC3357A3DBD903BBF230D144767CB467B52EE26C4D16E1B1A28F1D6D5351E6F0100BA71F16BE3AA86E07AC691C63
Malicious:	false
Reputation:	low
Preview:	// Slidebars..var slidebars = function () {.. var t = $("[canvas]"), e = {}, i = !1, n = !1, s = ["top", "right", "bottom", "left"], r = ["reveal", "push", "overlay", "shift"], o = function (i) { var n = $(), s = "0px, 0px", r = 1e3 * parseFloat(e[i].element.css("transitionDuration"), 10); return ("reveal" === e[i].style \|\| "push" === e[i].style \|\| "shift" === e[i].style) && (n = n.add(t)), ("push" === e[i].style \|\| "overlay" === e[i].style \|\| "shift" === e[i].style) && (n = n.add(e[i].element)), e[i].active && ("top" === e[i].side ? s = "0px, " + e[i].element.css("height") : "right" === e[i].side ? s = "-" + e[i].element.css("width") + ", 0px" : "bottom" === e[i].side ? s = "0px, -" + e[i].element.css("height") : "left" === e[i].side && (s = e[i].element.css("width") + ", 0px")), { elements: n, amount: s, duration: r } }, c = function (t, i, n, s) { return a(t) ? !1 : void (e[t] = { id: t, side: i, style: n, element: s, active: !1 }) }, a = function (t) { return e.hasOwnProperty(t)

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020288496082252
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIobkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	47BEA70318B724B1A99A1D571FF58807
SHA1:	B66FFE704AD2FE84DA8211D6351727568FD68B78
SHA-256:	11A188A204934185AB5649A1F838FE771C3D84C928BC8286EF999FB5B8DEDA69
SHA-512:	7995460AB00A68E3433EA72F19FCB1BCD8485BF4CAF978FF5C47193F110899AA824AC4A697285E908A5F66C693604A0227E60B3D3D948115C4C3490022B82E3D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1650 x 930, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	799253
Entropy (8bit):	7.991220676092619
Encrypted:	true
SSDEEP:	24576:mObyAzEQ3zHqNSAvdbYl0qblWM/lN5dLjT:mIyAYqNAvdbYlJtN5dnT
MD5:	B4B8280D3F11B1D5ED15D390FD6324E7
SHA1:	377A3F6E547C0C6FF0A3B252D0ACFA66321004C7
SHA-256:	23A416ECB4B1CE5BA6A91A246B87E6EFE528FCBB30FE8512FB122B4890028E3B
SHA-512:	5D45C786067781F86F294D1CC9876DB892B0EF0BF78C92813E7DFE134C134B00FAD28919731A5D35C4451827F3DEA49FB82CEFCF7334E88F29D8F531538E44FB
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/images/img_pc.png
Preview:	.PNG........IHDR...r.........D.I.....sRGB.......@.IDATx..i.d.r........./...y3\|..H-..lA....,.2e.l....0@..(C.a....0l.....a....@.q.MRo..M..z.}_...^...U..Vu....{..%2......e.....!..!P.V......\./.+~.(s....b.8S(.....b..Y..\.H.R..K..c..0...C..0...C..0...C..0...D$".h...$..I$..T..J$Wb...H$2.Ju......x<.7>>.CZ9L...C..C ..u.zl........8C......._;>>.+.t..Q:=.{.....y.n...T+"..w...%...X...0...C..0...C..0...C.. ......XT`..x,.Q<w.:...W......=..=...........&''....v.DC..x3.0C.9..kC..x....&...uemm./e...-.>........}....EA...b...$........7U..^...+..!`.....!`.....!`.....!.....4...wn.,.J..d2)===..? ..}....?.....s..\|d...;.6.-..0.^C......u..0.^.. ..VWW...............rpx(.bI]...II.....r.=...d.Y.x%).3...V...y...o\....!`.....!`.....!`....D.V........GNgW....IGGJ......bQ......@...................a.A.....C.uG..9...[...C.D`ss.+K+........;...+.....w..S(.dgwG...%.I.........T.u.M....4K.K9..!`.....!`.....!`.....!.B..{.a6.gM...@.+.gf...W.NM.&.dxh.g.1'./hh..n5..-.M...B..s\|~."o...!.."

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 22062
Category:	downloaded
Size (bytes):	8564
Entropy (8bit):	7.977079436055888
Encrypted:	false
SSDEEP:	192:Vd483ufKEOaxeoJQZyS2szcYK85zH7AjzYu7EMN:V6IufKEHEkQZyhYKC7YzNN
MD5:	DC05BC5EB8C82D324B302253A6D19E9B
SHA1:	D19B82D9FCF13BA57BB90DDFB3B43A1468FB29B6
SHA-256:	10C61A5ADDDF1B296B299BA6BBB408CF9CF4B247C9BAC6B8B43DCF7AAF15A22A
SHA-512:	0014C90A6CF2BC1737F1F2D5954CBEB1512F4CF6885A0C18B1C9B27C630D54228B835693F81DE62AEE136A44CF0A3958B25EC27060E41FEBB702E9AAAEE971F8
Malicious:	false
Reputation:	low
URL:	https://za.zdn.vn/v3/za.js
Preview:	...........\ks.H......M.JA.`;N....87O...N2....4..$Fj.`..s."..;.....U3.P..>}....n....Z.,I.8...n.Y}.....,......o...q. ..J..+.M.8...a..4....Z..-..v..&Q.cP....}.u...\|~t...q.".&..7.V.>..a..r....I..tG....>L:.;....V....2...x..v....W.}0.=..O.x.ub.a.Q.4..n#.h..(.EK.........f...!...1...;..F].....p?N.~.j.7....C..N.{...f=..>.6.,....Y...5.....Vm.N...........S.......}..o[.{I..^..Q:..T.X....kU...yQ\|g;.Wj.1.I..... .M.......q.V...r{..]#.....:v"..,...1.{%...........K.....r..`.k{.......{a...t.....U.~.u.Ar...$..N.rB..&....<j.Z...g3.I..$Q...T...b.7...T....;...y....#o..A..Xe.!eA..,...l1.l.x.d.G..\|nY.........\|.jGXZ..Rz........!.D..m.(q.....>`.......=.....[..Oa.Y.p.....2.7..yv@G>.SO@].T.lo...=u.......NqPSv.~p.!q.-..q...x.".:;..$:.".....u.d..S....).j.. 5..N.a.\|...g.Gv...........61....0b..k..o.&6.q...>..>.....b.[.".5qA.o.z...>..a'....KaT...:....o... ...c........ _......!M.}.z4...8o...0.0H...f..w...'e.m .pD.Y..m].V.2.....j>u.....O......y...gW[...[

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 19 tables, 1st "cmap"
Category:	downloaded
Size (bytes):	73728
Entropy (8bit):	6.909367327185532
Encrypted:	false
SSDEEP:	768:LVYtBQn9ImbLqfvocIEli2LYTMVRXJlRfR7dupbf5sJDKGNAZOp9a0rdWL5wN3C:LPvF5Qi/TMV3Kx5sBKGOZo9N3C
MD5:	CEDDE79AA5603DA15D729A16D2105DC8
SHA1:	6556492D54CF61D8167A5688DFFCD206125DB6EA
SHA-256:	181E5E4724D7BF53CB652CF967A595E55C1F2D4D6AE4639B9D3868D983CFF2F4
SHA-512:	FE3C65D902A601D2DEDC4B661B3A1D81A2A078271B8D542135F2BFB2EE0792C8AA88DF9F02620A7D8500E94B707208D17A49861E1232980748DAB07567949CDC
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/fonts/Zalo-Segoe-UI.dc1a7d868a0b3a0e2daa8b36567e9ea9.ttf
Preview:	...........0cmapU......<...,cvt Au.....h....DSIG?.d2...T..!.fpgmW.....'.....gasp.9.&..7`....GDEF."...7p...pglyfGb.+..<...6OGPOS..f...s0....GSUBbaO;..'$....head.....,....6hhea...X..,@...$hmtx.`.u..,d..'.loca.*....S...'.maxp.c.f..{.... meta...3..{.....name.(....\|L....OS/2Fh#....P...`post.Q.w....... prep.<........H.......................................~.w...........%.......%.^.e.w...........E.M.W.Y.[.].}.............. . . " & 0 4 : > D _ q . . . . .!.!.!.!"!&!.!3!N!_!.!.!.!.".".".".".".".")"+"4"6"H"a"e".#.#.#!%.%.%.%.%.%.%.%$%,%4%<%l%.%.%.%.%.%.%.%.%.%.%.%.%.%.%.&<&@&B&a&c&f&k&o'.,..x.z.......d............. ...z.........$.........,.a.k.y......... .H.P.Y.[.]._.............. . . . & ( 2 9 < D ^ p t . . . .!.!.!.!"!&!.!3!M!P!.!.!.!.".".".".".".".")"+"4"6"H"`"d".#.#.# $.%.%.%.%.%.%.%$%,%4%<%P%.%.%.%.%.%.%.%.%.%.%.%.%.%.%.&:&@&B&`&c&e&j&o'v,`.x.z.".....0.......................................{.u.s.q.o.m.l.k.j.i.g.f.e.c.b.`._.^...].Z.Y.X.T.S..4.$.".!....................j.i.h.Z..

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	5.004082299330079
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWpm:PLKdXNQKzLQum
MD5:	39522BE8FCBDBC715C2398E95E8E393A
SHA1:	D5D14FAACD03919B3D979DC9FE9B0E0841918D2A
SHA-256:	273C4D7E26BBD551C69B037B39837B8A3AD29F6DC69CC688DC6C0BEE96B95CFF
SHA-512:	4DB6808625FE79B5584CC92F5C5797D91CEEF707704AECB8B8EB7916E323C02123CFAC83F6E23E0CC9C25C371B3CC1DE32A05B41D10A3D2ACBD94C63B2B3101E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=vi&v=-ZG7BC9TxCVEbzIO2m429usb
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__vi.js');

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1900868
Entropy (8bit):	5.062737637153524
Encrypted:	false
SSDEEP:	24576:mkn1wgsJsfm5V1chRKw8oxp27ROYNn13owb/HSB5Z6SHyK9em2ltQnfcZh7yapO:Usfm5V1chRKw8oxp274YNn13vFO
MD5:	0CBCD85B8AA278961D7633BDB7F1A7B0
SHA1:	6AAE91B93F5232D888ADD8F6FB57D69B4CCE2B33
SHA-256:	D26DD8957E9A4DB89E7E27C24BAF994208C13F404029CB7E6272BC08F2102AE1
SHA-512:	1E1693E6572FAC0B56FEE32E7BC4165F9E4C6E59C9E1A5EE6F175ABE1D0E2898F606AA0CF458097B1B017EF4DFA7D60564D8C5E0FC17DE3F90BBFA56E45BED0A
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/web-startup.8f6f137d5bc84bfef54f.css
Preview:	:root{font-size:16px;--black:900;--extrabold:800;--bold:600;--semibold:500;--medium:500;--regular:400;--thin:300;--light:200;--f2:0.125rem;--f3:0.1875rem;--f4:0.25rem;--f6:0.375rem;--f7:0.4375rem;--f8:0.5rem;--f10:0.625rem;--f12:0.75rem;--f13:0.8125rem;--f14:0.875rem;--f15:0.9375rem;--f16:1rem;--f18:1.125rem;--f24:1.5rem;--f32:2rem;--f33:2.0625rem;--f34:2.125rem;--f35:2.1875rem;--f43:2.6875rem;--f48:3rem;--f72:4.5rem;--f80:5rem;--f96:6rem}div-2{display:block}div-2,span-2{font-size:.125rem;font-weight:400;line-height:1.5}div-b2{display:block}div-b2,span-b2{font-size:.125rem;font-weight:500;line-height:1.5}div-3{display:block}div-3,span-3{font-size:.1875rem;font-weight:400;line-height:1.5}div-b3{display:block}div-b3,span-b3{font-size:.1875rem;font-weight:500;line-height:1.5}div-4{display:block}div-4,span-4{font-size:.25rem;font-weight:400;line-height:1.5}div-b4{display:block}div-b4,span-b4{font-size:.25rem;font-weight:500;line-height:1.5}div-6{display:block}div-6,span-6{font-size:.375rem

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3913
Entropy (8bit):	5.031392615429378
Encrypted:	false
SSDEEP:	48:/SaxHlaEaDHlaEauX3a2HTDdndJdgysAxfDne0aw243MrsfOIIkFVh+1MU:hxFa7FaGX3a2VndJdHZk/U4UFc
MD5:	B3E402E25FCAF6D658F3C54A3BCC0B59
SHA1:	490E789F906BA6C5847A10AB4073D43CED6F449B
SHA-256:	AEC30E8AE56BDB570E6227E19AD189DB7466F5A3810E92A32176865DC6F37FD6
SHA-512:	CD9335EE780E9B3A9718E9698A2F7611E913379C06AE309033D6ACC67CCB9BC80657561FD1F9BA025EB3C7DCBBB154BACEB4AB75CC001DB23290C2E9FFDB5394
Malicious:	false
Reputation:	low
Preview:	<svg width="77" height="68" viewBox="0 0 77 68" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_763_16477)">.<path d="M67.5 14H9.5V52H67.5V14Z" fill="#ADD1FF"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M10.5 15H66.5V50.9H10.5V15ZM7.5 50.9V15C7.5 13.3 8.8 12 10.5 12H66.5C68.2 12 69.5 13.3 69.5 15V50.9H76.5V52C76.5 54.2 74.7 56 72.5 56H4.5C2.3 56 0.5 54.2 0.5 52V50.9H7.5Z" fill="#54656F"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M10.5 15H66.5V50.9H10.5V15ZM7.5 50.9V15C7.5 13.3 8.8 12 10.5 12H66.5C68.2 12 69.5 13.3 69.5 15V50.9H76.5V52C76.5 54.2 74.7 56 72.5 56H4.5C2.3 56 0.5 54.2 0.5 52V50.9H7.5Z" fill="black" fill-opacity="0.6"/>.<g clip-path="url(#clip1_763_16477)">.<rect x="21.5" y="31" width="34" height="34" rx="6.93204" fill="#007BFF" fill-opacity="0.3"/>.<mask id="mask0_763_16477" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="21" y="31" width="35" height="34">.<rect x="21.5" y="31" width="34" height="34" fill="white"/>.</mask>.<

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 71492, version 0.0
Category:	downloaded
Size (bytes):	71492
Entropy (8bit):	7.9925159509533525
Encrypted:	true
SSDEEP:	1536:91UXCF8JZrFZIGLwlBE1dkHZ4XvaOT1SY3F3QgPwHXqyf6km9MFPGjyUpN:9SXu2ZrF7z1dkH6XWKQgPyXqyfowPGD
MD5:	C779B27DCD67DC5BBFE188821D020413
SHA1:	8B51079E0D8AB0BCE3FF26C06CE13A5DAD445800
SHA-256:	12248DA798E65C1509286C0D2BCFF06C7D2124B35C2E1C0EC87044FFA8520A5E
SHA-512:	1F855102AEC4E809FBE5ABCFEF45BF9127855BEC631AAB0A0D8C5DEB447D3C3D4C68BC2F892E50CA4C8D58207ACE6E28ABA714899A52E9589DBD746051CA15CD
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/fonts/roboto/roboto-bold-webfont.woff
Preview:	wOFF.......D................................GPOS......w..O...GSUB...$.......J8...LTSH............FG".OS/2.......X...`...dcmap.......4....$(3.cvt ...4...<...<....fpgm.......;....G.T.gasp...............glyf...`......n(5...head.......6...6..(.hhea.......!...$...Ehmtx...T.......(....loca...p.........G`.maxp....... ... .8..name...l...=..._GE..post.........#...4.prep... ........ J............._.<....................".......\|............x.c`d`.H.{.............".......p.............._....................x.c`fY......u..1...<.f.............}..B4.......Y...r$..........8.....u.PN.....7..x.W.pU..]..s.}0@.P>i.."?C.L(!$0.H@."!1..../...S>!...#.. .Op...`g(..jKq.....u..j.L-..X..<]......Lf.....9{..\|......j..Z.....Pd>.,.....HU..u.....g"M%"..%j.j.t.o..E...@d....b.1.x.xH.V.b..z..u?.{....0......M.f.1\|..h....5/.Z.`.~... ..j....).YG.......a..c.=..A.._''..0....Fq.YP...1...:..:...,..1.<N...wh.\Wa.....6.\,.k.#..B,.\....;0J.B;...Ds.I.!&....&.3.b..~<6Q...8m......*M.Gu6v.9.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 134664, version 1.0
Category:	downloaded
Size (bytes):	134664
Entropy (8bit):	7.993928405797375
Encrypted:	true
SSDEEP:	3072://iQqhzygcF3D4Kx5O31k+aLxSruTcXDjV295ZlMJP5Q:Xiex5ESl1a7CH2HQ
MD5:	BD55C26BE13D9184E9960A3DF7EC10F7
SHA1:	0A84CEC1034C0CA2601B45B6999AD02DCEDA766C
SHA-256:	6BF987C683E3EC93B7281D2380F2FB7707B9CAD76C1F44E02169E0F35522B046
SHA-512:	150E6DAABC7F48B6B8D0D32266092836964FC1F2DDB814D4F711A158C3ADB4C77F4FF65F2ED519A04DBC34A2F8267FF120FE062F6AAEF03441861706CDB2F24C
Malicious:	false
Reputation:	low
URL:	https://stc-zaloprofile.zdn.vn/pc/v1/fonts/roboto/roboto-medium-webfont.woff
Preview:	wOFF........................................FFTM............a.S{GDEF.......+...,.W..GPOS......Q`....<..GSUB..SP.......l...OS/2..U....Q...`...cmap..VH.../.......(cvt ..Yx...F...F....fpgm..Y........eS./.gasp..[t............glyf..[\|......d..:L.head......1...6...@hhea......!...$....hmtx.............h }loca................maxp....... ... .e..name.............v.Rpost..........%..].1prep...@.......5...webf..............TA.........=...............g.}x.c`d``..b...`b`f`d...".".&.b.3.F......+..R.x....\|.......pGkm.@..z..VE.z.p\|..V..k}Zk.G=.c.Z..\|j.B.q.T=.....%.[ . .........*..[....?..s......\|.{&..g.m..Y.XcL7.5s...4z...............q+.L.o..1.`....%o'K.=.4...cl.......b...._.pV.fv.../......+;..kq..].-..=.K.~..P.L..Yge.f......3.=e.J..N.>.yG'>%..]..3......)gh.Y~.Y..l...Qg].u.9{..O=v>.S..V.3c....,......c.S..n....g.'..]V...p....b...!.S..tK..g.Y..._.?..0wv.....D.{....n.d...#gh.~.3.\|.3..k...._........}.}.....?a.W~.W.Y'].o8i...S.t.J....?.h.v......~...8,.t..>.<?..

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	77508
Entropy (8bit):	5.204229612798213
Encrypted:	false
SSDEEP:	1536:ED3GboyWr6NbuuSCUyK0bH/kUG3ofH9PmGFKy/:k3ioyWr6fb/Y3ofH9PJ3/
MD5:	F4D1CB023EC7EC98F88AFE7DB58AF7A7
SHA1:	2A287B6295A820C75E567BB69626967B6B5C7657
SHA-256:	DA866875EB7FC0AF81140AF334CD1586E1D12047D87603C68DA7EDA39937CBC5
SHA-512:	85B3F18D86D2928EF6DCB8ECF94C1D13970E77B0FF2A709D28D8B19C2679994DD1815E1CE3CEF11711FD1493D86720F85D9DBAF3D6FFC5D0D125ED73B0E4D6D4
Malicious:	false
Reputation:	low
URL:	https://stc-zlogin.zdn.vn/js/sentry.min.js
Preview:	/! @sentry/browser 7.102.1 (26ec3bd) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return l(t,Error)}}function r(t,e){return n.call(t)===`[object ${e}]`}function i(t){return r(t,"ErrorEvent")}function o(t){return r(t,"DOMError")}function s(t){return r(t,"String")}function c(t){return"object"==typeof t&&null!==t&&"__sentry_template_string__"in t&&"__sentry_template_values__"in t}function u(t){return null===t\|\|c(t)\|\|"object"!=typeof t&&"function"!=typeof t}function a(t){return r(t,"Object")}function f(t){return"undefined"!=typeof Event&&l(t,Event)}function h(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function l(t,n){try{return t instanceof n}catch(t){return!1}}function d(t){return!("object"!=typeof t\|\|null===t\|\|!t.__isVue&&!t.t)}function p(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6231
Entropy (8bit):	7.917512639800623
Encrypted:	false
SSDEEP:	192:z92io+mioZhUza1lL02I1IGLfBiSUg17YepdV7+lw:YH/ZhPPY2qTdUg1scMlw
MD5:	01A93196B1E1FE60BC087A32B3B2D470
SHA1:	A6A6B5D40E8E9E434DA5EFED7F4D5B7054F327A2
SHA-256:	15556D64388319A42FFA8A357CBDF41AEBADF73B704A550DF9E8F3526CDAA095
SHA-512:	BEBAF0A74368BCD3B76B83EE5D5AA27BC6AD0284E524C403CE25FF81B0736AD1EEBCCD6F559666DCEAACE1AEC814B2FCBBC80BD0F008AE25D1E34315E3D855CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>....IDATx..y..U...V.[z.Nw..od#........ ..e@? ......(..(.~PQq.A...A.T$.....5!@.....v:......q..K._...,.....~..u...{.{..0BD..P.T.C....`....J.B.....`...f....T.i...}..`K...l.....$.R.5.w8.-.......q.....H..(..9,.{.-..2....j.u...;.Z`gP.2..knCt........~(F.......3K......o`.....;....)X.IN.....r.I.......B..MD&...F....g.Mbd&B..isf0....U].>....l....................q........i.."......{...=.s....P..i............q...d.E...<...L............0kH...W.9w<.=....=..p/f6..1.J...(>.!<.0.(.u.,.g.#........./.........C.B\|."..LP...I\|.$.Za.ij.!..G.........P...(J....(E`......]..9.T8..!..(.O".QG...C.B\|n.n.D..Dp.t&....."....\|..3!;......n.D. ..$/.D..:>x..\|....2...k.. `.....B ...+$s........Q.Q....KV&t.9bB..i...$.Z .N"5s......'..c..].....A..0......\}2...o...\.D....3.z..F..8..5A..&5eX^....\|....1.=.n..-...k.h...1.+N......._...B{...E1.yL....CH..C.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1436), with no line terminators
Category:	downloaded
Size (bytes):	1436
Entropy (8bit):	5.792918578192661
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtfE1wuasLc:VKEcixKo7LmvtUjPKtX7ZE1wurLrwUnG
MD5:	0F3C0884C4ADA2FDDD2FEF7CCC0AD384
SHA1:	D0875D8B4B471274766DC922B3EE2CFC3E99F235
SHA-256:	EFF63F0CB294E4534F1D1E8C05597453954BEC5F0B586552793FDBBE2D91E387
SHA-512:	46A4C2F43262F26E773166B8826C3E369EF058CF0FA92C5F390AD0965BADC18FDC0FF2FB64F071180DC1CDC9E4497CBFCB8FDB7F4F7EAECD6097730D1650639F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=explicit&hl=vi
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47208)
Category:	downloaded
Size (bytes):	2180294
Entropy (8bit):	5.773478338978016
Encrypted:	false
SSDEEP:	24576:m4H+63Mq4gGK4H+63Mq4gG8Ej7l4KQEj7l4KNUMbpq8UMbpqcQ+/+Q+/hkdtNQtx:mEtn3nRjfx+xR
MD5:	A3038CEA426B391C1B9F3EDE971289E6
SHA1:	BC91182B00691B6B52760F90A6EC4EDDA19E81FA
SHA-256:	7BEF3926391C1DC21482550354F775B19B50EC305F9FAD5D4EBDA5886AFE98C6
SHA-512:	BF3CBAD42D949B1DD9A31FE5ADC9406CAC562C89CC82F4855A46EFCDB52404486DF24E201A0CA19128DD409D862357F56A948A17144024A3823C64413B6CFB24
Malicious:	false
Reputation:	low
URL:	https://stc-zlogin.zdn.vn/main-5.5.7.css
Preview:	body{background:#E8F3FF !important}.overlay{position:absolute;top:0;left:0;width:100%;height:100%;background-color:rgba(0,0,0,0.4)}.boxy{position:fixed;top:calc(50% - 216px);left:calc(50% - 194px);z-index:99999;background:#fff;padding:30px 40px 20px;box-shadow:0 0 10px 0 rgba(0,0,0,0.5);border-radius:10px 10px 10px 10px;-moz-border-radius:10px 10px 10px 10px;-webkit-border-radius:10px 10px 10px 10px;border:0 solid #000}.boxy .button-next{padding-top:30px}.boxy .button-next a{min-width:150px}.boxy p{text-align:center}.grecaptcha-badge{display:none !important}.btn-icon-loading{width:35px;height:35px;position:absolute;top:4px;right:75px}.logos i{cursor:pointer !important}.flag{margin-right:10px;vertical-align:middle}.body{min-width:320px}.body .body-container{border-radius:16px !important}.body .body-container.show-pc-banner{max-width:540px !important}@media only screen and (max-width: 992px){.body .body-container.show-pc-banner{padding:0px !important;background-color:white !important;min

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4834
Entropy (8bit):	7.949662922226651
Encrypted:	false
SSDEEP:	96:05ppA4u3SVOuK781RdUIyZMLMyxw/1p3aOYSjxETOvseSQNkCi:SpOH7MRyp0w/2O/tETuNkCi
MD5:	CDF210850774AE3AEBCFEB2DEB9E82AF
SHA1:	929AA6E3491D8268E296D3FC84DE99749DBEADF7
SHA-256:	F1D8885B81A1DC1CE2121998B9D631296BE8827D4DE641886FCD888E0743A12B
SHA-512:	A9DD5F3CFA4CBCCF6E72E8DA0E4EAD71C0371F6F2A924177CCD9A4E65A218D28DA209762701A9AB5C09FA95E01BE446533A813DE5AAFF6A2D0FBA7F3216A0E84
Malicious:	false
Reputation:	low
URL:	https://stc-zlogin.zdn.vn/images/zlogo.png
Preview:	.PNG........IHDR.......H.......F....sRGB.........IDATx..].......]9B.."h4...IL..."...y....P.E.]V..$..h.....K....'h..O.<..`@...Tb.PdA..e^..f...3.z..{g...w...W.....zU.....r2........!...5u..Lw.Ak......./(.DA..3..XR.........-.bIQ...h....[.....%.>...#o..K...@.P...z..XR....._A....^..A..(.o.....=K.x....%E.xK.=(H..x..bI@.(t.y.....$.".v(.BV....]...i...J.P..P.....[..H..J.4..:...r..&......L..b..z..GTu..E..H ._.j..m. x.)..<.;~............O.a\|..GoQO...N..(.O.8C,.....X(..e..FQ5oV....j.6Ro..CL...>...!Y......J..jN..p.R.2.!..i'.....q8...%..8..7.Wd..~.c1x)u.Q..8..80JA..0GQ.^../Y.d.H..T....h.........a.Qr3K..2......F...o.7.z......w.Sf..$.. 2..Fc .1.. ..<e.U.xE.dJ4./...E./.x)...x7..!..%....\|mjy.kY..'.}`8..<^..e..gz.J0.......I..mu.j.i$._.g...\e......C?;f.]S(..t.u.[.v.DS.)...i....6.x..V...:.P.I.3"/.@9V...CY`.0t..$.R=}.6.Q...z..D..%....mP..h..@.C.b...x..s._..GA.......5..n.......X..............:....TZM.B......E.4.my.\._.PJ.gC_....2}..r...X..P.y..U).&\|>...E38.`..L..

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	202883
Entropy (8bit):	5.409689689534285
Encrypted:	false
SSDEEP:	3072:OAjJ2V1LIGKiSmEp+dTb/n7fnHdSUlMAeXg6Ror4+p8GXNDXKV+I3KBrW8YPCKVW:OA92V1L/SUlMAeXL8YPCKVW
MD5:	CCB4C95E5997507D2AA858D3013BE790
SHA1:	1AF8C770B0B931DE4937BD1D2F7B5D436ABBD1AE
SHA-256:	39A266A11D1A24A05481B415ED08F6B1678A04A897C855203097CF7499E51298
SHA-512:	4CAB4C55EB5DC45D846157B73DA6F546D8A45273125EBBB6408E895C85FE2974D7BF265D67A8CA94C66A989AA4C15D050AFF75B2C41DCC7A847F90B5C4CA349E
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/render.9c0875841efb5667ea74.js
Preview:	__SCRIPT_TYPE__="renderer","object"!=typeof globalThis&&(globalThis=window),function(t){function e(e){for(var o,i,r=e[0],c=e[1],d=e[2],m=0,u=[];m<r.length;m++)i=r[m],Object.prototype.hasOwnProperty.call(s,i)&&s[i]&&u.push(s[i][0]),s[i]=0;for(o in c)Object.prototype.hasOwnProperty.call(c,o)&&(t[o]=c[o]);for(l&&l(e);u.length;)u.shift()();return a.push.apply(a,d\|\|[]),n()}function n(){for(var t,e=0;e<a.length;e++){for(var n=a[e],o=!0,i=1;i<n.length;i++){var c=n[i];0!==s[c]&&(o=!1)}o&&(a.splice(e--,1),t=r(r.s=n[0]))}return t}var o={},i={16:0},s={16:0},a=[];function r(e){if(o[e])return o[e].exports;var n=o[e]={i:e,l:!1,exports:{}};return t[e].call(n.exports,n,n.exports,r),n.l=!0,n.exports}r.e=function(t){var e=[];i[t]?e.push(i[t]):0!==i[t]&&{1:1,3:1,21:1,26:1,27:1,28:1}[t]&&e.push(i[t]=new Promise((function(e,n){for(var o=({1:"default-embed-web-startup",3:"vendors-embed-web-startup",6:"countries",10:"lang-en",11:"lang-vi",20:"vendors-web-startup",21:"web-startup"}[t]\|\|t)+"."+{1:"c74076b50554

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1436), with no line terminators
Category:	dropped
Size (bytes):	1436
Entropy (8bit):	5.792918578192661
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtfE1wuasLc:VKEcixKo7LmvtUjPKtX7ZE1wurLrwUnG
MD5:	0F3C0884C4ADA2FDDD2FEF7CCC0AD384
SHA1:	D0875D8B4B471274766DC922B3EE2CFC3E99F235
SHA-256:	EFF63F0CB294E4534F1D1E8C05597453954BEC5F0B586552793FDBBE2D91E387
SHA-512:	46A4C2F43262F26E773166B8826C3E369EF058CF0FA92C5F390AD0965BADC18FDC0FF2FB64F071180DC1CDC9E4497CBFCB8FDB7F4F7EAECD6097730D1650639F
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	320266
Entropy (8bit):	5.354264491279162
Encrypted:	false
SSDEEP:	3072:oSjAmHxkNhedCTcNWQ+fc9uIpg2cOeZgZ6xVcxuMRxYufVvs+ENFvrN7V4SUMfbe:/NwU9+LOMiuM8uFs+ENJ3hml0q
MD5:	EA2AC045F1984B38840F684C4EA0D03E
SHA1:	DF163B3792C15A973B441F2A090367B6C521EBFD
SHA-256:	EA22114CBBD1AADCACDB8F4327A347206CE2F40DB22FCE95F9D5837AE7221CE7
SHA-512:	F5729274827F0CCA8FCD4A0E01539BC5FF3E0B460A1D4CE9C84483920CD1FCA965D521A9434C8CFD351EB450F8FB39F38F304CD96B5DC16E3419D8A1EEBF19CB
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/lazy/lang-en.1306566d23ee77941cf4.js
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[10],{"4UO8":function(_){_.exports=JSON.parse('{"CHAT_BOX_LIST_LOAD_ERROR":"Error occurred while loading messages.","CHAT_BOX_LIST_LOAD_MORE_1":"Loading the messages. Please wait a moment.","CHAT_BOX_LIST_LOAD_MORE_2":"Loading the messages. Please wait a moment.","CHAT_BOX_LIST_LOAD_POLLING":"Updating conversation","DB_EXPORT_ERROR":"Error when exporting database","DB_IMPORT_ERROR":"Error when importing database","ECARD_CHEVRON_LEFT_TITLE":"Previous","ECARD_CHEVRON_RIGHT_TITLE":"Next","EMO_01_GRIN":"Grin","EMO_02_JOY":"Joy","EMO_03_KISSING_HEART":"Kissing Heart","EMO_04_HEART":"Heart","EMO_05_LIKE_STRONG":"Like, strong","EMO_06_CAT_FACE":"Cat Face","EMO_07_BLUSH":"Blush","EMO_08_IN_LOVE":"In love","EMO_09_SLIGHT":"Slight","EMO_10_GRIMACE":"Grimace","EMO_11_LAUGH":"Laugh","EMO_12_CHUCKLE":"Chuckle","EMO_13_KISS":"Kiss","EMO_14_SMUG":"Smug","EMO_15_CRY":"Cry","EMO_16_SMILE":"Smile","EMO_17_PL

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21769
Entropy (8bit):	7.9781588640804255
Encrypted:	false
SSDEEP:	384:1xmT206KK5oHdDmPQV8itJ9KOkl/UOOvZkdcHStEh3yKqEQzbI8VWS5IY8r:TG9dEitJcxUbrHSShCKBQzQSLk
MD5:	A558F2333229B9A2A8F6D0CF72A45FF0
SHA1:	2B0EB15F16C1A3343743966310FF7766289B0DA9
SHA-256:	407603ACC33F3F22C5EC5DA2380BCBB61E6ECD41A350297CBA5896D2C452C01A
SHA-512:	0FFB09759AB0DEEF54108559C2E41AF3823814FC3A3A35DF18FE8F952AE93BAF6C12CEAC46F45555CCC38F9ABAA9037F23C677B60F100646457AD3F0801CB152
Malicious:	false
Reputation:	low
URL:	https://stc-chat.zdn.vn/images/icons/image25_1484838643007.png
Preview:	.PNG........IHDR..............X......pHYs.................tEXtSoftware.Adobe ImageReadyq.e<..T.IDATx......y&..S...7mh.$.. LXm...q....oI...8.L..3....<...Y,'..........x.ml..f_...............Ug..,U.....H....owuw............t$..NA:..$..H...t..IG:R..#.)@... .HG..t.#.H:..$..HG..t.#.H:..$..H...t..IG:R..#.)@... .HG..t.#.H:... .HG..t.#.H:..$..H...t..IG:R..#.)@... .HG:R..#.)@... .HG..t.#.H:..$..H...t..IG:R..#.)@..t..IG:R..#.)@... .H.k=2...T...Z\|..c...}x..>.o....U.@......{....B.^Aq38.......':.x...g.X4(6...m....}<._..oO.rz..H.k..&...:....g.._.re.K.........K/...6u.`...#/...!..lf...+P$0...0B.u.....A.....D.b\|...-.......o.A......a...%..xi...I..G..\...N.....$......vV^.\|..@.}.oi2.......u.D.@x...0[.....!.df.....s.i6o........W]..........Y\|.h.....t.r...w.... f..9.MbxE..o..L..H..;.4.).....I..l..6{i0.(..{.%..]....]&%.jd..Q...[_6.l...#(.v.PI?......ze... 6.&~.../#c.#W..!.....#F..y`c/.xh..(w .o>M.AL.~....[@......Q..A..I.(.......Y...`[P.l.&....j......@.l.......i..w.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12130
Entropy (8bit):	7.968335452423114
Encrypted:	false
SSDEEP:	192:6S6gjTqjCaoLK+MLvZWjCrnsP8kdZMfhjCxUyKu/35Io5rTpTWjKoiIQG4RiwlR7:1TTwv+GsOn6LdZMZCx+u/JI8r1TWjK1b
MD5:	565C6075EA8894BD3134481CAE734C5C
SHA1:	545BB49069F47B89CEA7BAE6F1E4D230876D54CB
SHA-256:	D93510B0AD3775E4CDAB7E56AE2BEEB44C043C6DDC355BE7E767643575C461D8
SHA-512:	A09655B11E6FD2ACF518C715CB62687788A795FE699EBEE090336DFA0074FB84CF77D22A0F96AC48E5198C534F52C7B452325D8460ACDFA028B387F18A32EFCE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx......q.#.....3 x_..C.%..-.W..#Q.%......{p.....<.....;.....g...%Y..>vmI...%^.P<.......;s3....."3#..{z..\|.itWUwg.'#..YUL..u.[...]P....n5 u.[.H..V.R....n5 u.[.H..V.R....nu...[.h......?!...^....o..w...!..x...f...Y6[....8&lT.+....T...:.T.....]...l...C.}v.6..8......<.6.K.<.#..k.....Og........I.....T.S.......>R..9.X.c.\.......g....~..e.. ..dP.g.c...^...".c....F.V..f......l...c.bA.....H..\|<...G..g..l...q"...%...eh......"3....&pH@~.._.........A..a.j..d....Xt.I3+...i.A9#.a...".E..DA...ls.W>D.o....o6.....K.H.U.@.\|W$.%<;.D>g.nw....1...S. ..01) ...h.h.......=.M.....{..v.....]9>r2+1.=.z....@...7..L....B0.....6.o.v.C.38)...S...N:..A.....i..c{W..N".K..f.........(r..d^#8..<.0~H.....Z.+.....`..\|?{/.....=....7...........%...8,.;@.A.S..c;.0.....v2.e..Bz...>$...c t.W..=.h.F..<..f..[.ln...\6@+#.F......&......`}......l.C...M.,...%$(2x.L....c../.y...;...IkLm...+[...

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5867
Entropy (8bit):	7.947823103024594
Encrypted:	false
SSDEEP:	96:G85qqqruuThO3+To/IbvGmmc7qqGMyHzRqTK4NjHOV+b3GER60uvsJpz/Mjsqq+:G8qqqjhOuc/aGmmcOqrmz14F5d6fEJuv
MD5:	1EFED8A8AD8D61D085528D05057E275F
SHA1:	C36C3B0D020BB5519E881F00E779F01346816AD2
SHA-256:	A22A42976905B60840DD2D565C742E4266D9CC86FA20EA3CF38FF7C077C9DEBC
SHA-512:	BE37C125696B8F7E412F40A196EEB6875AFBDB0A775AFB7C2D518F6C7DDC100D203228BE7159535D5066BA0B9F11CC0204FF2AE8B3B104074D4872533FC612E8
Malicious:	false
Reputation:	low
URL:	https://chat.zalo.me/favicon-144x144.png
Preview:	.PNG........IHDR..............F.....sRGB.........IDATx..]......{zVf...M...M.!..bT.....c..JD...<..1....3.$............2(.,.....,..L/9g...^.nUu.r..UW.........)....D@" ...H.$.....D@" ...H.$.....D@" ...H.$.....D@" ...X.....L.vW .5..p9......W s.H.s8.....J:~9.....K..+......9.Ey.w.f.....?......./.....w...w....'<..]..L...H..7.>...y..}OmB.8..o..T.3.........~..U..d.O...z..)p$M......i...^..V.k....\|s.L.MNN^OvJ.qf.k..4..+...u-e#j....oL"GQ]Y.Fk..j.....SSSS.....hz .e.Huy.2..+S.....A.+.Ki......})).Ij..3me/..Tu.?u!5Y....\`.C@.T=...X.Pm..j...6.....H.CO\..R....Uz..".z.$..p....7.D_WTT\H~l.,. ....!)}%......?.....t..."Q....jjj...Idu..L:.....).1......._./.........D&*..zi..@..;.....yRiX...%yl".:........i..:..@.~.;g..f..q/....d].dH.......Eeee..]....@..z.....b$....{.3.C.5..u.{deeM.p,Q_.!.M;.Ii~.h.... +./..,.iiiw....m6..o...pwz....j1.&1~M3`R...;77./....7......+e.Q.~7.H.u).A.f./.o....TSf.@N......(......&#U!@]...j...<c....W.I..mC)..b...t....._STTD.H.b....`4Q!.H.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1031659
Entropy (8bit):	5.365775380691527
Encrypted:	false
SSDEEP:	24576:RXqTEejjmmpH8ckyevqHPVh0djiIzdogQP8e/53Car:RXqTEejympH8ckyevqHPVh0djiIziFP5
MD5:	A7B192F0BA57033D7F4AEB29617F808F
SHA1:	906AD0D16E9E26941A4F8C60948F5559C93D0AD4
SHA-256:	5990614ECD549B61ECB16325051021BC71997DEC181018705D34ED69EDA709CE
SHA-512:	B8C8DDE876FE5ECA5796C2075DE5290B6A76CA222A0B21771790756DF248F49BA939778DC7DDEA0949A015F5D1ABA661EAEF0ED9189ED870A95249E358FE3C82
Malicious:	false
Reputation:	low
URL:	https://zalo-chat-static.zadn.vn/v1/lazy/web-startup.b612538677d498545a0d.js
Preview:	"object"!=typeof globalThis&&(globalThis=window),(this.webpackJsonp=this.webpackJsonp\|\|[]).push([[21],{"+eUS":function(e,t,s){"use strict";s.d(t,"a",(function(){return u}));var i=s("jDHv"),a=s("+ExH"),n=s("ycTR"),r=s("YEoC"),o=s("kFM4"),d=s("teaq"),l=s("PhBv"),c=s("1UUk"),h=s("Hw41");function u(e){Object(o.a)("RunMode",e),e!==r.f.Unknown&&(i.ModuleContainer.resolve(c.b).install(),e!==r.f.Background&&(setTimeout((()=>{const e=i.ModuleContainer.resolve(l.b);e.install(a.b),e.start()}),1),i.ModuleContainer.resolve(d.b).install(n.a,n.b)),e===r.f.Host&&i.ModuleContainer.resolve(h.a).install())}},"+iAT":function(e,t,s){"use strict";var i=s("VTBJ"),a=s("YEoC"),n=s("xI/L"),r=s("C9Dv"),o=s("teaq");const d={PartitionKey:new o.d({tableName:"partition_key",name:"PartitionKey",fields:{database:{name:"database",type:a.h.string},table:{name:"table",type:a.h.string},key:{name:"key",type:a.h.string},value:{name:"value",type:a.h.string}},indices:{primary:{name:"primary",fields:[{type:"raw",field:"databas

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56261), with LF, NEL line terminators
Category:	dropped
Size (bytes):	585915
Entropy (8bit):	5.433600491965067
Encrypted:	false
SSDEEP:	6144:czbIFUKlM56tqu6n2EFtqQ9SQh86U8ZNz2+TQcG67c:czBK3K1QQ9S0pZh6
MD5:	D5A5BF6ADB03D66B4056A1BB7A97278D
SHA1:	1C20287D3F97563C7D97B8E749365C1F3D550C3A
SHA-256:	DC52BFBCAEE1C7D8F7D604F994D857FDBEF692DA78448FCF89A1AED6E0CBB0B1
SHA-512:	3403F70C161DBF7388A5BFD2A7701BDC1EF088CF7C2135B008886B357730A4F15E6688EA487A2A0C5F68F7A9C4311CAC9E95FE20D089E7A1B9FB4AC3BC080D65
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="./",n(n.s=655)}([function(e,t,n){"use strict";e.exports=n(647)},function(e,t,n){"use strict";var r=n(

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 16:49:54.541534901 CET	192.168.2.6	1.1.1.1	0x7a38	Standard query (0)	chat.zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:54.541769981 CET	192.168.2.6	1.1.1.1	0xca04	Standard query (0)	chat.zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:49:56.969381094 CET	192.168.2.6	1.1.1.1	0xd536	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:56.971007109 CET	192.168.2.6	1.1.1.1	0x7c0e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 16:49:56.987593889 CET	192.168.2.6	1.1.1.1	0xf584	Standard query (0)	stc-sp.zadn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:56.987960100 CET	192.168.2.6	1.1.1.1	0xcb3b	Standard query (0)	stc-sp.zadn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:49:57.062943935 CET	192.168.2.6	1.1.1.1	0xb151	Standard query (0)	zalo-chat-static.zadn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:57.063178062 CET	192.168.2.6	1.1.1.1	0x270a	Standard query (0)	zalo-chat-static.zadn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:49:59.627604961 CET	192.168.2.6	1.1.1.1	0x9d90	Standard query (0)	jr.chat.zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:59.627929926 CET	192.168.2.6	1.1.1.1	0x8193	Standard query (0)	jr.chat.zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:49:59.850210905 CET	192.168.2.6	1.1.1.1	0x7b4c	Standard query (0)	chat.zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:59.850990057 CET	192.168.2.6	1.1.1.1	0x9add	Standard query (0)	chat.zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:49:59.989051104 CET	192.168.2.6	1.1.1.1	0xaa51	Standard query (0)	stc-sp.zadn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:59.989907026 CET	192.168.2.6	1.1.1.1	0x8f80	Standard query (0)	stc-sp.zadn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:00.002041101 CET	192.168.2.6	1.1.1.1	0x2a31	Standard query (0)	zalo-chat-static.zadn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.002705097 CET	192.168.2.6	1.1.1.1	0xaae5	Standard query (0)	zalo-chat-static.zadn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:00.802414894 CET	192.168.2.6	1.1.1.1	0x91c3	Standard query (0)	za.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.802752972 CET	192.168.2.6	1.1.1.1	0xbaa4	Standard query (0)	za.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:01.438045979 CET	192.168.2.6	1.1.1.1	0x780c	Standard query (0)	jr.chat.zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:01.438307047 CET	192.168.2.6	1.1.1.1	0x25cd	Standard query (0)	jr.chat.zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:50:02.244796038 CET	192.168.2.6	1.1.1.1	0xc381	Standard query (0)	za.zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:02.245033026 CET	192.168.2.6	1.1.1.1	0x74eb	Standard query (0)	za.zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:50:02.253042936 CET	192.168.2.6	1.1.1.1	0xfebb	Standard query (0)	za.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:02.253509045 CET	192.168.2.6	1.1.1.1	0x39c9	Standard query (0)	za.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:04.000569105 CET	192.168.2.6	1.1.1.1	0x2da2	Standard query (0)	za.zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:04.000699997 CET	192.168.2.6	1.1.1.1	0x8fd6	Standard query (0)	za.zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:50:13.333741903 CET	192.168.2.6	1.1.1.1	0x4087	Standard query (0)	stc-chat.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:13.334713936 CET	192.168.2.6	1.1.1.1	0xab16	Standard query (0)	stc-chat.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:13.476281881 CET	192.168.2.6	1.1.1.1	0x2023	Standard query (0)	wpa.chat.zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:13.476896048 CET	192.168.2.6	1.1.1.1	0x317d	Standard query (0)	wpa.chat.zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:50:15.834527016 CET	192.168.2.6	1.1.1.1	0xec2c	Standard query (0)	stc-chat.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:15.834662914 CET	192.168.2.6	1.1.1.1	0xc213	Standard query (0)	stc-chat.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:15.949522972 CET	192.168.2.6	1.1.1.1	0xe22e	Standard query (0)	wpa.chat.zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:15.949765921 CET	192.168.2.6	1.1.1.1	0xaae1	Standard query (0)	wpa.chat.zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:50:17.748416901 CET	192.168.2.6	1.1.1.1	0x1ed6	Standard query (0)	id.zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:17.748858929 CET	192.168.2.6	1.1.1.1	0x55d2	Standard query (0)	id.zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:50:21.422224998 CET	192.168.2.6	1.1.1.1	0x41d9	Standard query (0)	stc-zlogin.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:21.422658920 CET	192.168.2.6	1.1.1.1	0xccbe	Standard query (0)	stc-zlogin.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:21.422992945 CET	192.168.2.6	1.1.1.1	0x98bb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:21.423335075 CET	192.168.2.6	1.1.1.1	0x4392	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 16:50:21.449836969 CET	192.168.2.6	1.1.1.1	0x2c16	Standard query (0)	zalo-captcha.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:21.450313091 CET	192.168.2.6	1.1.1.1	0xbcb6	Standard query (0)	zalo-captcha.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:28.218424082 CET	192.168.2.6	1.1.1.1	0x6aa0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:28.219052076 CET	192.168.2.6	1.1.1.1	0xd002	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 16:50:28.220109940 CET	192.168.2.6	1.1.1.1	0xcc75	Standard query (0)	stc-zlogin.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:28.220284939 CET	192.168.2.6	1.1.1.1	0xf7f1	Standard query (0)	stc-zlogin.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:28.223999977 CET	192.168.2.6	1.1.1.1	0xf6cc	Standard query (0)	zalo-captcha.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:28.224332094 CET	192.168.2.6	1.1.1.1	0x3654	Standard query (0)	zalo-captcha.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:28.470995903 CET	192.168.2.6	1.1.1.1	0xe1d8	Standard query (0)	id.zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:28.471148968 CET	192.168.2.6	1.1.1.1	0x71a2	Standard query (0)	id.zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:50:29.331588030 CET	192.168.2.6	1.1.1.1	0xe08d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:29.332041025 CET	192.168.2.6	1.1.1.1	0x418c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 16:50:34.937618017 CET	192.168.2.6	1.1.1.1	0x2e39	Standard query (0)	zaloapp.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:34.938276052 CET	192.168.2.6	1.1.1.1	0xb78c	Standard query (0)	zaloapp.com	65	IN (0x0001)	false
Oct 31, 2024 16:50:36.076215982 CET	192.168.2.6	1.1.1.1	0x2b9f	Standard query (0)	stc-zaloid.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:36.076971054 CET	192.168.2.6	1.1.1.1	0x4c6c	Standard query (0)	stc-zaloid.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:36.501105070 CET	192.168.2.6	1.1.1.1	0x4e91	Standard query (0)	zaloapp.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:36.503148079 CET	192.168.2.6	1.1.1.1	0xe3fc	Standard query (0)	zaloapp.com	65	IN (0x0001)	false
Oct 31, 2024 16:50:38.209709883 CET	192.168.2.6	1.1.1.1	0x6e69	Standard query (0)	stc-zaloid.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:38.209896088 CET	192.168.2.6	1.1.1.1	0xef08	Standard query (0)	stc-zaloid.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:40.571238041 CET	192.168.2.6	1.1.1.1	0xb6ae	Standard query (0)	zalo.me	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:40.571650982 CET	192.168.2.6	1.1.1.1	0xc67d	Standard query (0)	zalo.me	65	IN (0x0001)	false
Oct 31, 2024 16:50:44.087955952 CET	192.168.2.6	1.1.1.1	0xe10d	Standard query (0)	stc-zaloprofile.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:44.089366913 CET	192.168.2.6	1.1.1.1	0x91da	Standard query (0)	stc-zaloprofile.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:45.918590069 CET	192.168.2.6	1.1.1.1	0xac42	Standard query (0)	stc-zaloprofile.zdn.vn	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:45.918895960 CET	192.168.2.6	1.1.1.1	0x90c5	Standard query (0)	stc-zaloprofile.zdn.vn	65	IN (0x0001)	false
Oct 31, 2024 16:50:54.082266092 CET	192.168.2.6	1.1.1.1	0x90ca	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:54.082775116 CET	192.168.2.6	1.1.1.1	0xed34	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 31, 2024 16:50:54.085589886 CET	192.168.2.6	1.1.1.1	0x3019	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:54.085804939 CET	192.168.2.6	1.1.1.1	0xbac6	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 16:51:08.628617048 CET	192.168.2.6	1.1.1.1	0xd44d	Standard query (0)	zaloapp.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:51:08.628962040 CET	192.168.2.6	1.1.1.1	0x65d	Standard query (0)	zaloapp.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 16:49:54.748773098 CET	1.1.1.1	192.168.2.6	0x7a38	No error (0)	chat.zalo.me		49.213.95.122	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:54.748773098 CET	1.1.1.1	192.168.2.6	0x7a38	No error (0)	chat.zalo.me		49.213.95.137	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:56.977235079 CET	1.1.1.1	192.168.2.6	0xd536	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:56.978377104 CET	1.1.1.1	192.168.2.6	0x7c0e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 16:49:57.297431946 CET	1.1.1.1	192.168.2.6	0xf584	No error (0)	stc-sp.zadn.vn		222.255.114.102	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:57.297431946 CET	1.1.1.1	192.168.2.6	0xf584	No error (0)	stc-sp.zadn.vn		222.255.114.118	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:57.488764048 CET	1.1.1.1	192.168.2.6	0xb151	No error (0)	zalo-chat-static.zadn.vn		171.244.25.71	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:57.488764048 CET	1.1.1.1	192.168.2.6	0xb151	No error (0)	zalo-chat-static.zadn.vn		103.9.196.58	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:57.488764048 CET	1.1.1.1	192.168.2.6	0xb151	No error (0)	zalo-chat-static.zadn.vn		103.9.196.55	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:57.488764048 CET	1.1.1.1	192.168.2.6	0xb151	No error (0)	zalo-chat-static.zadn.vn		171.244.25.77	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:49:59.862354040 CET	1.1.1.1	192.168.2.6	0x9d90	No error (0)	jr.chat.zalo.me		49.213.95.207	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.056708097 CET	1.1.1.1	192.168.2.6	0x7b4c	No error (0)	chat.zalo.me		49.213.95.122	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.056708097 CET	1.1.1.1	192.168.2.6	0x7b4c	No error (0)	chat.zalo.me		49.213.95.137	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.199376106 CET	1.1.1.1	192.168.2.6	0xaa51	No error (0)	stc-sp.zadn.vn		222.255.114.118	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.199376106 CET	1.1.1.1	192.168.2.6	0xaa51	No error (0)	stc-sp.zadn.vn		222.255.114.102	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.228332996 CET	1.1.1.1	192.168.2.6	0x2a31	No error (0)	zalo-chat-static.zadn.vn		103.9.196.55	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.228332996 CET	1.1.1.1	192.168.2.6	0x2a31	No error (0)	zalo-chat-static.zadn.vn		171.244.25.77	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.228332996 CET	1.1.1.1	192.168.2.6	0x2a31	No error (0)	zalo-chat-static.zadn.vn		171.244.25.71	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.228332996 CET	1.1.1.1	192.168.2.6	0x2a31	No error (0)	zalo-chat-static.zadn.vn		103.9.196.58	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.810015917 CET	1.1.1.1	192.168.2.6	0x91c3	No error (0)	za.zdn.vn		49.213.95.44	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:00.810015917 CET	1.1.1.1	192.168.2.6	0x91c3	No error (0)	za.zdn.vn		49.213.95.43	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:01.599098921 CET	1.1.1.1	192.168.2.6	0x780c	No error (0)	jr.chat.zalo.me		49.213.95.207	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:02.266727924 CET	1.1.1.1	192.168.2.6	0xfebb	No error (0)	za.zdn.vn		49.213.95.44	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:02.266727924 CET	1.1.1.1	192.168.2.6	0xfebb	No error (0)	za.zdn.vn		49.213.95.43	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:02.540827990 CET	1.1.1.1	192.168.2.6	0xc381	No error (0)	za.zalo.me		49.213.95.247	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:04.205342054 CET	1.1.1.1	192.168.2.6	0x2da2	No error (0)	za.zalo.me		49.213.95.247	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:07.940534115 CET	1.1.1.1	192.168.2.6	0x9774	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:50:07.940534115 CET	1.1.1.1	192.168.2.6	0x9774	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:13.696571112 CET	1.1.1.1	192.168.2.6	0x4087	No error (0)	stc-chat.zdn.vn		49.213.95.44	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:13.696571112 CET	1.1.1.1	192.168.2.6	0x4087	No error (0)	stc-chat.zdn.vn		49.213.95.43	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:13.706722975 CET	1.1.1.1	192.168.2.6	0x2023	No error (0)	wpa.chat.zalo.me		49.213.95.137	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:13.706722975 CET	1.1.1.1	192.168.2.6	0x2023	No error (0)	wpa.chat.zalo.me		49.213.95.187	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:15.842807055 CET	1.1.1.1	192.168.2.6	0xec2c	No error (0)	stc-chat.zdn.vn		49.213.95.43	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:15.842807055 CET	1.1.1.1	192.168.2.6	0xec2c	No error (0)	stc-chat.zdn.vn		49.213.95.44	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:16.157953024 CET	1.1.1.1	192.168.2.6	0xe22e	No error (0)	wpa.chat.zalo.me		49.213.95.187	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:16.157953024 CET	1.1.1.1	192.168.2.6	0xe22e	No error (0)	wpa.chat.zalo.me		49.213.95.137	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:17.913307905 CET	1.1.1.1	192.168.2.6	0x1ed6	No error (0)	id.zalo.me		49.213.95.230	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:21.430696011 CET	1.1.1.1	192.168.2.6	0x98bb	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:21.430736065 CET	1.1.1.1	192.168.2.6	0x4392	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 16:50:21.637213945 CET	1.1.1.1	192.168.2.6	0x41d9	No error (0)	stc-zlogin.zdn.vn		49.213.95.48	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:21.637213945 CET	1.1.1.1	192.168.2.6	0x41d9	No error (0)	stc-zlogin.zdn.vn		49.213.95.47	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:21.683944941 CET	1.1.1.1	192.168.2.6	0x2c16	No error (0)	zalo-captcha.zdn.vn		49.213.95.44	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:21.683944941 CET	1.1.1.1	192.168.2.6	0x2c16	No error (0)	zalo-captcha.zdn.vn		49.213.95.43	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:28.225245953 CET	1.1.1.1	192.168.2.6	0x6aa0	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:28.226727009 CET	1.1.1.1	192.168.2.6	0xd002	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 16:50:28.432878017 CET	1.1.1.1	192.168.2.6	0xcc75	No error (0)	stc-zlogin.zdn.vn		49.213.95.48	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:28.432878017 CET	1.1.1.1	192.168.2.6	0xcc75	No error (0)	stc-zlogin.zdn.vn		49.213.95.47	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:28.456784964 CET	1.1.1.1	192.168.2.6	0xf6cc	No error (0)	zalo-captcha.zdn.vn		49.213.95.44	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:28.456784964 CET	1.1.1.1	192.168.2.6	0xf6cc	No error (0)	zalo-captcha.zdn.vn		49.213.95.43	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:28.631814003 CET	1.1.1.1	192.168.2.6	0xe1d8	No error (0)	id.zalo.me		49.213.95.230	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:29.338408947 CET	1.1.1.1	192.168.2.6	0xe08d	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:29.338821888 CET	1.1.1.1	192.168.2.6	0x418c	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 16:50:35.167340994 CET	1.1.1.1	192.168.2.6	0x2e39	No error (0)	zaloapp.com		49.213.95.220	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:36.306363106 CET	1.1.1.1	192.168.2.6	0x2b9f	No error (0)	stc-zaloid.zdn.vn		49.213.95.43	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:36.306363106 CET	1.1.1.1	192.168.2.6	0x2b9f	No error (0)	stc-zaloid.zdn.vn		49.213.95.44	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:36.790489912 CET	1.1.1.1	192.168.2.6	0x4e91	No error (0)	zaloapp.com		49.213.95.220	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:38.423872948 CET	1.1.1.1	192.168.2.6	0x6e69	No error (0)	stc-zaloid.zdn.vn		49.213.95.44	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:38.423872948 CET	1.1.1.1	192.168.2.6	0x6e69	No error (0)	stc-zaloid.zdn.vn		49.213.95.43	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:40.762825012 CET	1.1.1.1	192.168.2.6	0xb6ae	No error (0)	zalo.me		49.213.95.247	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:40.762825012 CET	1.1.1.1	192.168.2.6	0xb6ae	No error (0)	zalo.me		49.213.95.248	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:44.313302040 CET	1.1.1.1	192.168.2.6	0xe10d	No error (0)	stc-zaloprofile.zdn.vn		49.213.95.44	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:44.313302040 CET	1.1.1.1	192.168.2.6	0xe10d	No error (0)	stc-zaloprofile.zdn.vn		49.213.95.43	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:45.925827980 CET	1.1.1.1	192.168.2.6	0xac42	No error (0)	stc-zaloprofile.zdn.vn		49.213.95.44	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:45.925827980 CET	1.1.1.1	192.168.2.6	0xac42	No error (0)	stc-zaloprofile.zdn.vn		49.213.95.43	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:54.094927073 CET	1.1.1.1	192.168.2.6	0x90ca	No error (0)	analytics.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:54.094943047 CET	1.1.1.1	192.168.2.6	0xed34	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 16:50:54.100694895 CET	1.1.1.1	192.168.2.6	0x3019	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:54.100694895 CET	1.1.1.1	192.168.2.6	0x3019	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:54.100694895 CET	1.1.1.1	192.168.2.6	0x3019	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:50:54.100694895 CET	1.1.1.1	192.168.2.6	0x3019	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Oct 31, 2024 16:51:08.785819054 CET	1.1.1.1	192.168.2.6	0xd44d	No error (0)	zaloapp.com		49.213.95.220	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49952	49.213.95.220	80	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 31, 2024 16:50:35.229696989 CET	516	OUT	GET /qr/l?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn HTTP/1.1 Host: zaloapp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 31, 2024 16:50:36.306319952 CET	545	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 31 Oct 2024 15:50:36 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://zaloapp.com/qr/l?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn server: za-ngx-srv Server: 5217 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 31, 2024 16:50:38.584492922 CET	426	OUT	GET / HTTP/1.1 Host: zaloapp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 31, 2024 16:50:39.036829948 CET	369	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 31 Oct 2024 15:50:38 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://zaloapp.com/ server: za-ngx-srv Server: 5217 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 31, 2024 16:50:39.155251026 CET	369	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 31 Oct 2024 15:50:38 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://zaloapp.com/ server: za-ngx-srv Server: 5217 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49709	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:52 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 61 7a 77 57 63 4c 4f 75 73 6b 4f 45 75 78 33 4f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 66 32 32 36 38 39 38 63 33 39 33 39 61 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: azwWcLOuskOEux3O.1Context: 32f226898c3939a0
2024-10-31 15:49:52 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-31 15:49:52 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 61 7a 77 57 63 4c 4f 75 73 6b 4f 45 75 78 33 4f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 66 32 32 36 38 39 38 63 33 39 33 39 61 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 77 73 69 55 70 51 6b 4e 68 56 59 6f 6b 6c 4d 6c 53 62 7a 4a 77 57 43 51 67 6e 4f 36 34 50 30 35 33 78 71 55 5a 6a 77 4b 7a 52 41 68 59 65 76 34 73 6a 31 7a 46 63 6e 41 6d 73 53 2b 4f 58 41 6f 59 6c 7a 64 58 44 4b 5a 65 39 76 53 62 57 4a 71 2b 38 6a 31 4b 70 59 4e 59 39 46 58 52 5a 55 46 4b 38 4c 2b 79 52 32 38 79 79 56 4f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: azwWcLOuskOEux3O.2Context: 32f226898c3939a0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVwsiUpQkNhVYoklMlSbzJwWCQgnO64P053xqUZjwKzRAhYev4sj1zFcnAmsS+OXAoYlzdXDKZe9vSbWJq+8j1KpYNY9FXRZUFK8L+yR28yyVO
2024-10-31 15:49:52 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 61 7a 77 57 63 4c 4f 75 73 6b 4f 45 75 78 33 4f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 66 32 32 36 38 39 38 63 33 39 33 39 61 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: azwWcLOuskOEux3O.3Context: 32f226898c3939a0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-31 15:49:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-31 15:49:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 79 4b 78 45 51 33 71 69 51 45 61 37 33 41 55 36 4e 39 43 73 52 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: yKxEQ3qiQEa73AU6N9CsRg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49715	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:55 UTC	655	OUT	GET / HTTP/1.1 Host: chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:49:56 UTC	1237	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:49:56 GMT Content-Type: text/html Content-Length: 3899 Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: "66f63b75-f3b" Accept-Ranges: bytes server: za-ngx-srv Strict-Transport-Security: max-age=31536000; includeSubdomains; preload Access-Control-Allow-Credentials: true X-XSS-Protection: 1 Content-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zaloapp.com .zdn.vn .zadn.vn .dropboxapi.com .google.com www.google-analytics.com www.gstatic.com; style-src 'self' 'unsafe-inline' .zadn.vn .zdn.vn blob:;manifest-src 'self' 'unsafe-inline' .zalo.me;font-src * data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .dlfl.me .dlmd.me .mdchat.me .z-cdn.me .zaloapp.com .zing.vn .dropboxapi.com .google.com .baomoi.com .zingtv.vn .zingmp3.vn zingmp3.vn blob:; child-src 'self' .zapps.vn .baomoi.com .zingmp3.com .zingmp3.vn zingmp3.vn www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .zing.vn .zdn.vn .zadn.vn .dlfl.me .dlmd.me .mdchat.me .zaloapp.com .soundcloud.com .live.com blob:
2024-10-31 15:49:56 UTC	3899	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 74 72 61 6e 73 6c 61 74 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 Data Ascii: <!doctype html><html lang="en"><head><meta name="google" content="notranslate"/><meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=0"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta charset="utf-8"/><meta property

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:56 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:49:56 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:49:56 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 30 Oct 2024 23:56:08 GMT ETag: "0x8DCF93E6CAB67A0" x-ms-request-id: cf7486c4-d01e-00ad-0e4c-2be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T154956Z-17c5cb586f62bgw58esgbu9hgw00000002hg0000000017e9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:49:56 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-31 15:49:56 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-31 15:49:56 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-31 15:49:56 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-31 15:49:56 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-31 15:49:56 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-31 15:49:57 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-31 15:49:57 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-31 15:49:57 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-31 15:49:57 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49716	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:57 UTC	542	OUT	GET /libs/libsignal-protocol.static.js HTTP/1.1 Host: chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:49:57 UTC	372	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:49:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: W/"66f63b75-99bb3" Expires: Sun, 03 Nov 2024 09:31:42 GMT Cache-Control: max-age=259200 Cache-Control: public Content-Encoding: gzip server: za-ngx-srv X-Cache-Status: HIT
2024-10-31 15:49:57 UTC	16012	IN	Data Raw: 38 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ec bc 7f 77 53 57 96 ae fb 55 1c 8d 3e 1c 29 16 8e 6d 08 10 3b 0a 83 4a 91 ea 74 27 90 0b a4 ab fb 50 1c 0f c7 08 70 95 91 68 59 ce 8f 06 fa b3 df e7 79 e7 5a 92 0c 4e 9f 3e e3 de 71 cf fd a3 47 95 b1 b4 f7 5a 73 cd 1f ef 7c e7 5c 6b 6f 67 70 31 7b 3e 7d 71 3a 9b 3e 1f 7c 32 59 fe f6 66 3a 7f b1 b5 98 fe eb c5 e9 62 7a ed da f0 97 d3 d9 f3 f9 2f 3b 47 47 b3 f9 f3 e9 a3 ba 3c 69 b7 c7 cf a7 67 d3 e5 74 ab 8d 69 57 47 e3 17 17 b3 93 e5 e9 7c 36 1c bd fd f9 78 b1 f5 ed 6c 39 5d cc 8e cf 26 6f df 8f bf 9f 3f bf 38 9b 1e b6 19 67 a7 3f 9d 9f be bc 74 eb dd bb 61 8d 99 0c 7f 9e 9f 3e df da fd 64 32 a9 0b 77 eb d7 c1 ec e2 ec 6c f4 ee dd db f7 a3 43 a5 bf 8e c4 87 3f 4f 17 8b d3 e7 d3 73 16 39 7c 31 5f 0c bd f5 b7 Data Ascii: 8000wSWU>)m;Jt'PphYyZN>qGZs\|\kogp1{>}q:>\|2Yf:bz/;GG<igtiWG\|6xl9]&o?8g?ta>d2wlC?Os9\|1_
2024-10-31 15:49:57 UTC	16384	IN	Data Raw: 44 22 20 d1 20 58 4a 5d c1 6d bd ab 16 63 b9 46 b6 95 2d c2 1f 17 37 4c 41 6c a6 54 e8 5c a8 b1 7e 83 a2 6e 55 33 7e 34 0f 8c b8 43 10 d7 ac c8 37 d4 e0 3a b4 03 c9 38 16 a9 2a c6 98 00 5c c2 b1 ba e1 7d 14 e3 16 c3 a0 71 a7 18 5f f4 75 3e 5f 2d 12 d5 5d e6 91 07 ee 4d ff 81 fe a4 4f 55 34 91 c3 74 83 cc e0 54 47 db 6e 9b 5d 4c 25 2d ec 2d 83 45 66 a9 25 f4 d5 5f 27 72 63 80 79 ab 12 e2 72 48 e9 87 32 c8 c0 63 d6 d4 d8 2e a5 21 cb 60 67 75 7c 95 12 8d 5c 83 0f e0 ac cb 88 60 b8 c0 8c 73 cc 3a f9 a5 d4 e1 0e bd e7 6a fb c7 34 bc dd 30 6d b5 40 64 68 59 71 7c 36 0e 04 07 a0 b0 8d 42 02 38 e1 33 1f 28 c6 6c ab 58 4a fb 70 99 5d 00 53 80 95 4b 61 24 4a 66 53 93 ea e7 17 6c 47 20 be f5 56 3a 11 d4 50 b4 cd 2d b8 cd d9 8b a6 89 27 60 80 01 48 04 46 e6 26 89 c7 Data Ascii: D" XJ]mcF-7LAlT\~nU3~4C7:8*\}q_u>_-]MOU4tTGn]L%--Ef%_'rcyrH2c.!`gu\|\`s:j40m@dhYq\|6B83(lXJp]SKa$JfSlG V:P-'`HF&
2024-10-31 15:49:58 UTC	16384	IN	Data Raw: 9a 63 98 c2 97 a6 84 86 a5 40 58 43 41 a2 d0 49 e7 76 bd 09 77 7b ae 55 4f 01 fa db 04 fc 68 24 69 24 ae 2d 4b ad 18 2e 69 76 bb 1d 25 f9 79 91 1a b6 68 cb c2 5d 8e 79 85 50 5d 5c 47 6b fa 32 62 07 ad a7 41 02 0c 0a 69 d2 45 71 87 9a 07 e0 f8 0a a5 2f 25 a0 38 a8 ce 65 e1 ab 66 85 62 7b 65 6f 4d ac 95 47 d8 c4 d5 b7 7e 2d 9f 78 df df b8 77 2d d1 8a 08 31 2e 2d 88 52 32 05 c2 c4 d6 9c 15 77 9d d5 0e ab 66 79 9a 61 33 d7 e2 02 fd 41 91 11 6b 35 e6 e1 98 87 df 5e bd 11 b6 bc ff 0b dd e5 36 40 b2 ba 7e 21 40 b7 db b5 66 19 1d 96 ea 11 0a f4 3b 57 ac 96 21 13 82 1a 2b 28 2d 2f 9c ed 52 1b 8e 0c 17 03 03 44 7e fd 52 6f f3 ba b2 67 c2 46 a3 57 3b 1d 9a 1b dc 6d 97 2b 35 e2 30 c4 b0 7a 4d 4b 42 a4 cd 6e 43 8b 6f 90 2f 17 db cb 6e 44 52 95 ff d3 03 5f 38 24 17 ec Data Ascii: c@XCAIvw{UOh$i$-K.iv%yh]yP]\Gk2bAiEq/%8efb{eoMG~-xw-1.-R2wfya3Ak5^6@~!@f;W!+(-/RD~RogFW;m+50zMKBnCo/nDR_8$
2024-10-31 15:49:58 UTC	16384	IN	Data Raw: d5 6e bd 14 4f c7 20 19 67 6a 4d bc 3c e1 7c 12 95 27 55 72 3c 1c 2f de 8d 54 85 2f 3d fc 0a b1 ab 7b 81 01 44 77 32 5b f3 41 eb c0 15 18 7d 4f 4d 8b 73 a1 15 a9 5f 6f a0 c8 4e 2f 6c 5f 98 f9 26 04 d1 c5 d2 77 00 89 3f 57 9b 0e e2 b5 3b 33 6d d9 98 a8 66 9a 43 dd 33 3f 2f 92 52 4b 49 c7 8c 39 1f 6e 34 e0 18 f8 90 8d c6 cd fd e0 44 54 05 e1 3b 3f a6 68 8c 52 ff 9b a3 71 57 fd 87 5e 21 09 ea cb 95 59 23 20 4c 61 f9 6c df fa 61 de ab d8 e2 c9 e2 42 81 b9 92 0c 64 2c 00 46 93 89 a3 5f a7 11 58 b8 20 ce 55 e5 76 7a f4 95 b0 b6 cc d9 cb 19 86 57 ef d2 dd 86 df 27 4f a7 20 81 75 35 a2 f0 d2 18 dc 19 73 09 2e fa 39 4e 06 12 5a 1d e4 1d d9 4c 01 5b 56 c8 26 6f 04 19 ac d3 23 68 8a e9 57 71 84 cb 97 af 59 08 ea 72 3b a5 73 6b 42 38 2b 2c 58 cd 40 71 ae d6 ec 21 93 Data Ascii: nO gjM<\|'Ur</T/={Dw2[A}OMs_oN/l_&w?W;3mfC3?/RKI9n4DT;?hRqW^!Y# LalaBd,F_X UvzW'O u5s.9NZL[V&o#hWqYr;skB8+,X@q!
2024-10-31 15:49:58 UTC	16384	IN	Data Raw: 77 62 58 10 88 2a f5 06 38 20 a9 48 47 c4 d0 45 f8 fd 4e 36 b3 21 70 90 96 5e 42 a3 91 dd c6 61 e3 35 39 e5 ae 6e 5b 61 68 62 ac cf 76 b7 48 a9 57 8a 36 d1 19 fd c4 26 e8 5a 95 cc 38 d1 6a a1 56 34 ad 61 e4 6e b7 c5 58 dc 56 ec d4 86 e8 a8 fd dc 0d 9c f4 66 64 d3 b1 04 e3 33 2e d0 a8 49 db ff 8b 7d de 71 1f 5f fc ce ed 08 78 ea 66 35 e4 19 1b 21 67 e3 b8 16 45 a5 84 2b 46 3a c5 5f 2a 9e 89 e7 a7 79 05 5b 78 37 61 70 66 25 ba 8b c5 b9 f0 87 7a 64 93 ff 5a b3 76 19 4b 00 f9 92 cd d5 f6 78 0c b2 08 8b 93 e7 d6 37 13 55 3c fa 3d 1f 1b 84 dd b5 61 79 d4 6e 89 a1 61 21 81 36 5a 41 79 7d bc 98 bb 11 86 72 d3 93 49 e2 9c e5 8b 6f 49 7d 1c b1 b7 74 2d 0e 41 68 56 df 1e 6c bf ee 6c 1d bc 5a db e5 e2 0f 2e f7 10 27 73 3c ae b2 63 df 6f c3 2a a1 5f 90 d4 4d 2b 71 a9 Data Ascii: wbX8 HGEN6!p^Ba59n[ahbvHW6&Z8jV4anXVfd3.I}q_xf5!gE+F:_y[x7apf%zdZvKx7U<=ayna!6ZAy}rIoI}t-AhVllZ.'s<co*_M+q
2024-10-31 15:49:58 UTC	16384	IN	Data Raw: f7 a6 cd 8d e4 58 a2 e5 9f 91 95 45 4e aa cd 2a ab 2a ab fb 19 ca 9f 99 28 8a da 48 8a a2 a8 35 6c 9e 8c 3b 29 ae 22 a9 85 ea c8 ff 3e e7 00 ee 41 65 55 75 bf ae e9 ac 99 2f ef 43 9c 10 b1 5c 00 ee 70 38 80 7b 1d 17 79 e5 bc 83 d5 89 f5 c9 29 67 e5 cf 4f 0e 5b 0c 3c 39 a5 f8 e4 2c 11 18 7b f6 60 f5 65 c9 b9 b6 0c 3e fb 0c 3d e9 69 3e dc 7c 79 dd 6f e0 bc 69 c1 83 d1 32 6c c4 6d c8 87 b3 e1 e7 d1 ac 56 74 4b ce 48 fa db d1 8c 3d 6e f2 3a 9a 7d da b4 60 44 c9 47 9d d8 31 c6 1c 69 fe c1 39 e5 3f 84 27 18 8d 57 58 dc f0 17 a7 41 8d 88 cb 4b fd b4 8b c5 63 1b 77 d4 79 6c 75 97 fd 77 ca 4d a3 e8 3a 63 98 62 d8 6a e7 75 d8 79 27 f9 87 37 4a 8a c7 a1 d8 26 f6 51 60 b0 48 ed f8 63 9c e9 3c 32 5a fd 21 f6 e6 8e 7f c5 49 c2 95 23 d8 9f 1d 50 de b2 53 66 65 ed 34 48 Data Ascii: XEN**(H5l;)">AeUu/C\p8{y)gO[<9,{`e>=i>\|yoi2lmVtKH=n:}`DG1i9?'WXAKcwyluwM:cbjuy'7J&Q`Hc<2Z!I#PSfe4H
2024-10-31 15:49:58 UTC	16384	IN	Data Raw: 36 27 49 1e 96 9b ef 1c 3d 6b ec 75 11 8b 0d 67 94 77 b8 93 87 45 27 ab 9d d8 c6 7b 43 cf 45 5d 54 81 6d c4 d2 93 77 52 6c e3 a3 e1 07 e2 44 7c e4 29 b0 fb a4 1f 95 99 4b 60 f3 79 5c 0e 18 7d b2 42 2e 0a c5 fa f3 38 55 09 13 d0 b3 72 e8 97 88 bd 2c 62 31 06 8d 55 da 53 60 6a 22 a6 a1 4c 4d 08 4f fe dd 30 0d 9d 97 02 b6 a1 8b 52 c0 38 94 fd d7 52 61 5f 60 58 ec 20 98 8a be 94 02 b6 a2 ec bf 16 b1 18 8d 46 c9 ed d2 77 c9 5d 25 f7 4a de d0 91 a1 5d b1 11 2b 60 63 31 2d 65 bb ad 64 a7 7d b2 46 0f a2 67 8a 65 9e 02 4b 53 06 9a 12 73 89 e8 7d ee a8 94 6d 4b 01 7b d3 a3 52 c0 e0 74 f1 f5 ad 28 1f cb d3 a3 54 3b cc 4f 3b a5 80 fd 29 0b 9e 22 16 43 d4 58 bb 2b 65 a7 76 63 91 ca ac 84 f0 80 45 6a ad 14 30 49 65 0b b6 c8 80 6d 6a 2d 89 c3 40 b5 51 0a 58 a8 32 96 14 Data Ascii: 6'I=kugwE'{CE]TmwRlD\|)K`y\}B.8Ur,b1US`j"LMO0R8Ra_`X Fw]%J]+`c1-ed}FgeKSs}mK{Rt(T;O;)"CX+evcEj0Iemj-@QX2
2024-10-31 15:49:58 UTC	16384	IN	Data Raw: 8a 1e 37 0d 8f a6 3e b4 ba d0 3e 6f 9c b8 ee bd 7a 2e ec 08 77 80 a2 43 db cb 77 e6 c6 b7 19 4d ef ea 4d 85 aa 97 f9 a3 d4 89 ce 77 35 dd 11 c5 ef da 4d 85 e6 97 a1 51 52 51 01 c7 1d 3f 5a 63 ea 01 0a 61 56 b9 88 e8 a2 42 23 3c 71 53 a1 0d 66 19 52 4a a0 12 9e 48 f5 a1 17 9e bb a9 50 0c e3 58 ac a4 a2 21 8e fa 16 9a fa d0 17 e3 b0 3a 7a 30 ea d5 31 61 45 98 07 ec 01 7a 64 1c 57 23 5f be 44 5e 5f 17 9e 84 5e ce 81 7e 99 01 74 e3 00 47 b7 3c 75 53 a1 5c 66 31 5a ee 8a 96 79 2a b5 09 55 f3 e6 4d 85 ae 99 c5 68 49 45 e9 1c 6d 3a b1 c6 d4 47 54 d0 38 c7 60 0f 7b 59 a1 83 1e ba a9 d0 3d e3 97 b7 94 40 09 3d 94 ea 43 13 7d bb 53 a1 8a 66 4c 94 dd 2a 3a e9 a8 af df ec 47 d1 50 13 24 65 c7 a7 74 ec d5 4b 61 d2 fb 6d e5 1e a0 b9 26 ce ce 8e 7d dc f0 fa b6 70 63 b6 Data Ascii: 7>>oz.wCwMMw5MQRQ?ZcaVB#<qSfRJHPX!:z01aEzdW#_D^_^~tG<uS\f1ZyUMhIEm:GT8`{Y=@=C}SfL:GP$etKam&}pc
2024-10-31 15:49:58 UTC	16384	IN	Data Raw: 8b 56 8b 3e 97 7d 11 7d 6e d5 f0 6f b0 2f 4a c7 7e 9e 7d 51 5c 35 fc 2c fb a2 64 f8 59 f6 45 c9 f0 92 7d 11 1d a8 27 24 1f ca cf b2 2f 9e f2 a0 f8 39 f6 45 49 ff 1d d9 17 d1 ba 32 19 da b8 9f 63 5f f8 0e 9b fe b3 ec 0b 67 44 33 bc 64 5f c4 1d ea 39 d3 1c 3f cb be f0 2b 67 86 97 ec 8b a8 a2 9e 54 cd f1 92 7d 11 39 ea af 9d 39 fe 87 b1 2f 5e 70 0a 8a 77 a5 01 f6 45 a3 31 6e 71 0a 06 d8 17 8d b6 6f 80 53 f0 2a fb 62 80 53 30 c0 bd 08 97 44 c1 11 6d a9 4b 5e e5 5e b4 b5 d6 2a ee 5f 72 2f 5a 5a eb 01 ee c5 80 66 dd 63 ff a2 b5 2e d4 0b 14 2a 0d f5 62 40 6b 3d c0 bf b8 61 98 24 df 47 ad 63 ff 57 f9 17 2d bd e7 ab fc 8b 96 de f3 55 06 46 4b ef 39 c0 c1 08 c7 08 e1 3b 67 80 ed 52 18 18 f4 a3 51 90 1f d9 62 59 b0 8e cc 42 c4 20 47 4d bf 68 b3 5d 06 88 18 f5 d1 3e Data Ascii: V>}}no/J~}Q\5,dYE}'$/9EI2c_gD3d_9?+gT}99/^pwE1nqoSbS0DmK^^_r/ZZfc.*b@k=a$GcW-UFK9;gRQbYB GMh]>
2024-10-31 15:49:58 UTC	16384	IN	Data Raw: 6c 0c 65 22 c8 c0 da 08 64 b5 eb 1a d4 1a 79 8f 27 06 75 44 57 63 69 01 73 ee 29 31 0c 89 96 f1 7a e2 50 2b 28 27 2b a8 28 31 0e 89 a1 81 15 e1 f4 6d 9a 23 ae 1b de 8e f0 b1 41 75 31 1f 30 99 47 53 89 fe c8 a7 a6 6d 60 53 5c aa a1 a5 a4 a1 86 12 93 48 a3 6f 60 43 0c 44 17 98 46 47 89 d9 48 0d cd af a7 4a 96 0c 9a 46 e4 07 eb b7 2e 16 34 74 a2 c4 6d 68 68 6a a2 27 22 d3 10 c7 77 f0 14 44 e4 a9 b5 3e 11 3b 36 7b 47 c0 9c b7 95 38 0e 89 15 e3 6d 8b 3a 7f ed 2c 7c df f0 8d 08 3f 36 68 5f ac 5a 86 35 60 0a 07 4a 1c 86 c4 86 81 07 62 dd 8c 56 81 12 65 25 f6 42 e2 d0 c0 b2 70 a2 67 3b 0b 7f 30 7c 35 c2 f7 0c 7a 10 f3 c1 a3 29 ac 29 f1 14 3a 5e 35 70 4d 0c ac 47 37 d5 e3 4a 89 dd 48 e3 c9 c0 2b 71 2b 6e 80 69 6c 29 c1 61 23 e8 78 7e 3d a9 e9 de a0 8b 88 fc 4c 0c Data Ascii: le"dy'uDWcis)1zP+('+(1m#Au10GSm`S\Ho`CDFGHJF.4tmhhj'"wD>;6{G8m:,\|?6h_Z5`JbVe%Bpg;0\|5z)):^5pMG7JH+q+nil)a#x~=L

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:58 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:49:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:49:58 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 20969678-a01e-006f-3ab0-2a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T154958Z-159b85dff8fdjprfhC1DFWuqh000000000ng000000004e91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:49:58 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:58 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:49:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:49:58 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T154958Z-17c5cb586f6r59nt4rzfbx40ys0000000210000000007apk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:49:58 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:58 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:49:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:49:58 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T154958Z-16849878b78j5kdg3dndgqw0vg0000000bag00000000vrpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:49:58 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:58 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:49:58 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:49:58 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f312709b-601e-0001-377c-2afaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T154958Z-17c5cb586f69p7mmw593w958p400000000xg00000000mktd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:49:58 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:58 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:49:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:49:58 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 8f1f3dd8-601e-0097-4789-28f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T154958Z-15b8d89586f5s5nz3ffrgxn5ac0000000afg0000000085au x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:49:58 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49721	222.255.114.102	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:58 UTC	540	OUT	GET /session-sdk/session-sdk.min.js HTTP/1.1 Host: stc-sp.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:49:59 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:49:59 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:49:59 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:49:59 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:49:59 UTC	29	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: no-transform
2024-10-31 15:49:59 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:49:59 UTC	23	IN	Data Raw: 45 54 61 67 3a 20 22 36 36 30 61 33 34 64 62 2d 34 66 35 35 22 0d 0a Data Ascii: ETag: "660a34db-4f55"
2024-10-31 15:49:59 UTC	21	IN	Data Raw: 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a Data Ascii: X-Cache-Status: HIT
2024-10-31 15:49:59 UTC	12	IN	Data Raw: 41 67 65 3a 20 31 38 37 30 39 0d 0a Data Ascii: Age: 18709
2024-10-31 15:49:59 UTC	23	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 33 30 39 0d 0a Data Ascii: Content-Length: 20309
2024-10-31 15:49:59 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49723	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:58 UTC	572	OUT	GET /v1/lazy/vendors-embed-render.17bee88d4759f5ada63e.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:49:59 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:49:59 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:49:59 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:49:59 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:49:59 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:49:59 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:49:59 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:49:59 GMT
2024-10-31 15:49:59 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:49:59 GMT
2024-10-31 15:49:59 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:49:59 GMT
2024-10-31 15:49:59 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:49:59 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 65 30 32 35 30 38 2d 37 62 31 63 64 22 0d 0a Data Ascii: ETag: W/"66e02508-7b1cd"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49726	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:58 UTC	553	OUT	GET /v1/lazy/4.460ebe81b7d583573298.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:49:59 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:49:59 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:49:59 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:49:59 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:49:59 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:49:59 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:49:59 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:49:59 GMT
2024-10-31 15:49:59 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:49:59 GMT
2024-10-31 15:49:59 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:49:59 GMT
2024-10-31 15:49:59 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:49:59 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 65 30 32 35 30 38 2d 31 33 39 62 66 22 0d 0a Data Ascii: ETag: W/"66e02508-139bf"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49725	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:58 UTC	572	OUT	GET /v1/lazy/default-embed-render.964d9cd9be2140add15d.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:49:59 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:49:59 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:49:59 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:49:59 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:49:59 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:49:59 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:49:59 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:49:59 GMT
2024-10-31 15:49:59 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:49:59 GMT
2024-10-31 15:49:59 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:49:59 GMT
2024-10-31 15:49:59 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:49:59 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 63 39 39 38 64 22 0d 0a Data Ascii: ETag: W/"66f63b75-c998d"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49722	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:58 UTC	553	OUT	GET /v1/render.9c0875841efb5667ea74.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:49:59 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:49:59 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:49:59 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:49:59 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:49:59 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:49:59 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:49:59 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:49:59 GMT
2024-10-31 15:49:59 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:49:59 GMT
2024-10-31 15:49:59 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:49:59 GMT
2024-10-31 15:49:59 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:49:59 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 33 31 38 38 33 22 0d 0a Data Ascii: ETag: W/"66f63b75-31883"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49732	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:49:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 15:49:59 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=176143 Date: Thu, 31 Oct 2024 15:49:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155000Z-16849878b787bfsh7zgp804my400000008k0000000008xv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 80c74b81-d01e-00a1-16c0-2a35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155000Z-159b85dff8fgxq4qhC1DFWxa0n00000001xg00000000nn8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:00 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155000Z-16849878b786lft2mu9uftf3y40000000b1g00000000764z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:00 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155000Z-16849878b78xblwksrnkakc08w00000008x000000000rxn8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:00 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155000Z-16849878b785jrf8dn0d2rczaw0000000azg000000002km3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:00 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 15:50:00 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=176199 Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 15:50:00 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49724	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	587	OUT	GET /v1/vendors-embed-web-startup.f85daca1da58d70b76b1.css HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:01 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:01 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:01 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:01 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:01 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:01 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 31 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:01 GMT
2024-10-31 15:50:01 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 31 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:01 GMT
2024-10-31 15:50:01 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:01 GMT
2024-10-31 15:50:01 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:01 UTC	23	IN	Data Raw: 45 54 61 67 3a 20 22 36 36 64 38 30 64 38 61 2d 31 37 38 34 22 0d 0a Data Ascii: ETag: "66d80d8a-1784"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:00 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9b80997a-f01e-0003-4c76-2a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155000Z-159b85dff8fdh9tvhC1DFW50vs00000001rg0000000080eu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155000Z-16849878b78bcpfn2qf7sm6hsn0000000ba000000000k5tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:01 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155000Z-16849878b7898p5f6vryaqvp580000000ag000000000s1yz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f6d6c722-a01e-00ab-371c-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155000Z-15b8d89586f6nn8zqg1h5suba800000004xg00000000evta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155000Z-16849878b78hh85qc40uyr8sc80000000a2g000000005u2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49739	49.213.95.207	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:00 UTC	547	OUT	GET /jr/userinfo HTTP/1.1 Host: jr.chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://chat.zalo.me Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:01 UTC	1900	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:01 GMT Content-Type: application/json;charset=utf-8 Content-Length: 98 Connection: close Content-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self [TRUNCATED] Access-Control-Allow-Origin: https://chat.zalo.me Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE, HEAD Set-Cookie: _zlang=vn;Path=/;Domain=zalo.me;Expires=Fri, 01-Nov-2024 15:50:01 GMT;Max-Age=86400;Secure Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: private, no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding, User-Agent server: za-ngx-srv Strict-Transport-Security: max-age=86400
2024-10-31 15:50:01 UTC	98	IN	Data Raw: 7b 22 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 22 3a 22 54 68 c3 a0 6e 68 20 63 c3 b4 6e 67 22 2c 22 64 61 74 61 22 3a 7b 22 6c 6f 67 67 65 64 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 5f 63 6f 6e 66 69 72 6d 5f 70 77 64 22 3a 74 72 75 65 7d 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 7d Data Ascii: {"error_message":"Thnh cng","data":{"logged":false,"require_confirm_pwd":true},"error_code":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49741	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	369	OUT	GET /libs/libsignal-protocol.static.js HTTP/1.1 Host: chat.zalo.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:01 UTC	372	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: W/"66f63b75-99bb3" Expires: Sun, 03 Nov 2024 09:31:42 GMT Cache-Control: max-age=259200 Cache-Control: public Content-Encoding: gzip server: za-ngx-srv X-Cache-Status: HIT
2024-10-31 15:50:01 UTC	16012	IN	Data Raw: 38 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ec bc 7f 77 53 57 96 ae fb 55 1c 8d 3e 1c 29 16 8e 6d 08 10 3b 0a 83 4a 91 ea 74 27 90 0b a4 ab fb 50 1c 0f c7 08 70 95 91 68 59 ce 8f 06 fa b3 df e7 79 e7 5a 92 0c 4e 9f 3e e3 de 71 cf fd a3 47 95 b1 b4 f7 5a 73 cd 1f ef 7c e7 5c 6b 6f 67 70 31 7b 3e 7d 71 3a 9b 3e 1f 7c 32 59 fe f6 66 3a 7f b1 b5 98 fe eb c5 e9 62 7a ed da f0 97 d3 d9 f3 f9 2f 3b 47 47 b3 f9 f3 e9 a3 ba 3c 69 b7 c7 cf a7 67 d3 e5 74 ab 8d 69 57 47 e3 17 17 b3 93 e5 e9 7c 36 1c bd fd f9 78 b1 f5 ed 6c 39 5d cc 8e cf 26 6f df 8f bf 9f 3f bf 38 9b 1e b6 19 67 a7 3f 9d 9f be bc 74 eb dd bb 61 8d 99 0c 7f 9e 9f 3e df da fd 64 32 a9 0b 77 eb d7 c1 ec e2 ec 6c f4 ee dd db f7 a3 43 a5 bf 8e c4 87 3f 4f 17 8b d3 e7 d3 73 16 39 7c 31 5f 0c bd f5 b7 Data Ascii: 8000wSWU>)m;Jt'PphYyZN>qGZs\|\kogp1{>}q:>\|2Yf:bz/;GG<igtiWG\|6xl9]&o?8g?ta>d2wlC?Os9\|1_
2024-10-31 15:50:01 UTC	16384	IN	Data Raw: 44 22 20 d1 20 58 4a 5d c1 6d bd ab 16 63 b9 46 b6 95 2d c2 1f 17 37 4c 41 6c a6 54 e8 5c a8 b1 7e 83 a2 6e 55 33 7e 34 0f 8c b8 43 10 d7 ac c8 37 d4 e0 3a b4 03 c9 38 16 a9 2a c6 98 00 5c c2 b1 ba e1 7d 14 e3 16 c3 a0 71 a7 18 5f f4 75 3e 5f 2d 12 d5 5d e6 91 07 ee 4d ff 81 fe a4 4f 55 34 91 c3 74 83 cc e0 54 47 db 6e 9b 5d 4c 25 2d ec 2d 83 45 66 a9 25 f4 d5 5f 27 72 63 80 79 ab 12 e2 72 48 e9 87 32 c8 c0 63 d6 d4 d8 2e a5 21 cb 60 67 75 7c 95 12 8d 5c 83 0f e0 ac cb 88 60 b8 c0 8c 73 cc 3a f9 a5 d4 e1 0e bd e7 6a fb c7 34 bc dd 30 6d b5 40 64 68 59 71 7c 36 0e 04 07 a0 b0 8d 42 02 38 e1 33 1f 28 c6 6c ab 58 4a fb 70 99 5d 00 53 80 95 4b 61 24 4a 66 53 93 ea e7 17 6c 47 20 be f5 56 3a 11 d4 50 b4 cd 2d b8 cd d9 8b a6 89 27 60 80 01 48 04 46 e6 26 89 c7 Data Ascii: D" XJ]mcF-7LAlT\~nU3~4C7:8*\}q_u>_-]MOU4tTGn]L%--Ef%_'rcyrH2c.!`gu\|\`s:j40m@dhYq\|6B83(lXJp]SKa$JfSlG V:P-'`HF&
2024-10-31 15:50:01 UTC	16384	IN	Data Raw: 9a 63 98 c2 97 a6 84 86 a5 40 58 43 41 a2 d0 49 e7 76 bd 09 77 7b ae 55 4f 01 fa db 04 fc 68 24 69 24 ae 2d 4b ad 18 2e 69 76 bb 1d 25 f9 79 91 1a b6 68 cb c2 5d 8e 79 85 50 5d 5c 47 6b fa 32 62 07 ad a7 41 02 0c 0a 69 d2 45 71 87 9a 07 e0 f8 0a a5 2f 25 a0 38 a8 ce 65 e1 ab 66 85 62 7b 65 6f 4d ac 95 47 d8 c4 d5 b7 7e 2d 9f 78 df df b8 77 2d d1 8a 08 31 2e 2d 88 52 32 05 c2 c4 d6 9c 15 77 9d d5 0e ab 66 79 9a 61 33 d7 e2 02 fd 41 91 11 6b 35 e6 e1 98 87 df 5e bd 11 b6 bc ff 0b dd e5 36 40 b2 ba 7e 21 40 b7 db b5 66 19 1d 96 ea 11 0a f4 3b 57 ac 96 21 13 82 1a 2b 28 2d 2f 9c ed 52 1b 8e 0c 17 03 03 44 7e fd 52 6f f3 ba b2 67 c2 46 a3 57 3b 1d 9a 1b dc 6d 97 2b 35 e2 30 c4 b0 7a 4d 4b 42 a4 cd 6e 43 8b 6f 90 2f 17 db cb 6e 44 52 95 ff d3 03 5f 38 24 17 ec Data Ascii: c@XCAIvw{UOh$i$-K.iv%yh]yP]\Gk2bAiEq/%8efb{eoMG~-xw-1.-R2wfya3Ak5^6@~!@f;W!+(-/RD~RogFW;m+50zMKBnCo/nDR_8$
2024-10-31 15:50:01 UTC	16384	IN	Data Raw: d5 6e bd 14 4f c7 20 19 67 6a 4d bc 3c e1 7c 12 95 27 55 72 3c 1c 2f de 8d 54 85 2f 3d fc 0a b1 ab 7b 81 01 44 77 32 5b f3 41 eb c0 15 18 7d 4f 4d 8b 73 a1 15 a9 5f 6f a0 c8 4e 2f 6c 5f 98 f9 26 04 d1 c5 d2 77 00 89 3f 57 9b 0e e2 b5 3b 33 6d d9 98 a8 66 9a 43 dd 33 3f 2f 92 52 4b 49 c7 8c 39 1f 6e 34 e0 18 f8 90 8d c6 cd fd e0 44 54 05 e1 3b 3f a6 68 8c 52 ff 9b a3 71 57 fd 87 5e 21 09 ea cb 95 59 23 20 4c 61 f9 6c df fa 61 de ab d8 e2 c9 e2 42 81 b9 92 0c 64 2c 00 46 93 89 a3 5f a7 11 58 b8 20 ce 55 e5 76 7a f4 95 b0 b6 cc d9 cb 19 86 57 ef d2 dd 86 df 27 4f a7 20 81 75 35 a2 f0 d2 18 dc 19 73 09 2e fa 39 4e 06 12 5a 1d e4 1d d9 4c 01 5b 56 c8 26 6f 04 19 ac d3 23 68 8a e9 57 71 84 cb 97 af 59 08 ea 72 3b a5 73 6b 42 38 2b 2c 58 cd 40 71 ae d6 ec 21 93 Data Ascii: nO gjM<\|'Ur</T/={Dw2[A}OMs_oN/l_&w?W;3mfC3?/RKI9n4DT;?hRqW^!Y# LalaBd,F_X UvzW'O u5s.9NZL[V&o#hWqYr;skB8+,X@q!
2024-10-31 15:50:01 UTC	16384	IN	Data Raw: 77 62 58 10 88 2a f5 06 38 20 a9 48 47 c4 d0 45 f8 fd 4e 36 b3 21 70 90 96 5e 42 a3 91 dd c6 61 e3 35 39 e5 ae 6e 5b 61 68 62 ac cf 76 b7 48 a9 57 8a 36 d1 19 fd c4 26 e8 5a 95 cc 38 d1 6a a1 56 34 ad 61 e4 6e b7 c5 58 dc 56 ec d4 86 e8 a8 fd dc 0d 9c f4 66 64 d3 b1 04 e3 33 2e d0 a8 49 db ff 8b 7d de 71 1f 5f fc ce ed 08 78 ea 66 35 e4 19 1b 21 67 e3 b8 16 45 a5 84 2b 46 3a c5 5f 2a 9e 89 e7 a7 79 05 5b 78 37 61 70 66 25 ba 8b c5 b9 f0 87 7a 64 93 ff 5a b3 76 19 4b 00 f9 92 cd d5 f6 78 0c b2 08 8b 93 e7 d6 37 13 55 3c fa 3d 1f 1b 84 dd b5 61 79 d4 6e 89 a1 61 21 81 36 5a 41 79 7d bc 98 bb 11 86 72 d3 93 49 e2 9c e5 8b 6f 49 7d 1c b1 b7 74 2d 0e 41 68 56 df 1e 6c bf ee 6c 1d bc 5a db e5 e2 0f 2e f7 10 27 73 3c ae b2 63 df 6f c3 2a a1 5f 90 d4 4d 2b 71 a9 Data Ascii: wbX8 HGEN6!p^Ba59n[ahbvHW6&Z8jV4anXVfd3.I}q_xf5!gE+F:_y[x7apf%zdZvKx7U<=ayna!6ZAy}rIoI}t-AhVllZ.'s<co*_M+q
2024-10-31 15:50:02 UTC	16384	IN	Data Raw: f7 a6 cd 8d e4 58 a2 e5 9f 91 95 45 4e aa cd 2a ab 2a ab fb 19 ca 9f 99 28 8a da 48 8a a2 a8 35 6c 9e 8c 3b 29 ae 22 a9 85 ea c8 ff 3e e7 00 ee 41 65 55 75 bf ae e9 ac 99 2f ef 43 9c 10 b1 5c 00 ee 70 38 80 7b 1d 17 79 e5 bc 83 d5 89 f5 c9 29 67 e5 cf 4f 0e 5b 0c 3c 39 a5 f8 e4 2c 11 18 7b f6 60 f5 65 c9 b9 b6 0c 3e fb 0c 3d e9 69 3e dc 7c 79 dd 6f e0 bc 69 c1 83 d1 32 6c c4 6d c8 87 b3 e1 e7 d1 ac 56 74 4b ce 48 fa db d1 8c 3d 6e f2 3a 9a 7d da b4 60 44 c9 47 9d d8 31 c6 1c 69 fe c1 39 e5 3f 84 27 18 8d 57 58 dc f0 17 a7 41 8d 88 cb 4b fd b4 8b c5 63 1b 77 d4 79 6c 75 97 fd 77 ca 4d a3 e8 3a 63 98 62 d8 6a e7 75 d8 79 27 f9 87 37 4a 8a c7 a1 d8 26 f6 51 60 b0 48 ed f8 63 9c e9 3c 32 5a fd 21 f6 e6 8e 7f c5 49 c2 95 23 d8 9f 1d 50 de b2 53 66 65 ed 34 48 Data Ascii: XEN**(H5l;)">AeUu/C\p8{y)gO[<9,{`e>=i>\|yoi2lmVtKH=n:}`DG1i9?'WXAKcwyluwM:cbjuy'7J&Q`Hc<2Z!I#PSfe4H
2024-10-31 15:50:02 UTC	16384	IN	Data Raw: 36 27 49 1e 96 9b ef 1c 3d 6b ec 75 11 8b 0d 67 94 77 b8 93 87 45 27 ab 9d d8 c6 7b 43 cf 45 5d 54 81 6d c4 d2 93 77 52 6c e3 a3 e1 07 e2 44 7c e4 29 b0 fb a4 1f 95 99 4b 60 f3 79 5c 0e 18 7d b2 42 2e 0a c5 fa f3 38 55 09 13 d0 b3 72 e8 97 88 bd 2c 62 31 06 8d 55 da 53 60 6a 22 a6 a1 4c 4d 08 4f fe dd 30 0d 9d 97 02 b6 a1 8b 52 c0 38 94 fd d7 52 61 5f 60 58 ec 20 98 8a be 94 02 b6 a2 ec bf 16 b1 18 8d 46 c9 ed d2 77 c9 5d 25 f7 4a de d0 91 a1 5d b1 11 2b 60 63 31 2d 65 bb ad 64 a7 7d b2 46 0f a2 67 8a 65 9e 02 4b 53 06 9a 12 73 89 e8 7d ee a8 94 6d 4b 01 7b d3 a3 52 c0 e0 74 f1 f5 ad 28 1f cb d3 a3 54 3b cc 4f 3b a5 80 fd 29 0b 9e 22 16 43 d4 58 bb 2b 65 a7 76 63 91 ca ac 84 f0 80 45 6a ad 14 30 49 65 0b b6 c8 80 6d 6a 2d 89 c3 40 b5 51 0a 58 a8 32 96 14 Data Ascii: 6'I=kugwE'{CE]TmwRlD\|)K`y\}B.8Ur,b1US`j"LMO0R8Ra_`X Fw]%J]+`c1-ed}FgeKSs}mK{Rt(T;O;)"CX+evcEj0Iemj-@QX2
2024-10-31 15:50:02 UTC	16384	IN	Data Raw: 8a 1e 37 0d 8f a6 3e b4 ba d0 3e 6f 9c b8 ee bd 7a 2e ec 08 77 80 a2 43 db cb 77 e6 c6 b7 19 4d ef ea 4d 85 aa 97 f9 a3 d4 89 ce 77 35 dd 11 c5 ef da 4d 85 e6 97 a1 51 52 51 01 c7 1d 3f 5a 63 ea 01 0a 61 56 b9 88 e8 a2 42 23 3c 71 53 a1 0d 66 19 52 4a a0 12 9e 48 f5 a1 17 9e bb a9 50 0c e3 58 ac a4 a2 21 8e fa 16 9a fa d0 17 e3 b0 3a 7a 30 ea d5 31 61 45 98 07 ec 01 7a 64 1c 57 23 5f be 44 5e 5f 17 9e 84 5e ce 81 7e 99 01 74 e3 00 47 b7 3c 75 53 a1 5c 66 31 5a ee 8a 96 79 2a b5 09 55 f3 e6 4d 85 ae 99 c5 68 49 45 e9 1c 6d 3a b1 c6 d4 47 54 d0 38 c7 60 0f 7b 59 a1 83 1e ba a9 d0 3d e3 97 b7 94 40 09 3d 94 ea 43 13 7d bb 53 a1 8a 66 4c 94 dd 2a 3a e9 a8 af df ec 47 d1 50 13 24 65 c7 a7 74 ec d5 4b 61 d2 fb 6d e5 1e a0 b9 26 ce ce 8e 7d dc f0 fa b6 70 63 b6 Data Ascii: 7>>oz.wCwMMw5MQRQ?ZcaVB#<qSfRJHPX!:z01aEzdW#_D^_^~tG<uS\f1ZyUMhIEm:GT8`{Y=@=C}SfL:GP$etKam&}pc
2024-10-31 15:50:02 UTC	16384	IN	Data Raw: 8b 56 8b 3e 97 7d 11 7d 6e d5 f0 6f b0 2f 4a c7 7e 9e 7d 51 5c 35 fc 2c fb a2 64 f8 59 f6 45 c9 f0 92 7d 11 1d a8 27 24 1f ca cf b2 2f 9e f2 a0 f8 39 f6 45 49 ff 1d d9 17 d1 ba 32 19 da b8 9f 63 5f f8 0e 9b fe b3 ec 0b 67 44 33 bc 64 5f c4 1d ea 39 d3 1c 3f cb be f0 2b 67 86 97 ec 8b a8 a2 9e 54 cd f1 92 7d 11 39 ea af 9d 39 fe 87 b1 2f 5e 70 0a 8a 77 a5 01 f6 45 a3 31 6e 71 0a 06 d8 17 8d b6 6f 80 53 f0 2a fb 62 80 53 30 c0 bd 08 97 44 c1 11 6d a9 4b 5e e5 5e b4 b5 d6 2a ee 5f 72 2f 5a 5a eb 01 ee c5 80 66 dd 63 ff a2 b5 2e d4 0b 14 2a 0d f5 62 40 6b 3d c0 bf b8 61 98 24 df 47 ad 63 ff 57 f9 17 2d bd e7 ab fc 8b 96 de f3 55 06 46 4b ef 39 c0 c1 08 c7 08 e1 3b 67 80 ed 52 18 18 f4 a3 51 90 1f d9 62 59 b0 8e cc 42 c4 20 47 4d bf 68 b3 5d 06 88 18 f5 d1 3e Data Ascii: V>}}no/J~}Q\5,dYE}'$/9EI2c_gD3d_9?+gT}99/^pwE1nqoSbS0DmK^^_r/ZZfc.*b@k=a$GcW-UFK9;gRQbYB GMh]>
2024-10-31 15:50:02 UTC	16384	IN	Data Raw: 6c 0c 65 22 c8 c0 da 08 64 b5 eb 1a d4 1a 79 8f 27 06 75 44 57 63 69 01 73 ee 29 31 0c 89 96 f1 7a e2 50 2b 28 27 2b a8 28 31 0e 89 a1 81 15 e1 f4 6d 9a 23 ae 1b de 8e f0 b1 41 75 31 1f 30 99 47 53 89 fe c8 a7 a6 6d 60 53 5c aa a1 a5 a4 a1 86 12 93 48 a3 6f 60 43 0c 44 17 98 46 47 89 d9 48 0d cd af a7 4a 96 0c 9a 46 e4 07 eb b7 2e 16 34 74 a2 c4 6d 68 68 6a a2 27 22 d3 10 c7 77 f0 14 44 e4 a9 b5 3e 11 3b 36 7b 47 c0 9c b7 95 38 0e 89 15 e3 6d 8b 3a 7f ed 2c 7c df f0 8d 08 3f 36 68 5f ac 5a 86 35 60 0a 07 4a 1c 86 c4 86 81 07 62 dd 8c 56 81 12 65 25 f6 42 e2 d0 c0 b2 70 a2 67 3b 0b 7f 30 7c 35 c2 f7 0c 7a 10 f3 c1 a3 29 ac 29 f1 14 3a 5e 35 70 4d 0c ac 47 37 d5 e3 4a 89 dd 48 e3 c9 c0 2b 71 2b 6e 80 69 6c 29 c1 61 23 e8 78 7e 3d a9 e9 de a0 8b 88 fc 4c 0c Data Ascii: le"dy'uDWcis)1zP+('+(1m#Au10GSm`S\Ho`CDFGHJF.4tmhhj'"wD>;6{G8m:,\|?6h_Z5`JbVe%Bpg;0\|5z)):^5pMG7JH+q+nil)a#x~=L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49747	222.255.114.118	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	368	OUT	GET /session-sdk/session-sdk.min.js HTTP/1.1 Host: stc-sp.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:01 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:01 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:01 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:01 UTC	29	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: no-transform
2024-10-31 15:50:01 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:01 UTC	23	IN	Data Raw: 45 54 61 67 3a 20 22 36 36 30 61 33 34 64 62 2d 34 66 35 35 22 0d 0a Data Ascii: ETag: "660a34db-4f55"
2024-10-31 15:50:01 UTC	21	IN	Data Raw: 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a Data Ascii: X-Cache-Status: HIT
2024-10-31 15:50:01 UTC	11	IN	Data Raw: 41 67 65 3a 20 35 37 31 36 0d 0a Data Ascii: Age: 5716
2024-10-31 15:50:01 UTC	23	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 33 30 39 0d 0a Data Ascii: Content-Length: 20309
2024-10-31 15:50:01 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49748	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	381	OUT	GET /v1/lazy/4.460ebe81b7d583573298.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:01 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:01 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:01 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:01 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:01 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:01 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 34 39 3a 35 36 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:49:56 GMT
2024-10-31 15:50:01 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:49:56 GMT
2024-10-31 15:50:01 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 36 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:49:56 GMT
2024-10-31 15:50:01 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:01 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 65 30 32 35 30 38 2d 31 33 39 62 66 22 0d 0a Data Ascii: ETag: W/"66e02508-139bf"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49749	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	381	OUT	GET /v1/render.9c0875841efb5667ea74.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:01 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:01 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:01 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:01 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:01 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:01 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 34 39 3a 35 36 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:49:56 GMT
2024-10-31 15:50:01 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:49:56 GMT
2024-10-31 15:50:01 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 36 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:49:56 GMT
2024-10-31 15:50:01 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:01 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 33 31 38 38 33 22 0d 0a Data Ascii: ETag: W/"66f63b75-31883"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49750	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	400	OUT	GET /v1/lazy/vendors-embed-render.17bee88d4759f5ada63e.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:02 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:02 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:02 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:02 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:02 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:02 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 34 39 3a 35 37 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:49:57 GMT
2024-10-31 15:50:02 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:49:57 GMT
2024-10-31 15:50:02 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:49:57 GMT
2024-10-31 15:50:02 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:02 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 65 30 32 35 30 38 2d 37 62 31 63 64 22 0d 0a Data Ascii: ETag: W/"66e02508-7b1cd"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: f6a97644-d01e-0017-2411-2bb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155001Z-15b8d89586f8nxpt6ys645x5v00000000az000000000dkp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:01 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 89d7e9f4-d01e-0066-46a8-2aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155001Z-16849878b78fhxrnedubv5byks0000000850000000002hqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:01 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: abf73cf0-e01e-0052-5534-2ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155001Z-15b8d89586fst84kttks1s2css00000003h0000000000p76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49751	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	400	OUT	GET /v1/lazy/default-embed-render.964d9cd9be2140add15d.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:02 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:02 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:02 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:02 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:02 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:02 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 34 39 3a 35 37 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:49:57 GMT
2024-10-31 15:50:02 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:49:57 GMT
2024-10-31 15:50:02 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 34 39 3a 35 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:49:57 GMT
2024-10-31 15:50:02 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:02 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 63 39 39 38 64 22 0d 0a Data Ascii: ETag: W/"66f63b75-c998d"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:01 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 6a0b02b6-001e-0046-12c7-2ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155001Z-159b85dff8f9mtxchC1DFWf9vg000000012g00000000b85b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49752	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	589	OUT	GET /favicon-96x96.v1.png HTTP/1.1 Host: chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:02 UTC	348	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:02 GMT Content-Type: image/png Content-Length: 6231 Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: "66f63b75-1857" Expires: Sun, 03 Nov 2024 08:46:58 GMT Cache-Control: max-age=259200 Cache-Control: public server: za-ngx-srv X-Cache-Status: HIT Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	6231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 15 ca 49 44 41 54 78 da ed 9d 79 9c 1d 55 95 c7 bf f7 56 d5 5b 7a ef 4e 77 a7 b3 6f 64 23 98 10 12 84 b0 84 84 cd 20 08 91 65 40 3f 20 8a a0 04 a2 02 e2 28 8e 0e 28 0e 7e 50 51 71 c3 41 d1 19 9d 41 10 54 24 a0 b2 09 81 84 35 21 40 f6 8d 90 bd b3 76 3a bd bc ad aa ce fc 71 ab d3 4b ba 5f d7 eb ee 2c 0c ef f7 f9 bc 7e 9f d7 Data Ascii: PNGIHDR``w8gAMAasRGB cHRMz&u0`:pQ<bKGDpHYsHHFk>IDATxyUV[zNwod# e@? ((~PQqAAT$5!@v:qK_,~

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:01 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155001Z-15b8d89586f8l5961kfst8fpb00000000nk000000000c5rn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:01 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49753	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	528	OUT	GET /manifest.webmanifest HTTP/1.1 Host: chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:02 UTC	1251	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:02 GMT Content-Type: application/octet-stream Content-Length: 846 Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: "66f63b75-34e" Accept-Ranges: bytes server: za-ngx-srv Strict-Transport-Security: max-age=31536000; includeSubdomains; preload Access-Control-Allow-Credentials: true X-XSS-Protection: 1 Content-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zaloapp.com .zdn.vn .zadn.vn .dropboxapi.com .google.com www.google-analytics.com www.gstatic.com; style-src 'self' 'unsafe-inline' .zadn.vn .zdn.vn blob:;manifest-src 'self' 'unsafe-inline' .zalo.me;font-src * data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .dlfl.me .dlmd.me .mdchat.me .z-cdn.me .zaloapp.com .zing.vn .dropboxapi.com .google.com .baomoi.com .zingtv.vn .zingmp3.vn zingmp3.vn blob:; child-src 'self' .zapps.vn .baomoi.com .zingmp3.com .zingmp3.vn zingmp3.vn www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .zing.vn .zdn.vn .zadn.vn .dlfl.me .dlmd.me .mdchat.me .zaloapp.com .soundcloud.com .live.com blob:
2024-10-31 15:50:02 UTC	846	IN	Data Raw: 7b 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 5a 61 6c 6f 22 2c 0a 20 20 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 5a 61 6c 6f 22 2c 0a 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 45 41 45 44 46 30 22 2c 0a 20 20 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0a 20 20 20 20 22 73 74 61 72 74 5f 75 72 6c 22 3a 20 22 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 70 77 61 5f 69 6e 73 74 61 6c 6c 22 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 32 78 33 32 22 2c 0a 20 20 20 20 20 20 20 20 22 74 79 70 65 22 Data Ascii: { "name": "Zalo", "short_name": "Zalo", "background_color": "#EAEDF0", "display": "standalone", "start_url": "/?utm_source=pwa_install", "icons": [ { "src": "/favicon-32x32.png", "sizes": "32x32", "type"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49754	49.213.95.44	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	513	OUT	GET /v3/za.js HTTP/1.1 Host: za.zdn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:02 UTC	291	IN	HTTP/1.1 200 OK Server: ATS-5-57 Date: Thu, 31 Oct 2024 15:01:19 GMT Content-Type: application/javascript Last-Modified: Thu, 06 Jun 2024 07:16:58 GMT ETag: W/"6661626a-562e" Access-Control-Allow-Origin: * Content-Encoding: gzip Age: 2923 Content-Length: 8564 Connection: close
2024-10-31 15:50:02 UTC	8564	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 03 ed 5c 6b 73 da 48 97 fe be bf 02 eb 4d f1 4a 41 16 60 3b 4e 82 a3 d7 e5 38 37 4f e2 cb d8 4e 32 13 9b a1 04 34 a0 18 24 46 6a ec 60 e0 bf ef 73 fa 22 b5 00 3b 99 ad ad fd b4 55 33 b1 50 9f ee 3e 7d fa f4 b9 b7 6e 83 a4 d4 ba 0f 5a b7 2c 49 c3 38 f2 ad ad 9d da 6e ed 59 7d e7 d9 96 b5 c7 93 e9 2c ec d9 df 0e ca e5 6f 07 9e 02 71 f8 20 89 ef 4a 11 bb 2b bd 4d 92 38 b1 ad 83 61 c2 82 ee b4 34 8c 83 2e eb 5a ce de 2d 06 fd 76 e0 f7 26 51 87 63 50 db 99 d1 9b c8 0d 7d 16 75 e2 2e fb 7c 7e 74 18 8f c6 71 c4 22 ee 26 fe 8c 37 ac 56 eb 3e b4 dc b8 61 a5 dc 72 c3 86 15 d3 cf 49 c3 ea 74 47 96 9b a2 fd 3e 4c 3a 96 3b c4 9b 11 b3 dc 56 c3 0a a2 f8 32 be b1 dc 91 78 fc 12 76 ad 85 1b fb 57 d6 7d 30 8c 3d 82 11 4f c1 78 ec 75 62 8c 61 dd Data Ascii: \ksHMJA`;N87ON24$Fj`s";U3P>}nZ,I8nY},oq J+M8a4.Z-v&QcP}u.\|~tq"&7V>arItG>L:;V2xvW}0=Oxuba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49756	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	587	OUT	GET /v1/default-embed-web-startup.c74076b5055445f98284.css HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:02 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:02 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:02 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:02 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:02 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:02 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:02 GMT
2024-10-31 15:50:02 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:02 GMT
2024-10-31 15:50:02 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:02 GMT
2024-10-31 15:50:02 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:02 UTC	23	IN	Data Raw: 45 54 61 67 3a 20 22 36 36 64 38 30 64 38 61 2d 31 35 62 31 22 0d 0a Data Ascii: ETag: "66d80d8a-15b1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49755	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:01 UTC	573	OUT	GET /v1/web-startup.8f6f137d5bc84bfef54f.css HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:02 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:02 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:02 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:02 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:02 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:02 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:02 GMT
2024-10-31 15:50:02 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:02 GMT
2024-10-31 15:50:02 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:02 GMT
2024-10-31 15:50:02 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:02 UTC	27	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 31 64 30 31 34 34 22 0d 0a Data Ascii: ETag: W/"66f63b75-1d0144"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49740	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:02 UTC	375	OUT	GET /favicon-96x96.v1.png HTTP/1.1 Host: chat.zalo.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn
2024-10-31 15:50:02 UTC	348	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:02 GMT Content-Type: image/png Content-Length: 6231 Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: "66f63b75-1857" Expires: Sun, 03 Nov 2024 08:46:58 GMT Cache-Control: max-age=259200 Cache-Control: public server: za-ngx-srv X-Cache-Status: HIT Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	6231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 15 ca 49 44 41 54 78 da ed 9d 79 9c 1d 55 95 c7 bf f7 56 d5 5b 7a ef 4e 77 a7 b3 6f 64 23 98 10 12 84 b0 84 84 cd 20 08 91 65 40 3f 20 8a a0 04 a2 02 e2 28 8e 0e 28 0e 7e 50 51 71 c3 41 d1 19 9d 41 10 54 24 a0 b2 09 81 84 35 21 40 f6 8d 90 bd b3 76 3a bd bc ad aa ce fc 71 ab d3 4b ba 5f d7 eb ee 2c 0c ef f7 f9 bc 7e 9f d7 Data Ascii: PNGIHDR``w8gAMAasRGB cHRMz&u0`:pQ<bKGDpHYsHHFk>IDATxyUV[zNwod# e@? ((~PQqAAT$5!@v:qK_,~

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49762	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:02 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 41 65 4a 56 34 31 53 56 30 4b 36 69 46 42 69 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 62 63 66 33 65 64 64 64 30 66 37 38 39 30 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: tAeJV41SV0K6iFBi.1Context: 4bcf3eddd0f7890f
2024-10-31 15:50:02 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-31 15:50:02 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 74 41 65 4a 56 34 31 53 56 30 4b 36 69 46 42 69 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 62 63 66 33 65 64 64 64 30 66 37 38 39 30 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 77 73 69 55 70 51 6b 4e 68 56 59 6f 6b 6c 4d 6c 53 62 7a 4a 77 57 43 51 67 6e 4f 36 34 50 30 35 33 78 71 55 5a 6a 77 4b 7a 52 41 68 59 65 76 34 73 6a 31 7a 46 63 6e 41 6d 73 53 2b 4f 58 41 6f 59 6c 7a 64 58 44 4b 5a 65 39 76 53 62 57 4a 71 2b 38 6a 31 4b 70 59 4e 59 39 46 58 52 5a 55 46 4b 38 4c 2b 79 52 32 38 79 79 56 4f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: tAeJV41SV0K6iFBi.2Context: 4bcf3eddd0f7890f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVwsiUpQkNhVYoklMlSbzJwWCQgnO64P053xqUZjwKzRAhYev4sj1zFcnAmsS+OXAoYlzdXDKZe9vSbWJq+8j1KpYNY9FXRZUFK8L+yR28yyVO
2024-10-31 15:50:02 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 74 41 65 4a 56 34 31 53 56 30 4b 36 69 46 42 69 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 62 63 66 33 65 64 64 64 30 66 37 38 39 30 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: tAeJV41SV0K6iFBi.3Context: 4bcf3eddd0f7890f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-31 15:50:02 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-31 15:50:02 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 35 6b 57 53 6e 63 6d 34 6b 71 55 64 43 46 35 57 6a 33 36 2b 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +5kWSncm4kqUdCF5Wj36+Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:02 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bf2855ec-b01e-0084-57b7-2ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155002Z-16849878b786lft2mu9uftf3y40000000b100000000089b2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:02 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:02 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 5fd3a61a-e01e-0071-0feb-2a08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155002Z-16849878b78fkwcjkpn19c5dsn00000008tg000000008z6m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:02 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:02 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155002Z-16849878b787wpl5wqkt5731b40000000ak0000000004t3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49763	49.213.95.207	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:02 UTC	369	OUT	GET /jr/userinfo HTTP/1.1 Host: jr.chat.zalo.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn
2024-10-31 15:50:03 UTC	1740	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:02 GMT Content-Type: application/json;charset=utf-8 Content-Length: 71 Connection: close Content-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self [TRUNCATED] Set-Cookie: _zlang=vn;Path=/;Domain=zalo.me;Expires=Fri, 01-Nov-2024 15:50:02 GMT;Max-Age=86400;Secure Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: private, no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding, User-Agent server: za-ngx-srv Strict-Transport-Security: max-age=86400
2024-10-31 15:50:03 UTC	71	IN	Data Raw: 7b 22 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 22 3a 22 54 68 c3 a0 6e 68 20 63 c3 b4 6e 67 22 2c 22 64 61 74 61 22 3a 7b 22 6c 6f 67 67 65 64 22 3a 66 61 6c 73 65 7d 2c 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 7d Data Ascii: {"error_message":"Thnh cng","data":{"logged":false},"error_code":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:02 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155002Z-16849878b78smng4k6nq15r6s40000000b5000000000ssx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:02 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:02 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155002Z-16849878b78km6fmmkbenhx76n000000090g00000000ppq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:02 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49770	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:03 UTC	607	OUT	GET /favicon-144x144.png HTTP/1.1 Host: chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn
2024-10-31 15:50:03 UTC	348	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:03 GMT Content-Type: image/png Content-Length: 5867 Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: "66f63b75-16eb" Expires: Sun, 03 Nov 2024 08:55:28 GMT Cache-Control: max-age=259200 Cache-Control: public server: za-ngx-srv X-Cache-Status: HIT Accept-Ranges: bytes
2024-10-31 15:50:03 UTC	5867	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 06 00 00 00 e7 46 e2 b8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 16 a5 49 44 41 54 78 01 ed 5d 09 98 14 d5 b5 fe bb 7b 7a 56 66 11 19 87 4d 06 1d 91 4d 91 21 a0 82 62 54 14 e2 02 c2 13 63 90 08 4a 44 0d 11 c5 3c f7 e7 82 31 cf 97 a8 89 cb 33 d1 24 0f 01 17 14 15 05 04 0c d1 e7 c2 e2 32 28 9b 2c c2 b0 cf 00 03 83 2c b3 f7 4c 2f 39 67 9a 92 ea 9a 5e aa 6e 55 75 cf 72 cf f7 55 57 d5 dd ef 7f ff be f7 dc b5 00 29 12 01 89 80 44 40 22 20 11 90 08 48 04 24 02 12 01 89 80 44 40 22 20 11 90 08 48 04 24 02 12 01 89 80 44 40 22 20 11 90 08 48 04 24 02 12 01 89 80 44 40 22 20 11 90 08 58 8b 80 c3 da e0 4c 84 76 57 20 0f 35 9e 01 70 39 bb 03 8e e3 97 b3 fd a3 57 20 73 fa 48 b4 73 38 1c ed Data Ascii: PNGIHDRFsRGBIDATx]{zVfMM!bTcJD<13$2(,,L/9g^nUurUW)D@" H$D@" H$D@" H$D@" XLvW 5p9W sHs8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49769	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:03 UTC	577	OUT	GET /v1/lazy/vendors-embed-web-startup.1b4f48155c308b510e2d.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:03 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:03 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:03 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:03 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:03 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:03 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:03 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:03 GMT
2024-10-31 15:50:03 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:03 GMT
2024-10-31 15:50:03 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:03 GMT
2024-10-31 15:50:03 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:03 UTC	27	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 65 30 32 35 30 38 2d 32 35 34 65 63 63 22 0d 0a Data Ascii: ETag: W/"66e02508-254ecc"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49771	49.213.95.44	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:03 UTC	341	OUT	GET /v3/za.js HTTP/1.1 Host: za.zdn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:03 UTC	291	IN	HTTP/1.1 200 OK Server: ATS-5-57 Date: Thu, 31 Oct 2024 15:01:19 GMT Content-Type: application/javascript Last-Modified: Thu, 06 Jun 2024 07:16:58 GMT ETag: W/"6661626a-562e" Access-Control-Allow-Origin: * Content-Encoding: gzip Age: 2924 Content-Length: 8564 Connection: close
2024-10-31 15:50:03 UTC	8564	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 03 ed 5c 6b 73 da 48 97 fe be bf 02 eb 4d f1 4a 41 16 60 3b 4e 82 a3 d7 e5 38 37 4f e2 cb d8 4e 32 13 9b a1 04 34 a0 18 24 46 6a ec 60 e0 bf ef 73 fa 22 b5 00 3b 99 ad ad fd b4 55 33 b1 50 9f ee 3e 7d fa f4 b9 b7 6e 83 a4 d4 ba 0f 5a b7 2c 49 c3 38 f2 ad ad 9d da 6e ed 59 7d e7 d9 96 b5 c7 93 e9 2c ec d9 df 0e ca e5 6f 07 9e 02 71 f8 20 89 ef 4a 11 bb 2b bd 4d 92 38 b1 ad 83 61 c2 82 ee b4 34 8c 83 2e eb 5a ce de 2d 06 fd 76 e0 f7 26 51 87 63 50 db 99 d1 9b c8 0d 7d 16 75 e2 2e fb 7c 7e 74 18 8f c6 71 c4 22 ee 26 fe 8c 37 ac 56 eb 3e b4 dc b8 61 a5 dc 72 c3 86 15 d3 cf 49 c3 ea 74 47 96 9b a2 fd 3e 4c 3a 96 3b c4 9b 11 b3 dc 56 c3 0a a2 f8 32 be b1 dc 91 78 fc 12 76 ad 85 1b fb 57 d6 7d 30 8c 3d 82 11 4f c1 78 ec 75 62 8c 61 dd Data Ascii: \ksHMJA`;N87ON24$Fj`s";U3P>}nZ,I8nY},oq J+M8a4.Z-v&QcP}u.\|~tq"&7V>arItG>L:;V2xvW}0=Oxuba

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:03 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155003Z-16849878b78nzcqcd7bed2fb6n0000000290000000000cgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:03 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: deaa19c2-701e-006f-33de-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155003Z-17c5cb586f6zcqf8r7the4ske0000000022g000000009p4y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:03 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:03 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:03 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: bb81791c-801e-00ac-6687-29fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155003Z-159b85dff8fx9jp8hC1DFWp25400000001sg000000000t13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:03 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49772	49.213.95.247	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:03 UTC	627	OUT	POST /v3/w/t HTTP/1.1 Host: za.zalo.me Connection: keep-alive Content-Length: 161 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded Accept: / Origin: https://chat.zalo.me Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn
2024-10-31 15:50:03 UTC	161	OUT	Data Raw: 7a 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 68 61 74 2e 7a 61 6c 6f 2e 6d 65 25 32 46 26 7a 72 66 3d 26 7a 63 68 3d 55 54 46 2d 38 26 7a 74 73 3d 31 37 33 30 33 38 39 38 30 31 31 32 34 26 7a 6f 73 3d 57 69 6e 64 6f 77 73 26 7a 6c 61 3d 65 6e 2d 55 53 25 32 43 65 6e 2d 55 53 25 32 43 65 6e 26 5f 5f 7a 69 3d 6e 75 6c 6c 26 76 3d 32 34 30 36 30 35 31 34 35 32 26 69 6e 63 6f 67 3d 66 61 6c 73 65 26 7a 61 63 74 3d 70 76 26 5f 7a 61 70 70 3d 26 5f 7a 69 64 6e 62 61 69 64 3d Data Ascii: zl=https%3A%2F%2Fchat.zalo.me%2F&zrf=&zch=UTF-8&zts=1730389801124&zos=Windows&zla=en-US%2Cen-US%2Cen&__zi=null&v=2406051452&incog=false&zact=pv&_zapp=&_zidnbaid=
2024-10-31 15:50:03 UTC	637	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:03 GMT Content-Type: application/json; charset=utf-8 Content-Length: 168 Connection: close Access-Control-Allow-Origin: https://chat.zalo.me Access-Control-Allow-Credentials: true Set-Cookie: __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1;Secure;SameSite=None;Path=/;Domain=zalo.me;Max-Age=62208000 Set-Cookie: __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1;Path=/;Domain=zalo.me;Expires=Wed, 21-Oct-2026 15:50:03 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT server: za-ngx-srv Strict-Transport-Security: max-age=86400; includeSubdomains;
2024-10-31 15:50:03 UTC	168	IN	Data Raw: 7b 22 73 74 22 3a 32 30 2c 22 5f 5f 7a 69 22 3a 22 32 30 30 30 2e 51 4f 42 6c 7a 44 43 56 32 75 47 65 72 6b 46 7a 6d 30 39 4a 71 36 52 53 75 5f 5f 37 33 72 5f 48 42 7a 64 6a 5f 65 69 44 4b 44 69 64 73 6b 52 5f 43 33 61 2e 31 22 2c 22 61 6e 6f 54 6f 6b 22 3a 22 4e 64 71 4c 79 41 5f 61 72 53 35 44 54 48 5f 6d 68 55 46 4f 70 4b 6e 69 32 52 64 70 78 53 32 46 34 37 75 33 66 2d 36 66 57 75 34 38 45 71 55 73 77 77 6b 43 59 6d 30 75 4a 42 53 70 43 4e 71 22 2c 22 63 64 6d 22 3a 22 7a 61 6c 6f 2e 6d 65 22 7d Data Ascii: {"st":20,"__zi":"2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1","anoTok":"NdqLyA_arS5DTH_mhUFOpKni2RdpxS2F47u3f-6fWu48EqUswwkCYm0uJBSpCNq","cdm":"zalo.me"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:03 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:03 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155003Z-16849878b78xblwksrnkakc08w00000008z000000000gg84 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:03 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:03 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c1e62926-201e-005d-3f75-2aafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155003Z-159b85dff8fgb9pzhC1DFW7mkc00000001gg00000000fsy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:04 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155004Z-16849878b7867ttgfbpnfxt44s00000009ng000000009g72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:04 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:04 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155004Z-15b8d89586f8l5961kfst8fpb00000000nn0000000007rgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:04 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:04 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: daa440d4-101e-0028-4cca-2a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155004Z-159b85dff8fprglthC1DFW8zcg00000001gg00000000cpng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:04 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:04 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155004Z-16849878b78qg9mlz11wgn0wcc00000009c0000000006q9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:04 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:04 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5cde4d2e-001e-0046-6764-2ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155004Z-159b85dff8fdh9tvhC1DFW50vs00000001x000000000155k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:04 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49779	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:04 UTC	374	OUT	GET /favicon-144x144.png HTTP/1.1 Host: chat.zalo.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn
2024-10-31 15:50:04 UTC	348	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:04 GMT Content-Type: image/png Content-Length: 5867 Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: "66f63b75-16eb" Expires: Sun, 03 Nov 2024 08:55:28 GMT Cache-Control: max-age=259200 Cache-Control: public server: za-ngx-srv X-Cache-Status: HIT Accept-Ranges: bytes
2024-10-31 15:50:04 UTC	5867	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 06 00 00 00 e7 46 e2 b8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 16 a5 49 44 41 54 78 01 ed 5d 09 98 14 d5 b5 fe bb 7b 7a 56 66 11 19 87 4d 06 1d 91 4d 91 21 a0 82 62 54 14 e2 02 c2 13 63 90 08 4a 44 0d 11 c5 3c f7 e7 82 31 cf 97 a8 89 cb 33 d1 24 0f 01 17 14 15 05 04 0c d1 e7 c2 e2 32 28 9b 2c c2 b0 cf 00 03 83 2c b3 f7 4c 2f 39 67 9a 92 ea 9a 5e aa 6e 55 75 cf 72 cf f7 55 57 d5 dd ef 7f ff be f7 dc b5 00 29 12 01 89 80 44 40 22 20 11 90 08 48 04 24 02 12 01 89 80 44 40 22 20 11 90 08 48 04 24 02 12 01 89 80 44 40 22 20 11 90 08 48 04 24 02 12 01 89 80 44 40 22 20 11 90 08 58 8b 80 c3 da e0 4c 84 76 57 20 0f 35 9e 01 70 39 bb 03 8e e3 97 b3 fd a3 57 20 73 fa 48 b4 73 38 1c ed Data Ascii: PNGIHDRFsRGBIDATx]{zVfMM!bTcJD<13$2(,,L/9g^nUurUW)D@" H$D@" H$D@" H$D@" XLvW 5p9W sHs8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49778	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:04 UTC	571	OUT	GET /v1/lazy/vendors-web-startup.ec7e6ea49b1c2468ba50.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:05 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:05 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:05 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:05 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:05 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:05 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:05 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 34 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:04 GMT
2024-10-31 15:50:05 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 34 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:04 GMT
2024-10-31 15:50:05 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 34 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:04 GMT
2024-10-31 15:50:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:05 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 32 36 61 66 63 22 0d 0a Data Ascii: ETag: W/"66f63b75-26afc"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49785	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:05 UTC	577	OUT	GET /v1/lazy/default-embed-web-startup.2effbe41f8c7dec32403.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:05 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:05 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:05 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:05 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:05 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:05 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:05 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 35 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:05 GMT
2024-10-31 15:50:05 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 35 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:05 GMT
2024-10-31 15:50:05 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 35 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:05 GMT
2024-10-31 15:50:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:05 UTC	27	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 62 65 64 32 62 65 22 0d 0a Data Ascii: ETag: W/"66f63b75-bed2be"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49786	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:05 UTC	563	OUT	GET /v1/lazy/web-startup.b612538677d498545a0d.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:05 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:05 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:05 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:05 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:05 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:05 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:05 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 35 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:05 GMT
2024-10-31 15:50:05 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 35 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:05 GMT
2024-10-31 15:50:05 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 35 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:05 GMT
2024-10-31 15:50:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:05 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 66 62 64 65 62 22 0d 0a Data Ascii: ETag: W/"66f63b75-fbdeb"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49787	49.213.95.247	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:05 UTC	496	OUT	GET /v3/w/t HTTP/1.1 Host: za.zalo.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:05 UTC	165	IN	HTTP/1.1 204 No Content Date: Thu, 31 Oct 2024 15:50:05 GMT Connection: close server: za-ngx-srv Strict-Transport-Security: max-age=86400; includeSubdomains;

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:05 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:05 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 74985455-e01e-00aa-1aa3-2aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155005Z-17c5cb586f6l54tjt07kuq05pc00000000vg000000002mrm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:05 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:05 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:05 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: d7b90bc6-301e-001f-5d18-2baa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155005Z-15b8d89586fcvr6p5956n5d0rc0000000fv000000000chcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:05 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:05 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e1dd5be0-d01e-00a1-2084-2935b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155005Z-17c5cb586f6ks725u50g36qts800000001r000000000m6xq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:05 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:05 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: fa89f893-901e-00ac-46b8-2ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155005Z-159b85dff8fbbwhzhC1DFWwpe8000000028g000000000ws8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:05 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:05 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 82dd15c7-901e-0064-46c7-2ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155005Z-159b85dff8fc5h75hC1DFWntr8000000016000000000fmf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:06 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:06 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:06 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155006Z-16849878b7828dsgct3vrzta70000000083g00000000n3fk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:06 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:06 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:06 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:06 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7c52a88a-f01e-00aa-0993-2a8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155006Z-159b85dff8f7x84jhC1DFWaghs00000001n0000000003mys x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:06 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:06 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:06 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155006Z-16849878b78qg9mlz11wgn0wcc000000099g00000000h0e1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:06 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:06 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:06 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 6cea588d-401e-0015-2b7f-2a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155006Z-159b85dff8fvjwrdhC1DFWsn1000000001hg000000004msn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:06 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:06 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:06 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:06 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155006Z-16849878b78j5kdg3dndgqw0vg0000000bdg00000000hn2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:50:06 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49798	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:07 UTC	399	OUT	GET /v1/lazy/vendors-web-startup.ec7e6ea49b1c2468ba50.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:07 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:07 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:07 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:07 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:07 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:07 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:07 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:02 GMT
2024-10-31 15:50:07 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:02 GMT
2024-10-31 15:50:07 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:02 GMT
2024-10-31 15:50:07 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:07 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 32 36 61 66 63 22 0d 0a Data Ascii: ETag: W/"66f63b75-26afc"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:07 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 2909f93e-001e-0066-4539-2b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155007Z-15b8d89586ffsjj9qb0gmb1stn0000000e000000000058yz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:07 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155007Z-16849878b78fhxrnedubv5byks000000083000000000akg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:07 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:07 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155007Z-16849878b78nzcqcd7bed2fb6n000000025000000000gzwr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:07 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155007Z-15b8d89586fcvr6p5956n5d0rc0000000fv000000000che4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:07 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3efaf52f-501e-008c-0d35-29cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155007Z-15b8d89586fzhrwgk23ex2bvhw0000000cr000000000agcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:08 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2cfbf663-801e-0083-68dc-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155008Z-17c5cb586f6z6tq2xr35mhd5x0000000027000000000pzk1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49805	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:08 UTC	391	OUT	GET /v1/lazy/web-startup.b612538677d498545a0d.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:08 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:08 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:08 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:08 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:08 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:08 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:08 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:03 GMT
2024-10-31 15:50:08 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:03 GMT
2024-10-31 15:50:08 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:03 GMT
2024-10-31 15:50:08 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:08 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 66 62 64 65 62 22 0d 0a Data Ascii: ETag: W/"66f63b75-fbdeb"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:08 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:08 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155008Z-16849878b7867ttgfbpnfxt44s00000009m000000000er8u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:08 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a9b9ee84-f01e-001f-7a95-2a5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155008Z-17c5cb586f626sn8grcgm1gf80000000085000000000fw66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:10 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155010Z-16849878b78bcpfn2qf7sm6hsn0000000bag00000000gfsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:10 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:10 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:10 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 98e85290-a01e-0021-7dec-2a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155010Z-16849878b78x6gn56mgecg60qc0000000bfg00000000pg7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:10 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:10 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:10 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: ad1b4984-801e-002a-3571-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155010Z-17c5cb586f6l54tjt07kuq05pc00000000pg00000000gqk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:10 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:10 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:10 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:10 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155010Z-16849878b78fhxrnedubv5byks00000007z000000000ts92 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:10 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:11 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:11 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:11 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155011Z-16849878b78km6fmmkbenhx76n000000094g000000006nqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:50:11 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:11 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:11 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 151676fb-b01e-0084-4068-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155011Z-15b8d89586fqj7k5h9gbd8vs980000000avg00000000g18x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:11 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:11 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:11 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 0944ca5a-501e-007b-292d-275ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155011Z-17c5cb586f659tsm88uwcmn6s400000002ag000000001sqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:11 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:11 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5ef35a72-501e-007b-6836-285ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155011Z-15b8d89586fxdh48ft0acdbg4400000003e000000000f9w4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:11 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49819	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:12 UTC	559	OUT	GET /v1/lazy/lang-en.1306566d23ee77941cf4.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:12 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:12 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:12 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:12 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:12 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:12 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:12 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:12 GMT
2024-10-31 15:50:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:12 GMT
2024-10-31 15:50:12 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:12 GMT
2024-10-31 15:50:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:12 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 34 65 33 30 61 22 0d 0a Data Ascii: ETag: W/"66f63b75-4e30a"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49823	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:12 UTC	405	OUT	GET /v1/lazy/vendors-embed-web-startup.1b4f48155c308b510e2d.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:12 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:12 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:12 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:12 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:12 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:12 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:12 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 37 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:07 GMT
2024-10-31 15:50:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:07 GMT
2024-10-31 15:50:12 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:07 GMT
2024-10-31 15:50:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:12 UTC	27	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 65 30 32 35 30 38 2d 32 35 34 65 63 63 22 0d 0a Data Ascii: ETag: W/"66e02508-254ecc"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49822	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:12 UTC	405	OUT	GET /v1/lazy/default-embed-web-startup.2effbe41f8c7dec32403.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:12 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:12 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:12 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:12 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:12 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:12 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:12 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 30 37 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:07 GMT
2024-10-31 15:50:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:07 GMT
2024-10-31 15:50:12 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 30 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:07 GMT
2024-10-31 15:50:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:12 UTC	25	IN	Data Raw: 45 54 61 67 3a 20 22 36 36 66 36 33 62 37 35 2d 62 65 64 32 62 65 22 0d 0a Data Ascii: ETag: "66f63b75-bed2be"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49820	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:12 UTC	559	OUT	GET /v1/lazy/lang-vi.847c90765c3b5498f707.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:12 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:12 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:12 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:12 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:12 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:12 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:12 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:12 GMT
2024-10-31 15:50:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:12 GMT
2024-10-31 15:50:12 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:12 GMT
2024-10-31 15:50:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:12 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 35 63 37 62 61 22 0d 0a Data Ascii: ETag: W/"66f63b75-5c7ba"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:12 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:12 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155012Z-16849878b78tg5n42kspfr0x4800000009sg00000000bqhv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:12 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:12 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:12 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 57ce5cde-c01e-000b-111a-28e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155012Z-15b8d89586fmhkw429ba5n22m80000000b9g000000004b3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:12 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:12 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:12 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:12 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 78dfd7f1-001e-0034-02ca-2add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155012Z-16849878b78hh85qc40uyr8sc80000000a3000000000497n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:50:12 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:13 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: e1f5471d-e01e-0051-4f6c-2784b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155013Z-15b8d89586fnsf5zkvx8tfb0zc00000004wg000000008dyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:13 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155013Z-16849878b78tg5n42kspfr0x4800000009pg00000000snvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:50:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:13 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:13 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: e65a25e2-e01e-00aa-5b74-2aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155013Z-15b8d89586fmhkw429ba5n22m80000000bbg000000000tsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:13 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:13 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:13 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 32406b86-f01e-0099-067b-2a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155013Z-17c5cb586f6l54tjt07kuq05pc00000000qg00000000fnrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:13 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49833	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	708	OUT	GET /mainless-worker.9c0875841efb5667ea74.js HTTP/1.1 Host: chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:15 UTC	372	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:15 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: W/"66f63b75-2bca4" Expires: Sat, 02 Nov 2024 04:01:07 GMT Cache-Control: max-age=259200 Cache-Control: public Content-Encoding: gzip server: za-ngx-srv X-Cache-Status: HIT
2024-10-31 15:50:15 UTC	16012	IN	Data Raw: 38 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 dc bd 7b 77 1b c9 b6 1f f6 55 c0 be e7 48 c0 65 03 02 40 8a a2 40 41 34 49 91 1a ce 88 12 87 a4 46 67 86 e2 e1 34 81 26 d1 22 d0 8d e9 6e 88 a4 28 78 1d c7 89 1d 27 4e 1c c7 79 3b 0f 3b ce d3 71 e2 bc 9d cc e4 b1 56 e6 dc fb 4f bc 56 3e 83 ee 27 c9 6f ef 5d 55 5d dd 68 52 9a b9 73 7d ef f2 39 23 a9 50 5d cf 5d bb f6 ab 76 ed 3a 3e fe c6 5b 7f f9 fc c9 b3 cd e7 6b 3b 9b c7 c7 5d 67 e4 05 e1 d0 4f 92 fa 45 14 9f fb b1 e3 1e 1f ef 6f ec 6d ef 1e 1c 1f 7c bd cb 25 2e fc 13 f3 d1 89 4e de f8 bd d4 99 eb a6 57 63 3f 3a ad 9c 0d a3 13 6f 78 30 08 92 3b 77 aa d9 8f 6e e2 0f 4f 6b ee e9 24 ec a5 41 14 56 fd da f5 5b 2f ae a4 dd eb e9 8a ce ac 84 d5 b8 76 1d 9c 56 d3 c3 f8 a8 16 fb e9 24 0e 2b 94 6e f8 97 e3 28 4e 93 Data Ascii: 8000{wUHe@@A4IFg4&"n(x'Ny;;qVOV>'o]U]hRs}9#P]]v:>[k;]gOEom\|%.NWc?:ox0;wnOk$AV[/vV$+n(N
2024-10-31 15:50:15 UTC	16384	IN	Data Raw: 42 7b f3 cd ee 53 4b 68 94 53 ec db 83 e7 67 82 bb 22 3f c2 7b 4e 71 00 1c c5 57 2b ce 24 d4 82 e2 9c d6 46 12 7f 08 71 83 fe 76 55 b1 12 5a 61 40 22 ed 65 81 f7 65 50 c9 f1 71 f7 7a 61 f1 fe 0c 21 21 d6 45 bb 13 57 7c e5 d0 fa c1 7d bc 55 4a 27 d6 cb 88 84 86 57 2f 70 aa 07 b7 9c e5 85 05 68 17 ba 93 8a 9c 25 5f 93 c7 08 c8 6c 26 a3 f9 ab cc 7e 24 9c 72 97 de 09 82 18 a8 1e 0f 55 99 2c 18 e2 19 1d dc d1 a2 07 29 e4 2d 02 7a 87 4b 7e a7 20 85 f2 ab 8b d3 61 70 1d 61 eb 78 b1 60 2d 3e a3 87 7a c1 6f 39 f9 fe bd ae 42 39 38 e2 d6 1f 29 99 d5 84 81 6a 72 b6 0b af 82 7d 18 96 89 6a e5 33 de bf 5f 5c 68 c3 97 9e 7b 09 61 e9 78 c5 6f 23 a0 5c f6 c3 1e a8 38 77 a8 51 d3 8f f7 ef ed a2 78 95 d0 9b 20 10 b3 54 c1 eb 28 5f 4e fc 89 4f f1 5c d1 a2 fd 13 57 0f ef a1 Data Ascii: B{SKhSg"?{NqW+$FqvUZa@"eePqza!!EW\|}UJ'W/ph%_l&~$rU,)-zK~ apax`->zo9B98)jr}j3_\h{axo#\8wQx T(_NO\W
2024-10-31 15:50:15 UTC	16384	IN	Data Raw: 1d 7d e3 b6 b5 37 3b 3b 33 38 ec 61 6b 33 39 f8 61 7b 46 cc 16 cc 66 c6 60 20 da d7 c1 cc 2f 10 ee 24 95 d3 82 57 c6 9f f7 66 18 22 04 fe ca 39 57 4a ee 8e c3 ce 76 84 75 69 78 5d 06 87 8a ce 8f d8 e4 d3 fd eb f3 e3 b0 e3 a4 dd 59 e4 eb 3a 55 c3 91 a3 27 ce aa 69 21 2c 8a 2d fc 61 22 60 ca ef a8 8d 93 df d3 86 a5 ca 91 46 ce a3 46 34 e5 08 d9 46 bd 9c 46 05 52 2a 9e a3 10 e0 87 46 67 e8 09 75 1d c7 56 46 9f 5f 41 5d 9a b8 be aa a8 de bd eb 2d 10 19 31 0f 7f 93 b0 58 cb 2c 6e 63 1a d7 05 4d dc 66 e6 8d 7c 33 82 79 20 c1 1a 62 35 1b 20 3b 03 97 26 20 56 23 24 22 52 15 ce c7 5a 44 55 64 c4 11 19 69 b1 b6 e2 8d c8 81 17 5e d8 c9 40 12 9a 8a 30 cd f8 ce 9d cb 1f 41 7b 00 79 29 de 0b 18 89 d3 0b a4 06 e3 0f f7 be c1 2a f7 cb 38 8f c4 a8 0f cd c5 61 60 5b 8c 0d Data Ascii: }7;;38ak39a{Ff` /$Wf"9WJvuix]Y:U'i!,-a"`FF4FFRFguVF_A]-1X,ncMf\|3y b5 ;& V#$"RZDUdi^@0A{y)8a`[
2024-10-31 15:50:16 UTC	13314	IN	Data Raw: 0c dc ea 20 40 bb 06 08 ae 8a f1 0a 08 1a a9 a8 f4 df dc d2 aa 98 76 f0 a2 70 3a 2a 29 fb bd 9e a3 5e fd 11 75 83 12 07 a2 35 b6 7a 01 04 78 f1 80 33 2d 43 1f e2 0b 63 00 1e e9 a4 28 90 78 11 46 81 57 05 56 01 37 d2 93 e2 4f 8a 7f f3 bd 43 02 42 46 7d b1 65 0a 91 72 67 a2 9e c8 69 80 24 0c 15 8f 56 42 b4 e6 81 aa 1c e9 91 aa 0a 99 ba 87 eb 7f 84 19 c3 3e 8f 87 3d 46 f7 e8 1c 9f ad 93 35 b9 2e fa 0a 97 32 de 15 04 0e f5 8b fb bd 79 8d f7 55 56 cd 3e c4 fb 0a 45 27 14 82 21 e6 6c 98 aa 03 8a 43 57 95 76 e4 76 ac f9 00 db 87 99 66 04 3c 8a 05 ce f8 26 15 13 fc 70 0b 12 56 88 13 86 e6 e6 d5 e0 89 9a 1e ce 0a f4 14 17 cd 42 4b 24 86 75 ab 0c 33 05 1d 70 81 b3 c5 43 3a 3d 77 35 5d fc 36 c8 98 f2 66 f3 cf 75 4f 2c aa 9b c4 fb d4 a8 f3 2a 1e 79 47 9d da c7 3f 06 Data Ascii: @vp:)^u5zx3-Cc(xFWV7OCBF}ergi$VB>=F5.2yUV>E'!lCWvvf<&pVBK$u3pC:=w5]6fuO,yG?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49838	49.213.95.44	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	609	OUT	GET /images/icons/image25_1484838643007.png HTTP/1.1 Host: stc-chat.zdn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:15 UTC	276	IN	HTTP/1.1 200 OK Server: ATS-5-57 Date: Wed, 30 Oct 2024 16:00:44 GMT Content-Type: image/png Content-Length: 21769 Last-Modified: Mon, 28 May 2018 03:11:29 GMT Access-Control-Allow-Origin: * Accept-Ranges: bytes Etag: "5b0b7361-5509" Age: 85771 Connection: close
2024-10-31 15:50:15 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 54 96 49 44 41 54 78 da ec bd 09 a0 1c d5 79 26 fa 9f 53 bd f7 dd 37 6d 68 03 24 19 10 20 4c 58 6d 9e b0 03 71 c6 93 04 8c 13 6f 49 9e b1 e3 38 ce 4c 12 84 33 8b f3 ec 89 f1 3c c7 cf cf 59 2c 27 99 e7 bc c4 0b bc 89 9d bc c4 c6 78 89 6d 6c 83 c1 66 5f 05 08 90 04 92 ae b6 ab e5 2e ba fb ed db dd 55 67 fe ff 2c 55 a7 96 ee db 92 10 48 a2 0e 94 ba 6f 77 75 77 d5 f9 ff ef df cf 7f 98 10 02 d2 91 8e 74 24 0f 9e 4e 41 3a d2 91 02 24 1d e9 48 01 92 8e 74 a4 00 49 47 3a 52 80 a4 23 1d 29 Data Ascii: PNGIHDRXpHYstEXtSoftwareAdobe ImageReadyqe<TIDATxy&S7mh$ LXmqoI8L3<Y,'xmlf_.Ug,UHowuwt$NA:$HtIG:R#)
2024-10-31 15:50:15 UTC	5385	IN	Data Raw: 20 b4 92 60 ea 9a d0 64 a8 ec a6 e2 24 3f 43 1b 5a bf 52 f3 09 7b df 19 06 10 75 6f 91 f5 15 50 47 0d 32 87 42 70 e6 45 95 bf 88 2d 45 06 25 60 ea 33 a1 8a 05 3f 79 98 21 bf ee 0a 60 b9 c5 f1 0d 78 a2 e5 28 c6 37 cc 75 5b 45 89 8d aa 7c 2d 33 1c ac e7 ce a2 38 df 99 dc 15 6a 49 6f 6b 37 f2 6a 41 f2 ec bf 4e df 04 75 d5 0c 7d bd bd 93 ed 09 03 c4 d4 5c 75 53 15 64 e7 4a f8 41 f6 23 30 e9 2c 07 6f d4 01 ef 61 94 36 87 8b 09 6b 0d 4a 38 17 6d 11 ff c2 ca 49 f0 84 65 96 66 92 a9 36 27 53 88 24 fd b4 0f e2 64 82 e7 46 a5 53 23 6c ca c1 f0 7c 38 44 ec 57 e6 4d 85 3b 2b 86 d6 42 93 44 9c 0c ea 78 ac f5 2b 52 89 cc 33 53 da be e5 4c 41 87 be 97 7d f2 de 58 c2 fa 0a 0a f7 ba 13 56 be 8a 45 c2 f2 8e 6a e2 67 4c a0 d0 1a f5 12 7e 76 46 09 1e 1b 18 c6 ef 90 f4 cb 84 Data Ascii: `d$?CZR{uoPG2BpE-E%`3?y!`x(7u[E\|-38jIok7jANu}\uSdJA#0,oa6kJ8mIef6'S$dFS#l\|8DWM;+BDx+R3SLA}XVEjgL~vF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49837	49.213.95.44	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	619	OUT	GET /images/icons/effect_icon_heart_1484223878985.png HTTP/1.1 Host: stc-chat.zdn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:15 UTC	276	IN	HTTP/1.1 200 OK Server: ATS-5-57 Date: Wed, 30 Oct 2024 16:00:44 GMT Content-Type: image/png Content-Length: 12130 Last-Modified: Mon, 28 May 2018 03:11:29 GMT Access-Control-Allow-Origin: * Accept-Ranges: bytes Etag: "5b0b7361-2f62" Age: 85771 Connection: close
2024-10-31 15:50:15 UTC	12130	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 2e ef 49 44 41 54 78 da ec 9d f9 97 1c c7 71 e7 23 ab bb e7 c2 00 33 20 78 5f 00 c5 43 12 25 0a a0 2d af 57 ab 83 23 51 12 25 f9 f9 11 f6 db d3 7b 70 f4 17 18 fa 0b 3c fc 0b 0c fe 05 3b dc c3 fb f6 ed be 67 e0 87 95 25 59 96 86 3e 76 6d 49 14 07 e2 25 5e d6 50 3c c0 d5 12 e0 0c 8e b9 3b 73 33 ab ab bb b3 b2 22 33 23 b3 aa 7b 7a 06 95 7c cd 69 74 57 55 77 67 c6 27 23 be 11 59 55 4c 08 01 75 ab 5b dd f0 96 d4 5d 50 b7 ba d5 80 d4 ad 6e 35 20 75 ab 5b 0d 48 dd ea 56 03 52 b7 ba d5 80 Data Ascii: PNGIHDRXpHYstEXtSoftwareAdobe ImageReadyqe<.IDATxq#3 x_C%-W#Q%{p<;g%Y>vmI%^P<;s3"3#{z\|itWUwg'#YULu[]Pn5 u[HVR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49831	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	630	OUT	GET /v1/favicon-96x96.v1.png HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://chat.zalo.me sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:15 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:15 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:15 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:15 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:15 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:15 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:15 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 31 35 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:15 GMT
2024-10-31 15:50:15 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 35 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:15 GMT
2024-10-31 15:50:15 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 35 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:15 GMT
2024-10-31 15:50:15 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:15 UTC	23	IN	Data Raw: 45 54 61 67 3a 20 22 36 36 64 38 30 64 38 61 2d 31 38 35 37 22 0d 0a Data Ascii: ETag: "66d80d8a-1857"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49839	49.213.95.137	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	956	OUT	GET /api/login/getServerInfo?imei=ee44923a-15e4-45a5-a33f-405cab4e5851-22210ca73bf1af2ec2eace74a96ee356&type=30&client_version=645&computer_name=Web&signkey=7500a0b60093164461658cde9d2b7447 HTTP/1.1 Host: wpa.chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://chat.zalo.me Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:15 UTC	359	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:15 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding, User-Agent server: za-ngx-srv Access-Control-Allow-Origin: https://chat.zalo.me Strict-Transport-Security: max-age=31536000; includeSubdomains Access-Control-Allow-Credentials: true
2024-10-31 15:50:15 UTC	16025	IN	Data Raw: 65 65 35 0d 0a 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 22 3a 22 53 75 63 63 65 73 73 66 75 6c 2e 22 2c 22 64 61 74 61 22 3a 7b 22 73 65 72 76 65 72 5f 74 69 6d 65 22 3a 31 37 33 30 33 38 39 38 31 35 2c 22 73 65 74 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 68 65 6e 22 3a 7b 22 70 61 73 73 77 5f 72 75 6c 65 73 22 3a 5b 7b 22 72 65 67 65 78 22 3a 22 5e 28 28 3f 3d 2e 2a 5b 30 2d 39 5d 29 28 3f 3d 2e 2a 5b 61 2d 7a 41 2d 5a 5d 29 2e 7b 36 2c 33 32 7d 29 24 22 2c 22 6d 73 67 22 3a 22 4d e1 ba ad 74 20 6b 68 e1 ba a9 75 20 70 68 e1 ba a3 69 20 63 c3 b3 20 c3 ad 74 20 6e 68 e1 ba a5 74 20 36 20 6b c3 bd 20 74 e1 bb b1 2c 20 6e 68 69 e1 bb 81 75 20 6e 68 e1 ba a5 74 20 33 32 20 6b c3 bd 20 74 e1 bb b1 20 76 c3 a0 20 Data Ascii: ee5{"error_code":0,"error_message":"Successful.","data":{"server_time":1730389815,"setttings":{"authen":{"passw_rules":[{"regex":"^((?=.[0-9])(?=.[a-zA-Z]).{6,32})$","msg":"Mt khu phi c t nht 6 k t, nhiu nht 32 k t v
2024-10-31 15:50:15 UTC	16384	IN	Data Raw: 22 3a 22 68 74 74 70 73 3a 2f 2f 62 75 73 69 6e 65 73 73 2e 7a 62 6f 78 2e 76 6e 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 70 63 5f 65 6e 74 72 79 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 75 70 67 72 61 64 65 5f 70 72 6f 66 69 6c 65 22 7d 2c 22 62 61 5f 70 6b 67 5f 63 6f 6e 66 69 67 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 7b 22 30 22 3a 31 2c 22 31 22 3a 31 2c 22 32 22 3a 31 2c 22 33 22 3a 31 2c 22 34 22 3a 31 2c 22 35 22 3a 31 2c 22 36 22 3a 31 7d 2c 22 66 65 61 5f 69 64 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 6c 69 6d 69 74 5f 73 65 61 72 63 68 5f 66 72 69 65 6e 64 5f 62 79 5f 70 68 6f 6e 65 5f 6d 6f 6e 74 68 6c 79 22 3a 7b 22 30 22 3a 33 30 2c 22 31 22 3a 35 30 2c 22 32 22 3a 31 32 30 2c 22 33 22 3a 32 30 30 30 2c 22 34 22 3a Data Ascii: ":"https://business.zbox.vn/?utm_source=pc_entry&utm_medium=upgrade_profile"},"ba_pkg_config":{"profile":{"enable":{"0":1,"1":1,"2":1,"3":1,"4":1,"5":1,"6":1},"fea_id":1,"config":{"limit_search_friend_by_phone_monthly":{"0":30,"1":50,"2":120,"3":2000,"4":
2024-10-31 15:50:15 UTC	4698	IN	Data Raw: 38 33 36 39 37 33 39 5f 35 33 31 32 37 2e 6a 70 67 22 2c 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 7a 61 6c 6f 2e 7a 61 64 6e 2e 76 6e 2f 75 70 6c 6f 61 64 2f 6d 65 64 69 61 2f 32 30 31 39 2f 39 2f 32 33 2f 33 5f 31 35 36 39 32 32 38 33 36 39 37 37 35 5f 35 33 31 32 38 2e 6a 70 67 22 2c 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 7a 61 6c 6f 2e 7a 61 64 6e 2e 76 6e 2f 75 70 6c 6f 61 64 2f 6d 65 64 69 61 2f 32 30 31 39 2f 39 2f 32 33 2f 35 5f 31 35 36 39 32 32 38 33 36 39 38 37 31 5f 35 33 31 33 30 2e 6a 70 67 22 5d 2c 22 64 65 66 61 75 6c 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 76 65 72 2d 74 61 6c 6b 2e 7a 61 64 6e 2e 76 6e 2f 64 65 66 61 75 6c 74 22 7d 2c 22 65 4b 59 43 22 3a 7b 22 6d 6f 62 69 6c 65 5f 51 52 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 73 Data Ascii: 8369739_53127.jpg","https://res-zalo.zadn.vn/upload/media/2019/9/23/3_1569228369775_53128.jpg","https://res-zalo.zadn.vn/upload/media/2019/9/23/5_1569228369871_53130.jpg"],"defaultUrl":"https://cover-talk.zadn.vn/default"},"eKYC":{"mobile_QR":"https://res

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49835	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	702	OUT	GET /zd-worker.9c0875841efb5667ea74.js HTTP/1.1 Host: chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:15 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:15 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: W/"66f63b75-7862c7" Expires: Sat, 02 Nov 2024 04:01:07 GMT Cache-Control: max-age=259200 Cache-Control: public Content-Encoding: gzip server: za-ngx-srv X-Cache-Status: HIT
2024-10-31 15:50:15 UTC	16011	IN	Data Raw: 38 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 c4 bd 8b 7a da c8 b7 e8 f9 2a 69 a6 27 63 ef 28 0e be 24 71 9c 3f dd 9f 24 04 c8 e6 62 6e 76 ec 3e 3d 1c 0c 58 10 5f 70 00 c7 76 ba fd 2e e7 21 e6 0d f6 8b cd 6f ad 92 40 60 89 f4 7f be 39 7b e7 eb 36 ba ac 55 97 55 eb 5e 55 aa 4e e7 bc eb b4 ab f9 b2 57 b5 2b 5e a7 93 cb fc e8 bf 7d 18 4f ae 06 93 8c d5 e9 34 dd 86 7f dc ea b4 ce 8e f5 dd c3 e0 62 fe 32 33 be f8 3a e8 cd 32 bf e4 66 4f 77 83 f1 e5 ab e0 7a 7c d1 bd 6e 0d 47 d3 d7 af 37 16 37 b9 e9 e0 fa 72 d3 ba bc bf ed cd 46 e3 db 0d 7b f3 af ef dd c9 2b 3f f7 d7 f3 e7 e8 e1 ab 60 c3 dd fc 6b 74 b9 e1 ff e1 fe b9 39 19 cc ee 27 b7 af e4 7a 6b f0 78 37 9e cc a6 9f 05 c5 c9 c9 a3 dc 5f a3 03 d7 ba 3e f8 65 db 0a 5f 1e fc f5 fc fc 39 44 b2 05 a9 d7 bd be de Data Ascii: 8000z*i'c($q?$bnv>=X_pv.!o@`9{6UU^UNW+^}O4b23:2fOwz\|nG77rF{+?`kt9'zkx7_>e_9D
2024-10-31 15:50:15 UTC	16384	IN	Data Raw: 61 12 88 94 80 44 db ee 98 13 c0 8d bd c9 a8 7d ce 6c 86 b6 db 5e d4 0f 9a d2 eb 66 fc 7d 50 0e 11 97 48 33 19 ac bc 9a 93 49 48 bb fc 6e 41 96 d5 37 73 12 41 b2 d5 77 a6 6d d6 83 49 2e ad 94 28 86 3b 23 ef 12 f0 64 10 c6 49 6f c2 da 78 27 e9 aa e5 12 e7 ef 22 bb 19 8e e8 bc 22 c3 0d 8b 46 c5 46 5c 2b 8b 8d b8 56 b0 7a 3f 40 32 37 32 c2 ec 19 99 bb b3 c5 26 6f df 11 82 be 30 1e 2b 36 79 22 61 70 b0 d5 67 ce 2f 53 69 16 3b 9c 45 5b 4d b5 bf 71 c0 3c 0b c3 4e bc 86 97 4f 84 26 3b b7 54 2c c6 d9 2e 27 42 7a 2b 90 6c 6a 68 25 02 e6 57 00 f9 e4 3d 9f dc aa 16 3b de 17 bf 99 8c 32 5a 41 29 d4 1a a7 76 23 0f 52 62 0d 0f ab e0 ec a7 a7 f4 63 3f ad 97 e3 15 84 f6 71 b9 66 e7 3b e9 9d 2d ae 20 34 bc 56 e3 ac 53 2b e7 3b 06 35 b1 59 c3 15 a4 53 db 6f 75 f2 5e b5 e6 Data Ascii: aD}l^f}PH3IHnA7sAwmI.(;#dIox'""FF\+Vz?@272&o0+6y"apg/Si;E[Mq<NO&;T,.'Bz+ljh%W=;2ZA)v#Rbc?qf;- 4VS+;5YSou^
2024-10-31 15:50:15 UTC	16384	IN	Data Raw: 87 8b 15 c2 c1 d5 0b 8f 0e 2e 1c 1d e5 1e 19 5d 21 1c 1e e5 1e 19 5e 21 1c 9f b4 f7 f0 f8 4a 6e 7c 85 72 e5 b1 f1 95 dc f8 a4 dc 23 e3 2b b9 f1 49 b9 47 c6 57 72 e3 d3 f6 18 df fd ff 4b df 67 0a 1e 12 64 fa 69 48 64 b2 f0 cf 4a c7 c7 0d 49 76 98 92 98 a5 5a f2 3d 9f a6 9e b4 d2 d7 67 57 cb bb 84 84 ac d0 a7 d6 52 fd 6f df 92 ad 15 d7 3a 21 e6 89 e9 10 4c 9f 24 d3 f7 11 6a cd 32 b3 6c f0 07 0a bb a6 6b 50 9a cb cc b4 c1 d6 93 66 7f a3 c9 d9 96 26 1b 89 e4 4e 6b 27 99 78 d2 e4 47 3f 2d f8 5c ac df dc ac 8f 39 ea 36 ea 2c 4d 38 58 bc 5a 17 c9 a5 3a ee 26 9b cd 6b 36 eb 72 9a 68 bd 10 c7 dc 27 cd 26 ec 86 2b ee e5 6a 1f ed a3 55 bc 0f 19 b8 58 22 24 70 60 c7 5b 36 b9 17 3d b8 d6 cf 74 32 ed f4 d7 db e1 55 e2 b0 39 4b 25 cf 2f 72 47 bc 3a e4 9a 4e f4 64 cf 49 Data Ascii: .]!^!Jn\|r#+IGWrKgdiHdJIvZ=gWRo:!L$j2lkPf&Nk'xG?-\96,M8XZ:&k6rh'&+jUX"$p`[6=t2U9K%/rG:NdI
2024-10-31 15:50:16 UTC	16384	IN	Data Raw: 6e 97 f7 3c 7b e2 dd f1 a1 a2 10 cd aa d0 0e 58 f8 21 84 72 98 ab 14 80 50 50 e3 c6 ca 66 83 6a 4f c7 70 81 ac 4e 81 be e0 cf 0a b5 7c 79 94 af 4c b1 25 af cb c3 d3 78 6a 0d 39 80 ab 85 ca b0 38 c6 2f a8 3c 19 96 a6 54 ca 05 32 bc 61 0d 72 5a 85 54 d7 86 9c d7 5c 90 f5 f8 9a b0 17 a6 a3 7c 6e 52 e2 2d ee 4c 07 64 46 9a 37 3c 3a ff 01 69 9e c8 f1 6c 58 59 95 b4 5a cd 0d 11 c4 bc 38 06 c8 56 23 b3 18 67 25 96 a9 45 92 ad fe cf 09 63 9a 86 40 4c c5 68 f3 5b cf b0 a7 16 99 b3 19 b7 3b 5b c4 9a b3 89 b9 99 31 55 9b df 8a 23 9e 98 70 a0 d3 37 21 3a ae e7 b1 47 4b 19 47 28 33 eb 23 da fa 1a 8f 9e 6c 85 a2 e8 cc fa 6a 2c 7a 6f c2 30 87 ba 83 59 d3 b7 82 41 0a 6b 8d 21 dd 48 c4 26 52 b5 58 c8 34 31 77 41 bd 89 32 fc 7a 29 62 2d 89 26 7b c8 7f 5c e0 52 67 c7 1c c9 Data Ascii: n<{X!rPPfjOpN\|yL%xj98/<T2arZT\\|nR-LdF7<:ilXYZ8V#g%Ec@Lh[;[1U#p7!:GKG(3#lj,zo0YAk!H&RX41wA2z)b-&{\Rg
2024-10-31 15:50:16 UTC	16384	IN	Data Raw: d9 6e a0 fb c6 54 5f 7d 94 ae 0c 8b a8 61 07 32 1f 95 ed 63 0f 87 fb 13 dc 2b 1a ef f7 9b 18 fb 54 dc dd f4 07 70 e0 18 5b 8f f9 dd ac 88 45 ec 94 e0 ed c0 05 75 eb 78 18 03 97 ef d8 17 5a 0f 82 e0 bd 43 e1 81 6c 19 da 45 27 4a 3a 0f cc dd e6 e6 1e 23 d3 19 90 83 03 c3 69 c2 b9 1a 37 32 0f f8 b0 06 3d c3 87 40 f8 23 59 17 3b 60 b9 8f 8d 87 4e d0 cd f1 4c 7a c6 71 a9 5a 16 de 69 6c 1e 87 84 a3 d5 9b 59 3d c6 7e 01 4e f6 a2 f0 f8 91 72 15 c4 bd f5 d3 b9 11 fd bb b5 89 64 e4 a6 cd 01 3a 10 0e ea b9 e1 b4 70 d6 97 67 5e b2 d3 5d 4b f4 66 3a 5a 92 08 e7 d2 10 b9 8f 3c 60 7c 13 f0 09 0d 2f 74 75 af d7 24 5a 07 94 ae 72 0b 3d 22 f9 84 0e 11 6e 11 93 4b bb 2b c1 c1 86 f9 24 68 07 7c ab 06 9d 12 3a 02 38 75 b3 8b a0 15 3d 82 47 38 8d 18 07 b8 3a 90 cf 82 79 47 66 Data Ascii: nT_}a2c+Tp[EuxZClE'J:#i72=@#Y;`NLzqZilY=~Nrd:pg^]Kf:Z<`\|/tu$Zr="nK+$h\|:8u=G8:yGf
2024-10-31 15:50:16 UTC	16384	IN	Data Raw: f9 fd c0 b6 02 34 09 64 ab ed a3 6d d1 e8 c7 a9 fb 66 6f 74 6e 7e 34 bd c5 5c bf 46 9f a7 f9 7d ff 5e 35 00 a8 85 50 7c a0 1f 17 3a a8 7a d8 3c f3 b7 79 af fa 0a 2b 36 53 bd 13 4a 10 9e ab a8 a7 c9 7b a5 5b 3d c3 93 cb 84 bf 21 93 88 9d c8 a7 c8 90 ee f8 86 b3 85 8e a0 d8 3a e5 0a 1e cf e2 79 c2 d9 48 1e 60 1c 8e f1 e0 5e ae 96 5e 89 ae 17 b1 b5 c2 f3 90 25 bb 2a 24 c9 7c e4 2b 26 a9 86 31 a2 47 4b 37 13 de 49 ff d6 09 73 63 72 3a 57 f8 74 77 e1 99 f6 57 a4 fe dd c4 38 a5 58 29 ae 1e 4b 7b 6a f2 ed dc b3 17 1d 8d 18 28 cf 0f 1c 44 b1 37 f5 47 ea 36 93 d3 de 8c 41 b2 86 b7 f3 6c fc 7a 3c 83 f3 47 40 81 31 4a c6 fa 88 ce 17 98 49 b6 87 2b 91 d8 82 0d f1 f6 e2 61 f4 78 81 1b 6c 7b 78 5e 2d 6a cf 72 36 85 a5 e9 79 8d 9d 80 bb bb a3 3c 05 f7 5e 79 52 8e 09 0f Data Ascii: 4dmfotn~4\F}^5P\|:z<y+6SJ{[=!:yH`^^%*$\|+&1GK7Iscr:WtwW8X)K{j(D7G6Alz<G@1JI+axl{x^-jr6y<^yR
2024-10-31 15:50:16 UTC	16384	IN	Data Raw: e2 e7 ae c0 07 d4 63 82 7d a6 ae 82 6d 78 aa f3 8d 7a 3a 33 0d 0e ef 5c 89 a4 67 88 27 04 d6 54 2b 96 ca f5 7b d0 4b f5 fc 39 f9 fe 11 6b c0 19 81 27 38 66 c4 fd 4a d0 b5 47 0f 23 78 6e b2 13 ec 5f c7 c7 28 3b 84 88 18 7c a4 e2 b3 c2 39 12 ae 86 0f 2e f0 bb ab e4 db 95 5f 06 5e 28 dd 39 e2 40 d5 27 9b b5 96 3c 07 d3 23 5f b8 9a 52 13 df fb d1 a6 66 87 70 fa 6d f8 a4 f2 29 f5 ec a7 45 3e 99 cf 9b 73 bf e0 8d 81 c7 71 ee c5 7f 8c e7 c8 e6 01 8f 5b e4 8f 71 ff 99 e3 1d c0 0d 3f e1 47 c2 7e 97 6f 27 fa 8c c1 89 8b 8e fc cd 37 1d 1c 18 44 4c cc 15 73 71 5b a8 1f 1d d5 55 c1 7f e0 e1 2b d7 32 fe 5d d7 b0 a9 f5 ae 46 a6 a0 a9 51 f5 8d 71 d5 6d c5 17 d9 47 4d 3c 3c 52 ca 3e 8d e4 87 58 e4 b1 51 cb c2 63 20 c7 3a f6 5f f9 0d 65 57 f9 de c8 20 ee 21 77 ee 1b 35 e7 Data Ascii: c}mxz:3\g'T+{K9k'8fJG#xn_(;\|9._^(9@'<#_Rfpm)E>sq[q?G~o'7DLsq[U+2]FQqmGM<<R>XQc :_eW !w5
2024-10-31 15:50:16 UTC	16384	IN	Data Raw: d9 e6 46 76 4a d0 f9 61 9c 61 ec 86 8f d9 e1 93 33 3c ad 0e 99 0b fa 08 bf 79 0f 0e d9 03 d6 c3 7b e0 f3 f0 17 d7 ae a1 b7 93 d8 af f7 cd 7e 21 67 b5 5f f2 7b 72 4e 89 f5 e1 f7 1d 0a 0c 66 a7 a6 23 ce 73 d4 23 38 8e b5 e1 4a 64 fe 13 1a 69 d7 06 5a f5 da 1c 83 99 44 b7 ac 4d e8 81 89 77 09 47 28 46 c3 b4 59 1e b6 b4 a8 7d 86 16 c1 57 e6 43 f9 f3 75 34 e6 43 da 73 2e 38 0b aa 0b 12 eb 98 a3 6b 09 67 cc c5 33 b5 96 ee df fd d3 f3 da 9d fa bc ee f1 5e f1 20 ee c9 97 f9 24 df 9b 4f 76 9f f0 49 78 a9 de ab 7b c0 81 d4 99 24 2c 32 74 ad ae 6a 4c e6 37 27 c5 e5 da 61 47 fc 12 7e b7 4a 2e 1e 7a d6 3a 31 3f f6 31 d1 66 64 8e fe af 5c 04 d1 a5 6c ff 15 e7 36 78 9d cf 98 b0 44 c4 39 3d e5 75 41 ab c6 51 71 5f 79 d8 ea d4 81 a3 42 0f 31 5f 23 6f 0e 5e 9f f2 30 0f f1 Data Ascii: FvJaa3<y{~!g_{rNf#s#8JdiZDMwG(FY}WCu4Cs.8kg3^ $OvIx{$,2tjL7'aG~J.z:1?1fd\l6xD9=uAQq_yB1_#o^0
2024-10-31 15:50:16 UTC	16384	IN	Data Raw: 45 e8 26 f4 32 8c 64 da 06 fc 35 7f a7 b8 ba ce 2f f2 7f 75 3f e3 fa f9 fd 9f 55 0b 9b 6b 58 f7 4f 5a f7 1b ed 47 7c be d1 e7 ed c5 67 ef d7 76 fd aa f9 fd ab 7e af ea b5 f8 bc aa 7d 7b c3 e7 d7 cd e7 3a 3e a7 eb 49 e1 d2 e7 ed c5 f5 f5 88 cf 83 ac fd 7d 1a 9f db fb 67 fa bc 93 b5 cf af 27 ba be 79 3f ef 8b cf 8b eb f5 79 67 e9 f9 0f 7c de 5c 7a 7e 7c 5e 5c af cf bb 8b e7 13 1a c1 f5 8b e7 5f c5 e7 f6 fa 8f fa bc bb 78 fe 44 e3 db 5a 3c ff 2a 3e 2f ae d7 e7 bd a5 e7 6b 7c 5b 4b cf 8f cf 8b eb f5 79 6f e9 f9 1a df f6 d2 f3 e3 f3 e2 7a 7d ae b2 75 f1 d5 39 ba 2a 67 d5 7c 70 63 08 da 91 ef c5 b2 9a b8 b1 49 e7 41 68 59 f2 4f b1 b1 f0 03 c7 84 c2 5f 65 1b 5c d2 d1 27 d2 49 e8 91 7a 91 6c a9 33 d9 dd e1 0f 3b af 82 07 df 3c e8 5c c2 d7 8d 53 4e af b0 6d 72 66 Data Ascii: E&2d5/u?UkXOZG\|gv~}{:>I}g'y?yg\|\z~\|^\_xDZ<>/k\|[Kyoz}u9g\|pcIAhYO_e\'Izl3;<\SNmrf
2024-10-31 15:50:16 UTC	16384	IN	Data Raw: 35 d9 fb 56 c3 e6 e5 30 60 2e 81 47 34 47 fb 92 1f df f3 08 e9 1b 9c c1 e8 ff de 21 5e b2 c8 ac 26 a2 ec d1 b1 64 dd 65 ba c9 3c bf e8 00 27 85 64 9b e9 aa d7 28 54 79 8b 98 bb f2 2c 95 9e eb 5c d2 09 b1 87 a5 4e e4 76 be 39 1f 8e 02 1f ee 06 dc 45 1a 2e e1 2e 7c 4e 72 60 fb 64 af 55 14 d8 12 74 f6 fd 89 5f c4 bf 93 4d 51 90 11 d0 60 90 2b 25 2d cc e5 4a 1c e4 cf 5c ae 94 ef b0 af 9f e8 2c cc f5 17 74 16 e6 1a 7d c0 c7 bf d2 99 cb c0 5f d0 99 ce f9 92 81 9d b9 ac f8 cc 0f e3 f8 8a de 1e 2e 7b b1 cb 7c 96 bd e5 5c 7f b5 be 4f b4 4e 72 c6 2f e4 b0 68 bd 84 c3 9c 37 96 63 2f 78 63 09 bb 39 6f e4 9d 81 eb c6 ff 33 fb d2 ac 46 9c 13 c0 67 c9 8b ff fe b5 9d e6 b1 f4 8b 2f 78 20 7e 1b a1 3b 7c 8f b3 3a af 97 70 2a e5 da 1c b6 9c 59 5c ee 94 b0 85 f6 17 78 c9 29 Data Ascii: 5V0`.G4G!^&de<'d(Ty,\Nv9E..\|Nr`dUt_MQ`+%-J\,t}_.{\|\ONr/h7c/xc9o3Fg/x ~;\|:p*Y\x)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49836	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	703	OUT	GET /soc-worker.9c0875841efb5667ea74.js HTTP/1.1 Host: chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:15 UTC	371	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:15 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: W/"66f63b75-a5c5" Expires: Sat, 02 Nov 2024 04:01:07 GMT Cache-Control: max-age=259200 Cache-Control: public Content-Encoding: gzip server: za-ngx-srv X-Cache-Status: HIT
2024-10-31 15:50:15 UTC	14468	IN	Data Raw: 33 38 37 37 0d 0a 1f 8b 08 00 00 00 00 00 04 03 cd 7d 7b 57 db 48 12 ef ff f7 53 08 ed 1c 22 2f c2 c1 e4 39 f2 68 bc 84 90 99 6c 48 c8 10 e6 e9 e1 32 c2 6e 83 12 5b f2 48 32 84 80 bf fb fd 55 f5 53 b6 4c c8 66 cf 3d bb 67 27 c8 ad 7e 77 bd bb aa 74 72 f2 47 f2 ec e7 37 cf f7 f7 de ec bc de 3b 39 89 fd 32 1f 6c 5e e6 c5 07 51 f8 e1 c9 c9 bb dd c3 97 6f 8f 4e 8e 7e 7f cb 2f 2f c5 a9 79 e9 e7 a7 ef c5 a0 f2 d7 e2 ea 6a 2a f2 91 77 36 ce 4f 93 f1 d1 79 5a ae af 07 f6 47 5c 8a f1 a8 15 8e 66 d9 a0 4a f3 2c a8 5a d7 17 49 e1 89 f8 7a de d5 85 5e 11 64 ad eb 74 14 88 7e 76 dc 2a 44 35 2b 32 8f 9e db e2 e3 34 2f aa b2 4b 4d f2 98 8a e2 eb 34 ca c2 71 b4 d6 09 d5 cb e8 7a 3e ef aa 46 15 35 1a 24 e3 71 90 eb b6 61 1e da e7 a2 85 1f e3 78 6d cb 96 cd 8b f6 24 ae c2 Data Ascii: 3877}{WHS"/9hlH2n[H2USLf=g'~wtrG7;92l^QoN~//yjw6OyZG\fJ,ZIz^dt~vD5+24/KM4qz>F5$qaxm$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49834	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	777	OUT	GET /assets/logo-new.146dfa01c78183631d33b77999a18288.svg HTTP/1.1 Host: chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:15 UTC	351	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:15 GMT Content-Type: image/svg+xml Content-Length: 2612 Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: "66f63b75-a34" Expires: Sun, 03 Nov 2024 07:36:08 GMT Cache-Control: max-age=259200 Cache-Control: public server: za-ngx-srv X-Cache-Status: HIT Accept-Ranges: bytes
2024-10-31 15:50:15 UTC	2612	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 34 70 78 22 20 68 65 69 67 68 74 3d 22 33 39 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 34 20 33 39 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 34 39 2e 32 20 28 35 31 31 36 30 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="104px" height="39px" viewBox="0 0 104 39" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 49.2 (51160) - http://www.bohemiancoding.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49832	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	704	OUT	GET /opfs-worker.9c0875841efb5667ea74.js HTTP/1.1 Host: chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:15 UTC	371	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:15 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: W/"66f63b75-b541" Expires: Sat, 02 Nov 2024 04:01:07 GMT Cache-Control: max-age=259200 Cache-Control: public Content-Encoding: gzip server: za-ngx-srv X-Cache-Status: HIT
2024-10-31 15:50:15 UTC	15661	IN	Data Raw: 33 64 32 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 cd 7d 7b 5b db 48 d2 ef ff e7 53 18 ed 3c c4 5e 84 83 c9 75 e4 51 bc 84 90 4c 76 48 c8 00 93 b9 30 1c 46 d8 32 28 31 92 47 92 21 0e f8 bb bf bf aa ea 9b 6c 99 90 cd 9e e7 bc f3 4c b0 d4 ea 6b 75 55 75 75 75 55 f5 c9 c9 1f d1 f3 5f de be d8 dd 79 bb f5 66 e7 e4 24 f4 b2 f1 b0 58 bf ca f2 8f 71 ee f9 27 27 07 db fb af df 1d 9e 1c fe fe 8e bf 5e c5 a7 e6 a3 97 9d 7e 88 fb a5 b7 12 96 d3 71 9c 0d 1b 67 a3 ec 34 1a 1d 9e 27 c5 ea 6a d3 be 84 45 3c 1a b6 fc e1 24 ed 97 49 96 36 e3 d6 f5 65 94 37 ca f0 7a d6 d5 89 8d bc 99 b6 ae 93 61 b3 3c 4a 8f 5b 79 5c 4e f2 b4 41 cf ed f8 d3 38 cb cb a2 4b 45 b2 90 92 c2 eb 24 48 fd 51 b0 d2 f1 d5 c7 e0 7a 36 eb aa 42 31 15 ea 47 a3 51 33 d3 65 fd cc b7 cf 79 0b 2f a3 70 65 c3 Data Ascii: 3d20}{[HS<^uQLvH0F2(1G!lLkuUuuuU_yf$Xq''^~qg4'jE<$I6e7za<J[y\NA8KE$HQz6B1GQ3ey/pe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:15 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155015Z-16849878b786fl7gm2qg4r5y700000000a3g000000001prk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:15 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: aa29b2ee-201e-0003-672e-2bf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155015Z-15b8d89586fqj7k5h9gbd8vs980000000ax000000000b14u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:15 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155015Z-15b8d89586f8nxpt6ys645x5v00000000b0g000000009wd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:16 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:15 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: deb87e8e-601e-0001-3532-2afaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155016Z-159b85dff8f5bl2qhC1DFWs6cn00000001s0000000005xw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:16 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:16 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: d871491f-101e-0046-2593-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155016Z-159b85dff8fdjprfhC1DFWuqh000000000f0000000007zs4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49846	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:16 UTC	387	OUT	GET /v1/lazy/lang-en.1306566d23ee77941cf4.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:16 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:16 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:16 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:16 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:16 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:16 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:16 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:11 GMT
2024-10-31 15:50:16 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:11 GMT
2024-10-31 15:50:16 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:11 GMT
2024-10-31 15:50:16 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:16 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 34 65 33 30 61 22 0d 0a Data Ascii: ETag: W/"66f63b75-4e30a"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49845	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:16 UTC	387	OUT	GET /v1/lazy/lang-vi.847c90765c3b5498f707.js HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:16 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:16 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:16 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:16 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:16 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:16 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:16 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:11 GMT
2024-10-31 15:50:16 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:11 GMT
2024-10-31 15:50:16 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:11 GMT
2024-10-31 15:50:16 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:16 UTC	26	IN	Data Raw: 45 54 61 67 3a 20 57 2f 22 36 36 66 36 33 62 37 35 2d 35 63 37 62 61 22 0d 0a Data Ascii: ETag: W/"66f63b75-5c7ba"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49848	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:16 UTC	544	OUT	GET /assets/logo-new.146dfa01c78183631d33b77999a18288.svg HTTP/1.1 Host: chat.zalo.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:17 UTC	351	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:16 GMT Content-Type: image/svg+xml Content-Length: 2612 Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: "66f63b75-a34" Expires: Sun, 03 Nov 2024 07:36:08 GMT Cache-Control: max-age=259200 Cache-Control: public server: za-ngx-srv X-Cache-Status: HIT Accept-Ranges: bytes
2024-10-31 15:50:17 UTC	2612	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 34 70 78 22 20 68 65 69 67 68 74 3d 22 33 39 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 34 20 33 39 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 34 39 2e 32 20 28 35 31 31 36 30 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="104px" height="39px" viewBox="0 0 104 39" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 49.2 (51160) - http://www.bohemiancoding.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49849	103.9.196.55	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:16 UTC	371	OUT	GET /v1/favicon-96x96.v1.png HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:17 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:17 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:17 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:17 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:17 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:17 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:17 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:11 GMT
2024-10-31 15:50:17 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:11 GMT
2024-10-31 15:50:17 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:11 GMT
2024-10-31 15:50:17 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:17 UTC	23	IN	Data Raw: 45 54 61 67 3a 20 22 36 36 33 39 64 38 33 64 2d 31 38 35 37 22 0d 0a Data Ascii: ETag: "6639d83d-1857"

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:16 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:16 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155016Z-16849878b787bfsh7zgp804my400000008d000000000wrng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:16 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:16 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:16 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c3c63728-001e-0082-75c8-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155016Z-17c5cb586f62bgw58esgbu9hgw00000002bg00000000h5av x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:50:16 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49850	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:16 UTC	526	OUT	GET /soc-worker.9c0875841efb5667ea74.js HTTP/1.1 Host: chat.zalo.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:17 UTC	371	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:17 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: W/"66f63b75-a5c5" Expires: Sat, 02 Nov 2024 04:01:07 GMT Cache-Control: max-age=259200 Cache-Control: public Content-Encoding: gzip server: za-ngx-srv X-Cache-Status: HIT
2024-10-31 15:50:17 UTC	14468	IN	Data Raw: 33 38 37 37 0d 0a 1f 8b 08 00 00 00 00 00 04 03 cd 7d 7b 57 db 48 12 ef ff f7 53 08 ed 1c 22 2f c2 c1 e4 39 f2 68 bc 84 90 99 6c 48 c8 10 e6 e9 e1 32 c2 6e 83 12 5b f2 48 32 84 80 bf fb fd 55 f5 53 b6 4c c8 66 cf 3d bb 67 27 c8 ad 7e 77 bd bb aa 74 72 f2 47 f2 ec e7 37 cf f7 f7 de ec bc de 3b 39 89 fd 32 1f 6c 5e e6 c5 07 51 f8 e1 c9 c9 bb dd c3 97 6f 8f 4e 8e 7e 7f cb 2f 2f c5 a9 79 e9 e7 a7 ef c5 a0 f2 d7 e2 ea 6a 2a f2 91 77 36 ce 4f 93 f1 d1 79 5a ae af 07 f6 47 5c 8a f1 a8 15 8e 66 d9 a0 4a f3 2c a8 5a d7 17 49 e1 89 f8 7a de d5 85 5e 11 64 ad eb 74 14 88 7e 76 dc 2a 44 35 2b 32 8f 9e db e2 e3 34 2f aa b2 4b 4d f2 98 8a e2 eb 34 ca c2 71 b4 d6 09 d5 cb e8 7a 3e ef aa 46 15 35 1a 24 e3 71 90 eb b6 61 1e da e7 a2 85 1f e3 78 6d cb 96 cd 8b f6 24 ae c2 Data Ascii: 3877}{WHS"/9hlH2n[H2USLf=g'~wtrG7;92l^QoN~//yjw6OyZG\fJ,ZIz^dt~vD5+24/KM4qz>F5$qaxm$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49852	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:16 UTC	527	OUT	GET /opfs-worker.9c0875841efb5667ea74.js HTTP/1.1 Host: chat.zalo.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:17 UTC	371	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:17 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: W/"66f63b75-b541" Expires: Sat, 02 Nov 2024 04:01:07 GMT Cache-Control: max-age=259200 Cache-Control: public Content-Encoding: gzip server: za-ngx-srv X-Cache-Status: HIT
2024-10-31 15:50:17 UTC	15661	IN	Data Raw: 33 64 32 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 cd 7d 7b 5b db 48 d2 ef ff e7 53 18 ed 3c c4 5e 84 83 c9 75 e4 51 bc 84 90 4c 76 48 c8 00 93 b9 30 1c 46 d8 32 28 31 92 47 92 21 0e f8 bb bf bf aa ea 9b 6c 99 90 cd 9e e7 bc f3 4c b0 d4 ea 6b 75 55 75 75 75 55 f5 c9 c9 1f d1 f3 5f de be d8 dd 79 bb f5 66 e7 e4 24 f4 b2 f1 b0 58 bf ca f2 8f 71 ee f9 27 27 07 db fb af df 1d 9e 1c fe fe 8e bf 5e c5 a7 e6 a3 97 9d 7e 88 fb a5 b7 12 96 d3 71 9c 0d 1b 67 a3 ec 34 1a 1d 9e 27 c5 ea 6a d3 be 84 45 3c 1a b6 fc e1 24 ed 97 49 96 36 e3 d6 f5 65 94 37 ca f0 7a d6 d5 89 8d bc 99 b6 ae 93 61 b3 3c 4a 8f 5b 79 5c 4e f2 b4 41 cf ed f8 d3 38 cb cb a2 4b 45 b2 90 92 c2 eb 24 48 fd 51 b0 d2 f1 d5 c7 e0 7a 36 eb aa 42 31 15 ea 47 a3 51 33 d3 65 fd cc b7 cf 79 0b 2f a3 70 65 c3 Data Ascii: 3d20}{[HS<^uQLvH0F2(1G!lLkuUuuuU_yf$Xq''^~qg4'jE<$I6e7za<J[y\NA8KE$HQz6B1GQ3ey/pe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49851	49.213.95.43	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:16 UTC	387	OUT	GET /images/icons/effect_icon_heart_1484223878985.png HTTP/1.1 Host: stc-chat.zdn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:17 UTC	276	IN	HTTP/1.1 200 OK Server: ATS-5-56 Date: Thu, 31 Oct 2024 04:10:06 GMT Content-Type: image/png Content-Length: 12130 Last-Modified: Mon, 28 May 2018 03:11:29 GMT Access-Control-Allow-Origin: * Accept-Ranges: bytes Etag: "5b0b7361-2f62" Age: 42011 Connection: close
2024-10-31 15:50:17 UTC	12130	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 2e ef 49 44 41 54 78 da ec 9d f9 97 1c c7 71 e7 23 ab bb e7 c2 00 33 20 78 5f 00 c5 43 12 25 0a a0 2d af 57 ab 83 23 51 12 25 f9 f9 11 f6 db d3 7b 70 f4 17 18 fa 0b 3c fc 0b 0c fe 05 3b dc c3 fb f6 ed be 67 e0 87 95 25 59 96 86 3e 76 6d 49 14 07 e2 25 5e d6 50 3c c0 d5 12 e0 0c 8e b9 3b 73 33 ab ab bb b3 b2 22 33 23 b3 aa 7b 7a 06 95 7c cd 69 74 57 55 77 67 c6 27 23 be 11 59 55 4c 08 01 75 ab 5b dd f0 96 d4 5d 50 b7 ba d5 80 d4 ad 6e 35 20 75 ab 5b 0d 48 dd ea 56 03 52 b7 ba d5 80 Data Ascii: PNGIHDRXpHYstEXtSoftwareAdobe ImageReadyqe<.IDATxq#3 x_C%-W#Q%{p<;g%Y>vmI%^P<;s3"3#{z\|itWUwg'#YULu[]Pn5 u[HVR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49854	49.213.95.137	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:17 UTC	1309	OUT	GET /api/login/getLoginInfo?zcid=19EC3E28DEB896275962AF9F476E6EED642AEAF3201A021F33CFEF4F2EA4AEDBE3622BEA51B145F206B4A11F96E2BD4459079B3745DB87607B751070B1C4C675DAA1035726B681B1948BDF8FD6FCCCBB568803B55CDDC09F9AF1FFE8327440D2&zcid_ext=d90a6922f92&enc_ver=v2&params=u0O4S2Y8lww1RX366Bq4du8zueos4yu5tEvzWPD0xfG%2F6OA0ZMXT6m%2Famn8388KiJnsHOCQ9HQTWfnVsCekrTvOqieQvgJyDIoim03q2ElmM6p85aQMfjBPfW%2BkIGyDpwBpTNxbfmYXQq%2BuRourruXEYApV1rccobYJnRRbWxyTFHxBpjKZN9qURHQM4IXsD&type=30&client_version=645&signkey=a18d010290869c65f9c552b2787c7e13&nretry=0 HTTP/1.1 Host: wpa.chat.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://chat.zalo.me Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:17 UTC	325	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:17 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close server: za-ngx-srv Access-Control-Allow-Origin: https://chat.zalo.me Strict-Transport-Security: max-age=31536000; includeSubdomains Access-Control-Allow-Credentials: true
2024-10-31 15:50:17 UTC	304	IN	Data Raw: 31 32 34 0d 0a 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 22 3a 22 53 75 63 63 65 73 73 66 75 6c 2e 22 2c 22 64 61 74 61 22 3a 22 66 47 4c 45 71 59 41 53 48 41 66 62 53 31 31 58 6f 7a 54 6a 52 6a 71 52 6e 38 6a 6e 35 78 7a 51 43 4c 62 4d 50 47 6a 53 74 4e 46 6a 47 69 7a 66 57 4e 4a 75 4a 6a 76 46 50 73 53 57 4e 4c 74 2f 75 57 58 49 6c 43 31 42 34 51 6f 55 32 6e 4a 59 51 38 6d 6e 6c 57 63 47 51 71 38 52 49 56 50 62 76 32 56 7a 4b 4f 64 62 78 45 45 78 66 7a 5a 6b 34 4b 2b 62 53 67 78 75 58 73 67 4f 44 34 37 61 37 70 61 62 5a 39 68 50 2f 55 47 4a 6a 69 74 6d 45 41 6d 56 4a 33 70 62 72 4a 41 30 36 34 65 2b 5a 4c 65 74 4e 59 53 6e 44 67 42 59 30 50 47 67 37 6c 75 6b 56 54 6e 6c 62 79 69 31 32 35 61 49 6b 52 38 57 Data Ascii: 124{"error_code":0,"error_message":"Successful.","data":"fGLEqYASHAfbS11XozTjRjqRn8jn5xzQCLbMPGjStNFjGizfWNJuJjvFPsSWNLt/uWXIlC1B4QoU2nJYQ8mnlWcGQq8RIVPbv2VzKOdbxEExfzZk4K+bSgxuXsgOD47a7pabZ9hP/UGJjitmEAmVJ3pbrJA064e+ZLetNYSnDgBY0PGg7lukVTnlbyi125aIkR8W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49859	49.213.95.187	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:17 UTC	680	OUT	GET /api/login/getServerInfo?imei=ee44923a-15e4-45a5-a33f-405cab4e5851-22210ca73bf1af2ec2eace74a96ee356&type=30&client_version=645&computer_name=Web&signkey=7500a0b60093164461658cde9d2b7447 HTTP/1.1 Host: wpa.chat.zalo.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:17 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:17 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding, User-Agent server: za-ngx-srv Strict-Transport-Security: max-age=31536000; includeSubdomains Access-Control-Allow-Credentials: true
2024-10-31 15:50:17 UTC	16076	IN	Data Raw: 39 30 64 66 0d 0a 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 30 2c 22 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 22 3a 22 53 75 63 63 65 73 73 66 75 6c 2e 22 2c 22 64 61 74 61 22 3a 7b 22 73 65 72 76 65 72 5f 74 69 6d 65 22 3a 31 37 33 30 33 38 39 38 31 37 2c 22 73 65 74 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 68 65 6e 22 3a 7b 22 70 61 73 73 77 5f 72 75 6c 65 73 22 3a 5b 7b 22 72 65 67 65 78 22 3a 22 5e 28 28 3f 3d 2e 2a 5b 30 2d 39 5d 29 28 3f 3d 2e 2a 5b 61 2d 7a 41 2d 5a 5d 29 2e 7b 36 2c 33 32 7d 29 24 22 2c 22 6d 73 67 22 3a 22 4d e1 ba ad 74 20 6b 68 e1 ba a9 75 20 70 68 e1 ba a3 69 20 63 c3 b3 20 c3 ad 74 20 6e 68 e1 ba a5 74 20 36 20 6b c3 bd 20 74 e1 bb b1 2c 20 6e 68 69 e1 bb 81 75 20 6e 68 e1 ba a5 74 20 33 32 20 6b c3 bd 20 74 e1 bb b1 20 76 c3 a0 Data Ascii: 90df{"error_code":0,"error_message":"Successful.","data":{"server_time":1730389817,"setttings":{"authen":{"passw_rules":[{"regex":"^((?=.[0-9])(?=.[a-zA-Z]).{6,32})$","msg":"Mt khu phi c t nht 6 k t, nhiu nht 32 k t v
2024-10-31 15:50:18 UTC	16384	IN	Data Raw: 6d 3d 75 70 67 72 61 64 65 5f 70 72 6f 66 69 6c 65 22 7d 2c 22 62 61 5f 70 6b 67 5f 63 6f 6e 66 69 67 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 7b 22 30 22 3a 31 2c 22 31 22 3a 31 2c 22 32 22 3a 31 2c 22 33 22 3a 31 2c 22 34 22 3a 31 2c 22 35 22 3a 31 2c 22 36 22 3a 31 7d 2c 22 66 65 61 5f 69 64 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 6c 69 6d 69 74 5f 73 65 61 72 63 68 5f 66 72 69 65 6e 64 5f 62 79 5f 70 68 6f 6e 65 5f 6d 6f 6e 74 68 6c 79 22 3a 7b 22 30 22 3a 33 30 2c 22 31 22 3a 35 30 2c 22 32 22 3a 31 32 30 2c 22 33 22 3a 32 30 30 30 2c 22 34 22 3a 32 30 30 2c 22 35 22 3a 2d 31 2c 22 36 22 3a 31 32 30 7d 7d 7d 2c 22 63 61 74 61 6c 6f 67 22 3a 7b 22 65 6e 61 62 6c 65 22 3a 7b 22 30 22 3a 30 2c 22 31 22 3a 31 2c 22 32 22 Data Ascii: m=upgrade_profile"},"ba_pkg_config":{"profile":{"enable":{"0":1,"1":1,"2":1,"3":1,"4":1,"5":1,"6":1},"fea_id":1,"config":{"limit_search_friend_by_phone_monthly":{"0":30,"1":50,"2":120,"3":2000,"4":200,"5":-1,"6":120}}},"catalog":{"enable":{"0":0,"1":1,"2"
2024-10-31 15:50:18 UTC	4640	IN	Data Raw: 32 30 31 39 2f 39 2f 32 33 2f 33 5f 31 35 36 39 32 32 38 33 36 39 37 37 35 5f 35 33 31 32 38 2e 6a 70 67 22 2c 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 7a 61 6c 6f 2e 7a 61 64 6e 2e 76 6e 2f 75 70 6c 6f 61 64 2f 6d 65 64 69 61 2f 32 30 31 39 2f 39 2f 32 33 2f 35 5f 31 35 36 39 32 32 38 33 36 39 38 37 31 5f 35 33 31 33 30 2e 6a 70 67 22 5d 2c 22 64 65 66 61 75 6c 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 76 65 72 2d 74 61 6c 6b 2e 7a 61 64 6e 2e 76 6e 2f 64 65 66 61 75 6c 74 22 7d 2c 22 65 4b 59 43 22 3a 7b 22 6d 6f 62 69 6c 65 5f 51 52 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 7a 61 6c 6f 2e 7a 61 64 6e 2e 76 6e 2f 75 70 6c 6f 61 64 2f 6d 65 64 69 61 2f 32 30 32 33 2f 31 30 2f 31 38 2f 71 72 5f 65 6b 79 63 5f 70 63 77 65 62 5f 31 36 39 37 36 31 Data Ascii: 2019/9/23/3_1569228369775_53128.jpg","https://res-zalo.zadn.vn/upload/media/2019/9/23/5_1569228369871_53130.jpg"],"defaultUrl":"https://cover-talk.zadn.vn/default"},"eKYC":{"mobile_QR":"https://res-zalo.zadn.vn/upload/media/2023/10/18/qr_ekyc_pcweb_169761

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49855	49.213.95.122	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:17 UTC	531	OUT	GET /mainless-worker.9c0875841efb5667ea74.js HTTP/1.1 Host: chat.zalo.me Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:18 UTC	372	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:17 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 27 Sep 2024 04:58:29 GMT ETag: W/"66f63b75-2bca4" Expires: Sat, 02 Nov 2024 04:01:07 GMT Cache-Control: max-age=259200 Cache-Control: public Content-Encoding: gzip server: za-ngx-srv X-Cache-Status: HIT
2024-10-31 15:50:18 UTC	16012	IN	Data Raw: 38 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 dc bd 7b 77 1b c9 b6 1f f6 55 c0 be e7 48 c0 65 03 02 40 8a a2 40 41 34 49 91 1a ce 88 12 87 a4 46 67 86 e2 e1 34 81 26 d1 22 d0 8d e9 6e 88 a4 28 78 1d c7 89 1d 27 4e 1c c7 79 3b 0f 3b ce d3 71 e2 bc 9d cc e4 b1 56 e6 dc fb 4f bc 56 3e 83 ee 27 c9 6f ef 5d 55 5d dd 68 52 9a b9 73 7d ef f2 39 23 a9 50 5d cf 5d bb f6 ab 76 ed 3a 3e fe c6 5b 7f f9 fc c9 b3 cd e7 6b 3b 9b c7 c7 5d 67 e4 05 e1 d0 4f 92 fa 45 14 9f fb b1 e3 1e 1f ef 6f ec 6d ef 1e 1c 1f 7c bd cb 25 2e fc 13 f3 d1 89 4e de f8 bd d4 99 eb a6 57 63 3f 3a ad 9c 0d a3 13 6f 78 30 08 92 3b 77 aa d9 8f 6e e2 0f 4f 6b ee e9 24 ec a5 41 14 56 fd da f5 5b 2f ae a4 dd eb e9 8a ce ac 84 d5 b8 76 1d 9c 56 d3 c3 f8 a8 16 fb e9 24 0e 2b 94 6e f8 97 e3 28 4e 93 Data Ascii: 8000{wUHe@@A4IFg4&"n(x'Ny;;qVOV>'o]U]hRs}9#P]]v:>[k;]gOEom\|%.NWc?:ox0;wnOk$AV[/vV$+n(N
2024-10-31 15:50:18 UTC	16384	IN	Data Raw: 42 7b f3 cd ee 53 4b 68 94 53 ec db 83 e7 67 82 bb 22 3f c2 7b 4e 71 00 1c c5 57 2b ce 24 d4 82 e2 9c d6 46 12 7f 08 71 83 fe 76 55 b1 12 5a 61 40 22 ed 65 81 f7 65 50 c9 f1 71 f7 7a 61 f1 fe 0c 21 21 d6 45 bb 13 57 7c e5 d0 fa c1 7d bc 55 4a 27 d6 cb 88 84 86 57 2f 70 aa 07 b7 9c e5 85 05 68 17 ba 93 8a 9c 25 5f 93 c7 08 c8 6c 26 a3 f9 ab cc 7e 24 9c 72 97 de 09 82 18 a8 1e 0f 55 99 2c 18 e2 19 1d dc d1 a2 07 29 e4 2d 02 7a 87 4b 7e a7 20 85 f2 ab 8b d3 61 70 1d 61 eb 78 b1 60 2d 3e a3 87 7a c1 6f 39 f9 fe bd ae 42 39 38 e2 d6 1f 29 99 d5 84 81 6a 72 b6 0b af 82 7d 18 96 89 6a e5 33 de bf 5f 5c 68 c3 97 9e 7b 09 61 e9 78 c5 6f 23 a0 5c f6 c3 1e a8 38 77 a8 51 d3 8f f7 ef ed a2 78 95 d0 9b 20 10 b3 54 c1 eb 28 5f 4e fc 89 4f f1 5c d1 a2 fd 13 57 0f ef a1 Data Ascii: B{SKhSg"?{NqW+$FqvUZa@"eePqza!!EW\|}UJ'W/ph%_l&~$rU,)-zK~ apax`->zo9B98)jr}j3_\h{axo#\8wQx T(_NO\W
2024-10-31 15:50:18 UTC	16384	IN	Data Raw: 1d 7d e3 b6 b5 37 3b 3b 33 38 ec 61 6b 33 39 f8 61 7b 46 cc 16 cc 66 c6 60 20 da d7 c1 cc 2f 10 ee 24 95 d3 82 57 c6 9f f7 66 18 22 04 fe ca 39 57 4a ee 8e c3 ce 76 84 75 69 78 5d 06 87 8a ce 8f d8 e4 d3 fd eb f3 e3 b0 e3 a4 dd 59 e4 eb 3a 55 c3 91 a3 27 ce aa 69 21 2c 8a 2d fc 61 22 60 ca ef a8 8d 93 df d3 86 a5 ca 91 46 ce a3 46 34 e5 08 d9 46 bd 9c 46 05 52 2a 9e a3 10 e0 87 46 67 e8 09 75 1d c7 56 46 9f 5f 41 5d 9a b8 be aa a8 de bd eb 2d 10 19 31 0f 7f 93 b0 58 cb 2c 6e 63 1a d7 05 4d dc 66 e6 8d 7c 33 82 79 20 c1 1a 62 35 1b 20 3b 03 97 26 20 56 23 24 22 52 15 ce c7 5a 44 55 64 c4 11 19 69 b1 b6 e2 8d c8 81 17 5e d8 c9 40 12 9a 8a 30 cd f8 ce 9d cb 1f 41 7b 00 79 29 de 0b 18 89 d3 0b a4 06 e3 0f f7 be c1 2a f7 cb 38 8f c4 a8 0f cd c5 61 60 5b 8c 0d Data Ascii: }7;;38ak39a{Ff` /$Wf"9WJvuix]Y:U'i!,-a"`FF4FFRFguVF_A]-1X,ncMf\|3y b5 ;& V#$"RZDUdi^@0A{y)8a`[
2024-10-31 15:50:18 UTC	13314	IN	Data Raw: 0c dc ea 20 40 bb 06 08 ae 8a f1 0a 08 1a a9 a8 f4 df dc d2 aa 98 76 f0 a2 70 3a 2a 29 fb bd 9e a3 5e fd 11 75 83 12 07 a2 35 b6 7a 01 04 78 f1 80 33 2d 43 1f e2 0b 63 00 1e e9 a4 28 90 78 11 46 81 57 05 56 01 37 d2 93 e2 4f 8a 7f f3 bd 43 02 42 46 7d b1 65 0a 91 72 67 a2 9e c8 69 80 24 0c 15 8f 56 42 b4 e6 81 aa 1c e9 91 aa 0a 99 ba 87 eb 7f 84 19 c3 3e 8f 87 3d 46 f7 e8 1c 9f ad 93 35 b9 2e fa 0a 97 32 de 15 04 0e f5 8b fb bd 79 8d f7 55 56 cd 3e c4 fb 0a 45 27 14 82 21 e6 6c 98 aa 03 8a 43 57 95 76 e4 76 ac f9 00 db 87 99 66 04 3c 8a 05 ce f8 26 15 13 fc 70 0b 12 56 88 13 86 e6 e6 d5 e0 89 9a 1e ce 0a f4 14 17 cd 42 4b 24 86 75 ab 0c 33 05 1d 70 81 b3 c5 43 3a 3d 77 35 5d fc 36 c8 98 f2 66 f3 cf 75 4f 2c aa 9b c4 fb d4 a8 f3 2a 1e 79 47 9d da c7 3f 06 Data Ascii: @vp:)^u5zx3-Cc(xFWV7OCBF}ergi$VB>=F5.2yUV>E'!lCWvvf<&pVBK$u3pC:=w5]6fuO,yG?

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:17 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:18 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:18 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: f43c7883-001e-0028-37e0-2ac49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155018Z-159b85dff8f5bl2qhC1DFWs6cn00000001s0000000005xxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 15:50:18 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:17 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:18 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 751cc90e-701e-003e-1dbd-2a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155018Z-159b85dff8fprglthC1DFW8zcg00000001kg000000006pm2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:18 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:17 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:17 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155017Z-16849878b78x44pv2mpb0dd37w00000001t000000000prky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:18 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:17 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:18 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155018Z-15b8d89586fmhkw429ba5n22m80000000bag000000002dda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:18 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49853	49.213.95.43	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:17 UTC	377	OUT	GET /images/icons/image25_1484838643007.png HTTP/1.1 Host: stc-chat.zdn.vn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:18 UTC	276	IN	HTTP/1.1 200 OK Server: ATS-5-56 Date: Thu, 31 Oct 2024 04:10:06 GMT Content-Type: image/png Content-Length: 21769 Last-Modified: Mon, 28 May 2018 03:11:29 GMT Access-Control-Allow-Origin: * Accept-Ranges: bytes Etag: "5b0b7361-5509" Age: 42012 Connection: close
2024-10-31 15:50:18 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 54 96 49 44 41 54 78 da ec bd 09 a0 1c d5 79 26 fa 9f 53 bd f7 dd 37 6d 68 03 24 19 10 20 4c 58 6d 9e b0 03 71 c6 93 04 8c 13 6f 49 9e b1 e3 38 ce 4c 12 84 33 8b f3 ec 89 f1 3c c7 cf cf 59 2c 27 99 e7 bc c4 0b bc 89 9d bc c4 c6 78 89 6d 6c 83 c1 66 5f 05 08 90 04 92 ae b6 ab e5 2e ba fb ed db dd 55 67 fe ff 2c 55 a7 96 ee db 92 10 48 a2 0e 94 ba 6f 77 75 77 d5 f9 ff ef df cf 7f 98 10 02 d2 91 8e 74 24 0f 9e 4e 41 3a d2 91 02 24 1d e9 48 01 92 8e 74 a4 00 49 47 3a 52 80 a4 23 1d 29 Data Ascii: PNGIHDRXpHYstEXtSoftwareAdobe ImageReadyqe<TIDATxy&S7mh$ LXmqoI8L3<Y,'xmlf_.Ug,UHowuwt$NA:$HtIG:R#)
2024-10-31 15:50:18 UTC	5385	IN	Data Raw: 20 b4 92 60 ea 9a d0 64 a8 ec a6 e2 24 3f 43 1b 5a bf 52 f3 09 7b df 19 06 10 75 6f 91 f5 15 50 47 0d 32 87 42 70 e6 45 95 bf 88 2d 45 06 25 60 ea 33 a1 8a 05 3f 79 98 21 bf ee 0a 60 b9 c5 f1 0d 78 a2 e5 28 c6 37 cc 75 5b 45 89 8d aa 7c 2d 33 1c ac e7 ce a2 38 df 99 dc 15 6a 49 6f 6b 37 f2 6a 41 f2 ec bf 4e df 04 75 d5 0c 7d bd bd 93 ed 09 03 c4 d4 5c 75 53 15 64 e7 4a f8 41 f6 23 30 e9 2c 07 6f d4 01 ef 61 94 36 87 8b 09 6b 0d 4a 38 17 6d 11 ff c2 ca 49 f0 84 65 96 66 92 a9 36 27 53 88 24 fd b4 0f e2 64 82 e7 46 a5 53 23 6c ca c1 f0 7c 38 44 ec 57 e6 4d 85 3b 2b 86 d6 42 93 44 9c 0c ea 78 ac f5 2b 52 89 cc 33 53 da be e5 4c 41 87 be 97 7d f2 de 58 c2 fa 0a 0a f7 ba 13 56 be 8a 45 c2 f2 8e 6a e2 67 4c a0 d0 1a f5 12 7e 76 46 09 1e 1b 18 c6 ef 90 f4 cb 84 Data Ascii: `d$?CZR{uoPG2BpE-E%`3?y!`x(7u[E\|-38jIok7jANu}\uSdJA#0,oa6kJ8mIef6'S$dFS#l\|8DWM;+BDx+R3SLA}XVEjgL~vF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49863	171.244.25.71	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:19 UTC	655	OUT	GET /v1/fonts/Zalo-Segoe-UI.dc1a7d868a0b3a0e2daa8b36567e9ea9.ttf HTTP/1.1 Host: zalo-chat-static.zadn.vn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://chat.zalo.me sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://zalo-chat-static.zadn.vn/v1/web-startup.8f6f137d5bc84bfef54f.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 15:50:19 UTC	17	IN	HTTP/1.1 200 OK
2024-10-31 15:50:19 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2024-10-31 15:50:19 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2024-10-31 15:50:19 UTC	18	IN	Data Raw: 53 65 72 76 65 72 3a 20 55 6e 69 76 65 72 73 65 0d 0a Data Ascii: Server: Universe
2024-10-31 15:50:19 UTC	30	IN	Data Raw: 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 0d 0a Data Ascii: X-Robots-Tag: noindex,follow
2024-10-31 15:50:19 UTC	46	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 37 37 36 30 30 30 2c 20 6e 6f 2d 74 72 61 6e 73 66 6f 72 6d 0d 0a Data Ascii: Cache-Control: max-age=7776000, no-transform
2024-10-31 15:50:19 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4a 61 6e 20 32 30 32 35 20 31 35 3a 35 30 3a 31 39 20 47 4d 54 0d 0a Data Ascii: Expires: Wed, 29 Jan 2025 15:50:19 GMT
2024-10-31 15:50:19 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 39 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 31 Oct 2024 15:50:19 GMT
2024-10-31 15:50:19 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 33 31 20 4f 63 74 20 32 30 32 34 20 31 35 3a 35 30 3a 31 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 31 Oct 2024 15:50:19 GMT
2024-10-31 15:50:19 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a Data Ascii: Connection: Close
2024-10-31 15:50:19 UTC	24	IN	Data Raw: 45 54 61 67 3a 20 22 36 36 64 38 30 64 38 61 2d 34 38 61 31 38 22 0d 0a Data Ascii: ETag: "66d80d8a-48a18"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49864	49.213.95.230	443	6448	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:19 UTC	872	OUT	GET /account?continue=https%3A%2F%2Fchat.zalo.me%2F HTTP/1.1 Host: id.zalo.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://chat.zalo.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _zlang=vn; __zi=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1; __zi-legacy=2000.QOBlzDCV2uGerkFzm09Jq6RSu__73r_HBzdj_eiDKDidskR_C3a.1
2024-10-31 15:50:19 UTC	1839	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:19 GMT Content-Length: 4758 Connection: close Content-Security-Policy: upgrade-insecure-requests; default-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com .googleapis.com; style-src 'self' 'unsafe-inline' .zalo.me .zadn.vn .zdn.vn blob:; font-src data:; img-src * data: blob:; media-src * blob:; connect-src 'self' wss://.chat.zalo.me .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me .google.com www.google-analytics.com www.gstatic.com stats.g.doubleclick.net blob:; child-src 'self' .zalo.me .zdn.vn .zadn.vn .zaloapp.com .zing.vn .baomoi.com .zingtv.vn .zingmp3.vn .zalo.ai .zingnews.vn .zapps.vn .officialaccount.me www.facebook.com .zalo.me .google.com .youtube.com .googleapis.com .soundcloud.com .live.com blob:;frame-src 'self [TRUNCATED] Set-Cookie: zpdid=4X7xa57ngZSS4fAONlJ5DHCOcffV-SKm; Max-Age=157680000; Domain=.id.zalo.me; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: zlogin_session=kW4JGLyjCnIxFnDDLXTbH-Tj0aTK66zFvMmNNGnHOLUkBG9K059ZKAuj0b00Ls52VG; Max-Age=3600; Domain=.id.zalo.me; Path=/; HttpOnly; Secure; SameSite=Lax Vary: Accept-Encoding, User-Agent server: za-ngx-srv X-Forwarded-Proto: https FRONT_END_HTTPS: on Strict-Transport-Security: max-age=86400; includeSubDomains
2024-10-31 15:50:19 UTC	4758	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 64 61 6e 67 20 6e 68 61 70 20 7a 61 6c 6f 2c 20 7a 61 6c 6f 20 77 65 62 2c 20 64 61 6e 67 20 6e 68 61 70 20 7a 61 6c 6f 20 77 65 62 2e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta name="robots" content="noindex"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="keywords" content="dang nhap zalo, zalo web, dang nhap zalo web."> <meta name="description" c

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49870	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:20 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 46 4b 7a 76 43 2b 71 4f 54 30 61 4d 68 58 52 44 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 31 33 65 32 33 34 38 66 66 36 38 65 30 30 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: FKzvC+qOT0aMhXRD.1Context: 513e2348ff68e00c
2024-10-31 15:50:20 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-31 15:50:20 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 46 4b 7a 76 43 2b 71 4f 54 30 61 4d 68 58 52 44 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 31 33 65 32 33 34 38 66 66 36 38 65 30 30 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 77 73 69 55 70 51 6b 4e 68 56 59 6f 6b 6c 4d 6c 53 62 7a 4a 77 57 43 51 67 6e 4f 36 34 50 30 35 33 78 71 55 5a 6a 77 4b 7a 52 41 68 59 65 76 34 73 6a 31 7a 46 63 6e 41 6d 73 53 2b 4f 58 41 6f 59 6c 7a 64 58 44 4b 5a 65 39 76 53 62 57 4a 71 2b 38 6a 31 4b 70 59 4e 59 39 46 58 52 5a 55 46 4b 38 4c 2b 79 52 32 38 79 79 56 4f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: FKzvC+qOT0aMhXRD.2Context: 513e2348ff68e00c<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVwsiUpQkNhVYoklMlSbzJwWCQgnO64P053xqUZjwKzRAhYev4sj1zFcnAmsS+OXAoYlzdXDKZe9vSbWJq+8j1KpYNY9FXRZUFK8L+yR28yyVO
2024-10-31 15:50:20 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 46 4b 7a 76 43 2b 71 4f 54 30 61 4d 68 58 52 44 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 31 33 65 32 33 34 38 66 66 36 38 65 30 30 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: FKzvC+qOT0aMhXRD.3Context: 513e2348ff68e00c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-31 15:50:21 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-31 15:50:21 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2f 69 6b 66 6d 6c 62 38 33 30 75 77 30 44 71 4a 31 6a 38 67 37 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: /ikfmlb830uw0DqJ1j8g7Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:20 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:20 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155020Z-15b8d89586fhl2qtatrz3vfkf00000000g4g0000000048ga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:21 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:20 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:21 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:20 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8964bec7-001e-005a-3570-2ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155020Z-159b85dff8f9g9g4hC1DFW9n7000000001x0000000000x3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:21 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:20 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:20 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: f3c8e2ed-001e-0049-7afa-285bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155020Z-15b8d89586fxdh48ft0acdbg4400000003g000000000dek6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:21 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:20 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:20 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: a1443afe-101e-00a2-13ee-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155020Z-15b8d89586f6nn8zqg1h5suba800000004vg00000000mgmf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:21 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:22 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155022Z-16849878b78sx229w7g7at4nkg00000007x000000000r3de x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:23 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 15:50:22 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 15:50:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 15:50:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 763d968a-101e-008d-1b2e-2b92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T155022Z-15b8d89586f42m673h1quuee4s0000000du000000000ckgv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 15:50:23 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Target ID:	0
Start time:	11:49:47
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:49:50
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1868 --field-trial-handle=2004,i,1877857276422922661,5910162750148439755,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:49:53
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chat.zalo.me/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	11:50:33
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://zaloapp.com/qr/l?tk=zaloqr:v2_IZ9PGZGkCIunDpCmCpWvE38vDp0qBZHXDcKvPZauCM9bC6GtPZGpEJapDcOmOJGoPZPbOpGn
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	11:50:33
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1976,i,8142727034678412112,14103828550631631722,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://chat.zalo.me/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Windows Analysis Report
https://chat.zalo.me/